Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer
File:                     85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer (raw, json)
Hash identifier:          Ao9/2fBObymimVV6uxO8UyIP84ejoehusclcoVbPLY8=
Subject key identifier:   2C:72:18:35:71:B0:C8:72:9F:62:E5:A0:DC:9F:FB:6D:49:D1:E0:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF4F9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:47 +0000
Certificate not after:    Thu 25 Jul 2024 21:09:54 +0000
Subordinate resources:    IP: 143.202.12.0/22
                          IP: 2803:8e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15683482 (0xef4f9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:47 2017 GMT
            Not After : Jul 25 21:09:54 2024 GMT
        Subject: CN=85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:5f:7b:3f:29:a8:10:cc:2f:03:f9:5b:0d:
                    ee:b1:54:57:7f:f2:5c:80:cb:70:c2:1f:7f:d4:e7:
                    87:02:0d:c5:a5:db:a6:64:2f:d8:86:16:f3:50:f0:
                    4a:67:11:03:cd:dc:3b:d9:64:e7:ec:c9:c8:98:7b:
                    bd:fb:8d:b5:51:85:d9:23:4f:19:02:85:64:dd:fa:
                    9f:7a:67:34:37:78:3f:33:09:eb:66:47:f7:d2:55:
                    db:2f:ef:9f:f0:ce:e4:08:91:8b:47:40:29:01:44:
                    cb:f0:1c:58:2a:e7:37:3e:f1:a8:a3:b8:b8:5e:ba:
                    44:10:5c:c0:a1:75:d4:ad:cb:2d:e8:52:4d:bf:95:
                    fe:ab:5f:65:98:4e:d3:35:42:63:6d:96:32:3f:47:
                    9d:12:ea:3e:e3:8b:a0:bc:06:56:d8:ef:5a:ef:48:
                    7c:ca:43:30:68:e6:73:90:d0:6d:50:f9:5d:a7:ad:
                    05:44:c9:f6:f7:01:91:36:96:bb:0f:a1:d6:8b:52:
                    22:04:92:60:69:38:d6:44:94:a7:88:a6:ee:f9:4a:
                    c9:75:db:ba:a0:52:05:e0:b7:90:71:e1:05:48:3f:
                    90:0e:e7:d2:ae:ea:42:be:ef:51:08:35:4b:8b:e2:
                    47:72:eb:67:e3:62:5a:d4:2a:e5:7b:e5:32:3c:5b:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:72:18:35:71:B0:C8:72:9F:62:E5:A0:DC:9F:FB:6D:49:D1:E0:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.12.0/22
                IPv6:
                  2803:8e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:c3:aa:3b:95:4d:7e:05:98:94:89:94:0d:b1:fa:04:3f:
         04:e9:a3:3f:4c:48:16:5f:00:73:47:bd:a9:e1:7e:a9:c7:24:
         68:d6:09:cf:81:d6:c1:d0:37:90:8a:4e:99:5b:c6:a4:7d:fc:
         69:e6:32:59:89:27:4a:24:ad:d0:df:55:23:56:d3:bc:bc:d7:
         e0:d9:af:d6:10:18:7d:aa:a7:f9:df:8b:6d:cd:f6:c4:d6:55:
         7b:78:33:de:ae:19:dc:6e:b1:12:15:2f:e3:b9:5b:e3:bb:22:
         0b:e1:fa:45:46:2c:03:da:69:c3:96:f8:79:1b:60:81:76:64:
         5f:e9:a6:06:3c:4b:33:4b:e3:bd:01:c8:c8:00:d9:c3:ec:e5:
         8d:08:a7:29:8b:69:17:c2:6f:b8:24:84:5b:f1:7a:02:03:03:
         47:db:5d:8f:93:0e:88:c2:c0:ed:c9:c0:cb:ed:b5:2b:ea:7f:
         04:b2:29:e7:90:35:b6:ea:29:3a:76:b0:bd:b4:62:bf:fe:6e:
         d5:d1:a0:cd:02:e9:93:c0:16:5f:73:00:b0:3b:c5:e0:cc:32:
         b6:23:c9:49:d4:70:67:9a:5b:d8:c1:3c:ec:82:44:28:26:0a:
         25:c3:f5:03:ba:ad:f5:4c:8a:de:3d:2a:03:f5:7e:d5:57:c0:
         57:85:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----