Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
File:                     8cca422c9ff30980ab758c3310c2e40a2e836482.cer (raw, json)
Hash identifier:          gog4ToluXQ48gfttgySgdHN9TPE+YJOnNEoKGeBcCzU=
Subject key identifier:   2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E54DA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Mon 13 May 2024 21:53:04 +0000
Subordinate resources:    AS: 263798
                          IP: 138.186.20.0/22
                          IP: 190.61.32.0/19
                          IP: 2803:bc40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15027618 (0xe54da2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : May 13 21:53:04 2024 GMT
        Subject: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:63:39:b4:6d:5e:04:34:01:06:4e:05:0f:
                    56:72:55:3e:af:29:b0:da:ed:39:a0:53:cc:3b:09:
                    5e:8c:bb:3e:d9:93:57:66:2d:f2:7e:0c:3a:9e:85:
                    f6:5d:58:8b:bf:a2:82:fd:65:d4:a9:7b:18:e6:b0:
                    fc:21:c5:f7:cf:24:9c:33:79:cf:d7:31:0e:5c:3b:
                    27:e9:13:ce:bc:fd:02:0d:49:f3:0e:1c:ab:1a:48:
                    cc:fc:cc:d2:c7:f5:df:76:d3:b4:f5:62:4e:be:c1:
                    e3:8f:d7:08:86:2e:3f:eb:cb:a4:73:c0:ad:74:6a:
                    58:13:f3:8d:2a:d0:f2:a6:06:97:8a:15:f4:c7:42:
                    f6:4d:47:9c:dc:4e:fa:90:04:40:3e:50:c7:a0:b5:
                    90:f5:b0:d5:45:27:78:bd:87:48:41:06:e1:0a:90:
                    39:d7:4a:cb:d0:88:55:f7:c6:c2:34:40:5e:7f:96:
                    73:63:0b:ea:58:aa:e9:18:bc:66:98:f9:28:ba:6a:
                    8c:ad:84:b3:c3:33:49:b4:ed:f7:9a:5f:57:93:2a:
                    b7:b0:40:eb:25:23:83:9d:13:88:3d:cf:39:6e:a1:
                    b8:ed:0f:39:e1:7b:56:fc:58:b8:03:2b:43:69:e5:
                    ee:1d:01:26:ba:8e:c6:23:22:b6:8e:97:3f:78:0d:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.20.0/22
                  190.61.32.0/19
                IPv6:
                  2803:bc40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263798

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:1c:77:e0:e2:5d:b9:f2:96:81:7f:fa:2b:8c:92:43:c6:
         c2:fe:1d:17:cc:fb:78:11:68:56:70:a7:0e:62:84:fb:de:49:
         11:db:a8:af:72:73:ae:32:8d:0d:30:1d:96:e7:b2:f0:95:09:
         3a:08:6c:b1:9e:e8:43:d2:5c:0b:06:86:c8:31:78:14:1b:02:
         5f:c4:f0:ed:15:11:29:a3:b3:6b:59:9c:a1:84:ae:0c:82:4e:
         ae:be:aa:30:f6:e2:39:72:01:cd:98:8a:34:d9:75:05:f3:06:
         1a:bc:ec:9a:8e:fb:0e:2a:44:44:cc:ec:6e:80:66:9a:35:7d:
         62:ea:21:3e:1d:ca:e0:76:6b:95:ba:7d:ce:04:2a:b4:cd:37:
         e1:90:d2:e2:67:ee:cc:ff:28:5c:1c:04:94:54:65:fc:b6:47:
         74:9d:bf:35:1f:6c:01:ab:1e:81:42:6d:5c:6b:0a:a9:a8:a5:
         0e:6a:74:94:00:d0:bf:30:d2:ef:da:97:65:fa:d9:bd:b6:d9:
         5c:2a:34:b5:6f:26:46:d6:f5:1a:c7:a5:48:0a:d0:7b:52:37:
         c0:e0:9f:8c:ef:54:ca:f4:97:b3:d7:3a:8c:1d:c4:f9:87:00:
         5e:4d:4b:7c:4d:58:76:32:f6:f5:ad:eb:dd:6f:e4:88:f2:2a:
         9a:d7:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----