Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/894b5351c116ccb46fa4b4ec91307121eab43a5b.cer
File:                     894b5351c116ccb46fa4b4ec91307121eab43a5b.cer (raw, json)
Hash identifier:          G6fnQJhar6Q7xW7T4ANNIyMW9mIxEmM1Yi7RkXI/XV8=
Subject key identifier:   9A:0F:2A:83:C2:BE:B0:5A:20:87:11:3C:45:86:F7:4E:81:EA:65:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7D534
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b9f01aae-6d59-46c7-82fa-118206db815c/894b5351c116ccb46fa4b4ec91307121eab43a5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b9f01aae-6d59-46c7-82fa-118206db815c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Jul 2018 15:06:48 +0000
Certificate not after:    Fri 31 May 2024 16:50:28 +0000
Subordinate resources:    IP: 2801:16:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15193396 (0xe7d534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 15:06:48 2018 GMT
            Not After : May 31 16:50:28 2024 GMT
        Subject: CN=894b5351c116ccb46fa4b4ec91307121eab43a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:f3:62:77:8e:81:ac:52:fd:16:6e:bf:9e:
                    0e:95:33:4e:f9:40:a6:41:33:ba:39:c2:4a:2d:09:
                    d8:c1:3c:5a:a0:f7:96:b7:5a:ba:17:6f:a7:f3:e1:
                    3c:53:03:c4:fb:c2:5f:0b:18:4f:03:0d:88:93:36:
                    9f:48:0c:31:a2:fb:be:80:19:5f:31:85:4f:40:81:
                    4a:f4:6b:82:9f:a2:e8:93:08:5a:e0:e9:83:64:83:
                    d7:c1:5a:5d:65:f5:96:c3:3f:5b:02:19:c2:2e:58:
                    6e:e8:b3:ec:55:d8:81:28:6c:8e:44:59:d8:ca:88:
                    11:3b:57:98:d1:03:d9:c6:0b:af:a8:9b:86:b4:2f:
                    5e:82:d1:23:78:28:4a:2e:0a:5a:20:2f:69:34:dc:
                    3b:9a:19:3a:b8:8c:dd:fb:40:88:24:e5:fd:8e:e4:
                    60:c5:a8:7c:c6:4b:19:a5:4a:33:e5:4e:e3:50:ef:
                    5f:15:2b:00:0b:15:21:76:9c:1c:07:8b:d6:ad:8b:
                    d1:48:25:0e:9e:cd:a8:d0:7b:b7:65:64:64:bb:56:
                    15:70:7e:be:39:2b:f1:cd:bf:0e:70:6e:c0:84:a2:
                    94:00:f7:2a:eb:dc:c7:cb:7f:70:8f:71:a3:bc:56:
                    01:44:4a:c0:34:d9:b7:b8:4d:da:80:fe:ce:7f:99:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0F:2A:83:C2:BE:B0:5A:20:87:11:3C:45:86:F7:4E:81:EA:65:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b9f01aae-6d59-46c7-82fa-118206db815c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b9f01aae-6d59-46c7-82fa-118206db815c/894b5351c116ccb46fa4b4ec91307121eab43a5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:b6:2d:60:9c:fd:15:e7:83:95:b6:0b:30:94:eb:9b:45:
         e8:63:64:c6:39:59:a6:cd:00:72:2a:74:6a:80:e1:28:c5:d2:
         f7:28:19:cb:fe:d3:40:f6:fa:78:fa:c9:f1:d9:32:3a:1e:8f:
         a0:7a:f7:9f:02:76:24:16:15:95:ef:77:d4:ad:2a:34:a4:ee:
         24:a3:d2:6e:e1:0a:ec:ea:d4:cf:e6:80:e4:32:46:95:26:2a:
         00:0f:a1:79:35:40:a9:52:37:40:73:90:5d:96:4e:b8:ed:c3:
         cc:2f:b3:c6:8c:8f:29:11:80:c0:e8:47:67:80:db:e8:58:17:
         88:ce:2b:12:63:b8:4b:8e:e1:f4:db:4d:db:b5:fd:2c:97:90:
         7f:1e:b5:37:bd:90:69:31:af:a1:89:9c:c2:8e:2e:ac:14:73:
         4e:a4:55:8b:b6:03:43:1f:17:0a:a3:f9:c3:43:6b:db:37:53:
         96:9a:7a:7b:6b:dd:46:63:d8:14:8d:66:83:6c:3a:ea:e0:ff:
         df:7f:4a:f2:54:ce:9e:0a:cc:98:98:01:de:1f:28:33:5c:33:
         77:d3:43:e8:db:29:ef:29:31:bd:45:49:dd:06:63:f4:cd:44:
         13:e1:88:6e:fb:80:98:a9:e1:ac:38:e2:72:99:44:49:42:f9:
         6d:b0:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----