Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer
File:                     8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer (raw, json)
Hash identifier:          QuuN/Mdluo/bVLanMAshq0RGXZVwH4YeEOV6DVVY+fI=
Subject key identifier:   8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D90A86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:13 +0000
Certificate not after:    Sun 07 Jan 2024 14:48:41 +0000
Subordinate resources:    IP: 45.4.88.0/22
                          IP: 2803:6ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14224006 (0xd90a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:13 2017 GMT
            Not After : Jan  7 14:48:41 2024 GMT
        Subject: CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:37:1a:cf:3c:64:ae:0f:6a:b5:a2:74:4b:aa:
                    12:75:e7:28:71:3e:93:c1:75:ae:ad:9c:ea:b8:c4:
                    a5:46:d9:c3:a2:3e:e4:bc:ad:4c:45:7d:60:61:ad:
                    5a:bf:0c:dc:f3:11:23:9a:7d:5f:a8:41:ec:82:fa:
                    b0:28:47:59:c3:24:02:37:ab:16:af:ec:9d:5c:b3:
                    c7:03:5b:ac:64:2f:82:75:61:6a:72:62:25:6a:89:
                    f6:d6:33:01:ee:99:ca:5d:d1:da:cd:ab:04:29:0c:
                    25:21:75:96:ec:27:22:03:16:7c:d3:f1:b5:a5:59:
                    a4:cc:70:aa:a3:e4:35:f8:c1:ae:aa:54:62:43:d7:
                    c8:f3:9b:51:48:a4:b4:2f:07:e0:e1:1c:35:8c:ed:
                    1a:1b:0c:e4:94:89:b8:a3:c1:34:bf:4c:6b:be:33:
                    4b:d4:6b:b5:58:79:99:1e:be:42:c9:9b:4a:af:f6:
                    fd:27:68:d9:c1:7b:4c:79:ff:4e:93:ea:3a:76:29:
                    c8:f6:00:a8:06:70:6d:23:c9:ea:d9:96:36:01:62:
                    ac:98:ce:7c:4f:8c:3e:cf:9e:55:84:c3:45:81:ac:
                    ba:3f:cb:dd:b8:2a:0e:57:c4:ea:00:b5:5b:8d:b5:
                    99:f2:8f:44:60:c7:ba:3a:71:b7:4e:2f:f1:a9:ea:
                    5d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.88.0/22
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:4a:f2:f9:f5:c3:15:27:ed:a9:63:43:68:f1:a6:b9:fa:00:
         e3:9f:b4:ba:fa:e1:e8:77:8b:55:e8:78:86:f9:de:79:17:69:
         df:ce:a0:f2:80:96:88:76:72:d2:c0:fb:da:2a:4a:fc:51:99:
         f3:de:0f:6f:76:e7:b9:e6:a1:b8:35:63:a4:0e:d0:7b:17:f6:
         a8:b3:8c:a9:36:9b:4c:89:47:cd:33:12:be:ad:5e:b6:07:f7:
         59:d2:b5:64:46:67:a8:21:fd:c1:f7:a8:2b:7f:f1:54:c5:13:
         5e:af:1c:f3:45:b9:38:f3:cb:dc:bd:de:f1:00:33:d7:7c:65:
         17:8a:3b:b2:92:ef:f9:1a:48:b7:a0:cb:6a:ff:e5:f0:77:46:
         da:7e:32:73:97:61:c8:1d:7d:83:bd:43:d6:86:ff:2f:37:ec:
         30:4f:f6:ee:56:0a:25:70:f1:ff:51:8f:46:9a:b8:7b:ad:5d:
         d6:8e:b1:e3:23:57:ce:fa:33:ed:7c:49:dd:3b:69:dd:24:11:
         11:76:bb:7a:47:b0:b9:57:7e:19:a6:5e:60:31:c8:7d:39:6c:
         6b:65:fb:7c:2c:1b:cc:7c:54:31:20:7d:9b:d3:aa:0e:b8:28:
         94:4e:df:2a:ab:50:0e:98:fe:c7:17:f7:26:f9:36:aa:02:e2:
         65:53:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----