Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9cb5e6af42fe0b3952f04c0400038291a3632e.cer
File:                     8b9cb5e6af42fe0b3952f04c0400038291a3632e.cer (raw, json)
Hash identifier:          cEvaW+3Zlyqtxet3slQjHmJTjL3twcVJa/KplTJXD1k=
Subject key identifier:   C1:F4:33:D9:5C:DC:0F:2B:48:89:D1:F8:A5:85:87:F5:C3:FC:1B:38
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4E472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/8b9cb5e6af42fe0b3952f04c0400038291a3632e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Aug 2018 21:23:46 +0000
Certificate not after:    Sun 12 May 2024 16:41:00 +0000
Subordinate resources:    AS: 266848
                          IP: 45.238.196.0/22
                          IP: 2801:12:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15000690 (0xe4e472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 17 21:23:46 2018 GMT
            Not After : May 12 16:41:00 2024 GMT
        Subject: CN=8b9cb5e6af42fe0b3952f04c0400038291a3632e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:b2:2b:44:6f:f3:fa:25:d4:1c:f5:5f:fe:
                    77:60:71:eb:c8:43:2c:4b:ef:4e:17:6d:0b:76:7c:
                    7a:43:2e:8b:d4:c5:f3:e7:14:fe:ba:1e:70:22:1a:
                    63:b6:f9:4d:6e:42:0f:4f:5b:f4:70:bd:d0:28:df:
                    07:7f:6b:c5:86:f1:74:21:b2:58:cb:38:71:bb:cb:
                    c9:00:0a:30:4a:9d:7d:20:69:79:bf:a1:2d:89:9c:
                    a3:3f:f4:a6:aa:b5:be:de:e6:d8:46:e9:21:71:d0:
                    c5:2e:28:25:89:92:f0:1c:42:aa:87:c9:65:b5:6a:
                    ab:d9:b9:62:1c:6b:8a:66:48:25:05:72:9b:49:fa:
                    66:b4:82:15:92:46:8c:88:b8:65:63:46:a6:c8:c7:
                    2c:08:42:33:5d:f8:75:e1:43:eb:f7:6b:61:b0:0c:
                    8b:b2:68:0f:26:67:06:e9:26:a2:a2:95:cd:8e:97:
                    ab:ad:52:9e:e4:db:84:27:aa:fb:bf:a5:ce:54:e3:
                    32:2c:ff:26:1d:6b:33:e4:7c:df:7d:c3:a5:72:a5:
                    8a:62:e5:55:3d:ff:72:ef:74:91:67:ff:93:b2:fc:
                    f9:d9:5e:bb:ed:54:1e:0f:cd:77:18:ee:b1:1e:81:
                    74:22:a8:78:3c:26:f8:90:8b:5f:46:e3:4e:f8:0a:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F4:33:D9:5C:DC:0F:2B:48:89:D1:F8:A5:85:87:F5:C3:FC:1B:38
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/8b9cb5e6af42fe0b3952f04c0400038291a3632e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.196.0/22
                IPv6:
                  2801:12:f000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266848

    Signature Algorithm: sha256WithRSAEncryption
         79:49:52:38:af:b1:c3:bf:f7:3c:a0:1b:0a:50:bf:2e:cc:18:
         1d:b8:1f:86:70:80:bc:ce:7b:5e:2d:bd:96:22:fe:e7:52:2f:
         20:cc:6d:59:a2:54:9c:dc:f9:6e:ef:9c:c8:17:fb:14:32:10:
         a2:03:e2:bb:1f:9f:35:13:0b:cd:56:29:71:cc:6a:b8:cf:78:
         51:57:1c:3f:bd:7b:45:46:37:49:36:30:d7:d6:f3:e6:22:d4:
         19:88:6d:98:e4:04:b7:7a:05:a8:cd:e5:23:e2:b7:0f:45:ce:
         93:05:b7:9e:e6:d9:47:b8:62:7e:4a:9a:1f:19:40:0b:01:85:
         50:41:23:45:a3:5e:50:1d:e6:52:b7:60:09:b0:2f:16:fe:f0:
         1c:fd:85:df:95:e5:78:59:1f:c6:dc:f3:06:ac:57:a6:4a:fd:
         ef:9d:17:cd:05:18:4f:5f:74:4d:5b:a3:13:01:3b:3c:e2:93:
         02:5e:4e:44:a4:b1:58:c8:6d:5e:3d:b8:75:ff:70:08:5a:58:
         c1:2a:ba:db:ca:00:d0:d8:3a:6d:56:aa:6f:cf:b8:36:f0:9a:
         38:c3:49:89:7b:6c:1c:0b:95:84:ae:8e:ba:ad:c7:cd:00:ad:
         99:38:29:95:65:d6:e3:3e:f3:60:ca:a2:13:5e:db:39:49:0d:
         8e:a9:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----