Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer
File:                     8de2b1bc144048a5118f84232c51e79737eafa07.cer (raw, json)
Hash identifier:          POw8Z36qqk416MNttE5gcHOkgqi7Y4j5c1jq12E2WNY=
Subject key identifier:   28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F47B3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/8de2b1bc144048a5118f84232c51e79737eafa07.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Mon 09 Sep 2024 18:33:31 +0000
Subordinate resources:    AS: 265869
                          IP: 45.227.16.0/22
                          IP: 2803:f620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16022330 (0xf47b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Sep  9 18:33:31 2024 GMT
        Subject: CN=8de2b1bc144048a5118f84232c51e79737eafa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:55:ad:c7:a2:a6:03:fc:98:95:c6:a8:ae:
                    25:81:e9:15:78:f2:15:4b:77:6a:75:2c:bb:d0:1b:
                    fb:d8:cf:f4:76:bb:2c:51:6c:4e:ad:ad:aa:03:8b:
                    47:3f:7f:f7:be:69:d1:f8:d6:5c:51:6c:fb:de:72:
                    d7:79:5c:16:f9:5a:f6:b5:e5:4c:c6:f3:a6:c5:94:
                    3d:c9:cc:f4:b3:01:75:a4:4a:48:e4:7b:e1:85:4f:
                    1f:47:9c:cd:a2:1a:e5:57:0b:28:3a:ac:a9:66:8b:
                    1d:2b:9d:40:36:d7:1e:40:0c:e4:5c:b2:64:54:4b:
                    28:82:cc:7f:f5:c1:50:f2:3e:a4:2c:94:01:cd:71:
                    32:d0:2a:c1:c4:c8:06:5b:f9:cf:78:1c:79:74:df:
                    e6:bc:9d:e8:d0:ca:c7:90:fe:5e:e5:88:4f:b6:d0:
                    bb:40:f7:ff:b6:b2:bf:b8:7f:e1:02:e9:e1:9e:17:
                    b2:f1:08:8c:5a:92:48:87:43:57:4e:28:a4:59:42:
                    d8:10:1a:4c:35:97:a2:d2:00:f1:92:8b:43:25:5d:
                    7e:cc:38:79:f7:91:98:a3:8d:df:25:1a:21:31:ff:
                    94:b9:50:44:23:d9:41:e0:64:7c:4b:4d:7d:73:42:
                    90:09:53:a7:db:1d:eb:c0:3c:b5:e0:7b:c2:f5:bf:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/8de2b1bc144048a5118f84232c51e79737eafa07.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.16.0/22
                IPv6:
                  2803:f620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265869

    Signature Algorithm: sha256WithRSAEncryption
         b9:16:a0:90:fd:b3:c6:10:dc:85:95:f8:20:04:74:c2:b0:82:
         4b:7d:2b:18:aa:f1:e2:10:81:d5:61:bf:72:cc:b0:16:eb:3f:
         0e:06:b8:37:3c:ba:09:36:e6:76:fd:4b:60:c4:4e:e4:7d:4d:
         dc:39:c7:82:bd:a0:d5:6b:63:27:f4:73:32:d2:1c:91:f7:1d:
         59:16:61:7d:1f:7f:67:c5:6c:cb:43:e1:7c:06:0b:4b:a7:50:
         0f:cd:20:d7:bd:79:06:b3:f0:14:66:36:c8:77:63:eb:b3:31:
         e7:a6:9a:87:90:67:2b:96:33:e6:35:71:bd:6e:67:78:7a:43:
         cc:2c:72:08:94:dd:f0:7b:50:2d:f1:e6:39:2f:0d:eb:44:7a:
         97:c9:10:9c:2e:97:41:bb:71:16:05:26:33:13:4e:85:ff:01:
         b8:ff:33:bd:ce:a7:57:4b:01:46:01:15:01:1b:83:cc:a3:16:
         38:3d:cc:e0:f2:3e:02:d3:26:2f:12:0e:b2:b0:50:a8:d4:34:
         94:84:fd:b9:59:81:1c:7e:fa:1b:76:bb:f9:74:a1:71:53:d6:
         3a:7a:f9:80:15:a9:f3:c4:b9:9b:c0:3a:a5:26:a2:da:43:30:
         9c:82:d8:3d:91:c9:49:a6:fb:c0:0e:38:5e:4f:3a:3e:0e:6e:
         8a:8c:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----