Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
File:                     8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer (raw, json)
Hash identifier:          pc25uizwlRwZug3sT65WfP/v7VL0jlYKgOXhrH2yHqU=
Subject key identifier:   7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0D7E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:15 +0000
Certificate not after:    Mon 05 Aug 2024 21:59:31 +0000
Subordinate resources:    IP: 45.224.152.0/22
                          IP: 2803:fc20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15783907 (0xf0d7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:15 2017 GMT
            Not After : Aug  5 21:59:31 2024 GMT
        Subject: CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:45:0a:52:2a:63:7e:fb:a1:f6:64:11:80:
                    d5:06:c8:a3:d1:37:92:f9:b1:ea:01:18:23:b2:a5:
                    d1:fd:35:f8:d6:23:0d:29:10:1e:2d:c4:ca:ea:7f:
                    3b:27:f7:02:00:00:e6:0c:c0:f5:4c:db:c7:af:6a:
                    2e:e7:91:7b:45:c6:25:b9:6f:86:9d:4d:c0:4e:ee:
                    84:42:e5:8c:77:8a:11:46:e8:4b:db:56:8c:7d:d6:
                    8f:a9:0b:62:2c:c0:f5:2d:4c:7e:6f:a0:23:5e:b7:
                    5a:05:b9:7c:94:fc:86:41:e9:9c:e6:5e:3d:b6:b8:
                    66:71:5c:f0:64:62:8f:32:de:31:d9:49:78:93:69:
                    36:34:b2:08:5b:bc:e5:c0:c6:b3:07:a3:87:65:63:
                    18:05:d1:ba:32:f8:2d:b9:79:6f:b6:47:51:ee:4c:
                    26:a9:d3:ed:69:a7:a5:8f:15:5b:eb:ad:81:9b:01:
                    57:78:07:5c:34:23:4b:ab:ed:f9:18:1f:d2:d2:11:
                    2e:10:48:90:be:f6:aa:84:3a:fe:98:09:71:0f:a6:
                    c7:44:14:85:82:96:c4:22:ae:59:53:ae:49:cf:3a:
                    1e:e8:07:55:db:64:b8:cf:4d:26:25:91:a1:26:af:
                    7b:30:d5:d9:b2:66:b8:ad:4a:1e:22:df:ee:62:8c:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.152.0/22
                IPv6:
                  2803:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:15:f2:ad:c6:c2:2a:23:df:67:43:cd:46:7e:be:64:f2:28:
         af:a3:03:42:b6:6e:de:08:fa:59:86:6a:ce:8a:08:c9:0a:f9:
         fd:ce:57:8e:4f:85:d3:79:2e:3f:41:63:a2:ab:94:8e:55:95:
         fe:f9:20:08:4c:5b:55:43:44:64:ab:20:39:b5:e1:85:57:be:
         8a:b2:ed:0d:41:7e:47:51:5e:ce:c7:b9:ea:00:54:83:46:64:
         ee:56:ae:58:76:83:e3:77:cd:98:13:2d:db:92:ee:09:fb:96:
         0e:37:15:eb:85:f8:2c:97:ef:67:de:19:13:c6:58:fb:47:b3:
         de:80:1f:38:8e:73:03:85:d1:0d:c4:19:1a:33:77:c6:a3:87:
         b8:1e:83:16:08:78:ab:8a:c9:e1:3c:b6:b2:a3:32:8c:93:20:
         47:fb:53:aa:98:3c:71:99:e2:b7:9b:7b:00:e6:e8:27:4e:65:
         ff:a7:38:b2:55:91:d2:c1:61:8b:ec:52:0a:d1:7b:f8:23:30:
         67:fb:e5:9a:fc:bd:23:66:09:c1:7d:95:40:c4:2a:52:11:0e:
         8d:35:e7:fd:4c:35:e2:7f:95:a9:a8:fc:96:8e:bc:b5:8a:81:
         17:71:01:39:65:b5:b8:66:87:1f:8e:08:db:71:94:d6:55:d7:
         da:e2:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----