Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.cer
File:                     8dbdc246cceb1862805c4dbe107d7326b0ae88ef.cer (raw, json)
Hash identifier:          TOZW/FTA0aJKjznTA/OiMtTJrSoVWZcTIvcjrWL+BaU=
Subject key identifier:   1F:39:4B:B9:88:11:6E:B1:96:9D:65:DF:42:AD:11:B9:61:4B:E8:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD16FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2018 23:17:06 +0000
Certificate not after:    Sun 25 Feb 2024 23:43:16 +0000
Subordinate resources:    AS: 265708
                          IP: 200.85.136.0/22
                          IP: 2803:f9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14489341 (0xdd16fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 23:17:06 2018 GMT
            Not After : Feb 25 23:43:16 2024 GMT
        Subject: CN=8dbdc246cceb1862805c4dbe107d7326b0ae88ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:9a:c3:08:c1:ae:6c:81:8c:ea:bd:01:d5:
                    d4:e9:b9:66:1a:c8:2e:85:ec:66:7d:d2:26:f0:bc:
                    45:47:d5:b6:8c:9f:44:e6:38:7c:af:56:cc:e1:85:
                    3d:87:7d:f6:38:e4:8e:f7:fd:43:46:5b:f0:b1:f2:
                    e6:86:47:ad:bd:62:e3:d6:29:0a:c3:5d:a6:6f:d6:
                    d0:d1:e7:96:39:bd:62:42:80:91:4d:f0:06:2c:07:
                    8d:f5:a7:ba:26:0f:b0:b9:9c:dd:bc:5e:a6:f0:41:
                    6b:a8:b5:84:0c:eb:ec:07:8f:74:f2:b8:53:cf:4f:
                    93:fd:5f:13:9a:4a:0d:da:6f:be:6c:2c:69:bf:56:
                    82:b1:a9:39:31:fe:53:f0:f2:63:3b:c5:d5:43:5b:
                    da:42:a0:f1:a5:e3:85:a9:d4:4d:68:e0:81:2c:6e:
                    97:ee:6a:30:73:1a:de:bf:56:b4:ff:c8:60:9e:e6:
                    e1:4f:40:ae:73:76:3b:47:da:12:3b:c4:12:4f:10:
                    3c:36:76:99:10:3c:af:76:7f:68:aa:23:0c:a5:df:
                    bf:b7:bf:82:3c:a4:6a:7e:aa:d6:d1:14:14:af:09:
                    d3:b5:5a:5d:39:b9:4d:27:b1:bb:0e:5d:3f:43:2a:
                    35:d1:7b:a5:91:f4:59:f9:18:61:5c:2d:d5:cf:f6:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:39:4B:B9:88:11:6E:B1:96:9D:65:DF:42:AD:11:B9:61:4B:E8:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.136.0/22
                IPv6:
                  2803:f9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265708

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:21:21:a1:25:93:5f:68:88:93:74:65:c1:28:32:b1:9a:
         b3:91:f4:e1:9f:62:fe:77:57:20:79:3d:56:b0:03:ab:ca:d5:
         38:50:f6:d3:54:1b:7a:c2:2b:64:4a:2a:59:aa:30:41:26:75:
         fd:01:80:2b:dc:3c:76:7c:39:ae:53:46:61:3d:b1:9b:3e:5a:
         7b:96:1e:bd:75:f0:45:31:1c:be:2d:4f:92:64:7b:f5:0c:8e:
         9c:fe:db:9d:31:b4:36:8f:d0:13:aa:7f:b7:97:1c:a4:f1:cf:
         07:71:b4:50:6d:f4:a9:f9:01:ed:c3:3d:76:23:3d:e6:ec:b4:
         5e:13:3e:61:80:b1:56:28:36:e7:6c:c6:6b:8d:ab:69:fa:8d:
         e1:bb:dc:94:7e:ad:38:ab:15:0e:00:15:c2:30:28:3d:65:f3:
         9e:50:f2:a2:0d:57:b9:cc:19:81:05:df:5e:23:10:1b:89:39:
         12:62:37:8c:63:22:a4:10:75:f8:d1:c4:9d:7b:c4:f5:cd:33:
         fb:1d:0a:1c:1c:b4:02:4e:ee:93:bb:f2:b7:b1:31:3c:36:0d:
         29:03:6e:38:77:59:ad:7c:13:11:b5:36:f1:4c:98:9d:7b:14:
         c3:bb:54:51:3d:32:47:20:7d:9b:de:d3:27:01:32:dc:9e:d5:
         eb:c1:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----