Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b31fcca3d032159f96ee568822afff94a5c5316.cer
File:                     9b31fcca3d032159f96ee568822afff94a5c5316.cer (raw, json)
Hash identifier:          mNDGtZuj2cACyTgtURwEiOu7qk+aLDFhrO9gZIfzGp8=
Subject key identifier:   02:71:1E:CE:AC:32:76:E3:85:EC:94:75:0A:A8:93:A9:E7:96:2C:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67EFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4fbb351e-e8bd-4cc4-b104-e123382e4af9/9b31fcca3d032159f96ee568822afff94a5c5316.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4fbb351e-e8bd-4cc4-b104-e123382e4af9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:40 +0000
Certificate not after:    Wed 05 Jun 2024 06:00:00 +0000
Subordinate resources:    IP: 186.64.0.0 -- 186.64.62.255
                          IP: 2800:bb0::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15105786 (0xe67efa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:40 2017 GMT
            Not After : Jun  5 06:00:00 2024 GMT
        Subject: CN=9b31fcca3d032159f96ee568822afff94a5c5316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:dd:ba:d9:c3:4a:de:a3:37:21:a0:73:68:
                    bf:e5:b6:7b:ba:de:9f:56:54:16:7a:23:73:5e:86:
                    58:b0:24:dc:91:68:4e:7b:b6:97:41:b3:bb:41:2e:
                    22:d8:1b:87:9c:a4:7a:11:af:26:d8:ef:66:a9:cd:
                    8c:33:2e:f8:80:1a:e8:4a:a6:86:da:2e:7b:a3:88:
                    ac:7c:71:b2:b2:25:b6:27:ba:68:77:ce:8d:ef:91:
                    e4:66:1a:9e:ae:f4:e3:c3:f5:25:71:35:c5:e1:71:
                    89:48:41:f9:53:67:2a:91:e5:50:f9:a3:58:4a:6d:
                    a6:25:b1:c8:5d:92:96:ae:99:58:57:a0:35:0b:89:
                    bb:51:75:2f:00:e4:d4:30:12:da:64:dc:b6:20:b9:
                    17:e7:c9:eb:f4:2b:2b:1c:2b:09:31:b8:3f:95:07:
                    1f:90:7f:f9:91:1b:17:71:c6:d7:d6:b1:23:c5:3e:
                    5b:5d:14:b8:35:80:bb:97:0d:95:d4:16:3e:1e:2f:
                    db:cc:b7:86:b5:9b:c7:18:42:12:52:9f:4c:ac:40:
                    e5:ca:44:b2:83:43:07:85:7a:0b:8b:54:fd:bd:a1:
                    08:27:8f:ae:c7:73:21:c4:40:7b:d6:77:dc:27:38:
                    b2:84:b2:a8:45:ba:87:ac:9c:00:e3:72:04:1a:fd:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:71:1E:CE:AC:32:76:E3:85:EC:94:75:0A:A8:93:A9:E7:96:2C:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fbb351e-e8bd-4cc4-b104-e123382e4af9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fbb351e-e8bd-4cc4-b104-e123382e4af9/9b31fcca3d032159f96ee568822afff94a5c5316.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.0.0-186.64.62.255
                IPv6:
                  2800:bb0::/28

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:dc:3e:ae:f0:39:01:e7:4c:eb:b4:ab:b7:7e:dd:b6:02:
         b4:00:7a:3d:41:fb:8e:77:74:79:cb:54:18:60:5a:bc:fa:08:
         91:90:1c:e6:6e:7d:74:cf:81:4d:0e:27:c3:22:51:d7:80:14:
         fa:0c:99:04:9a:28:a5:b7:6d:e4:64:41:a5:bb:c3:74:2f:53:
         b0:7b:5a:12:61:d4:48:ab:ca:4e:df:2b:e1:0d:09:46:a8:ea:
         62:f1:37:0b:75:34:5d:25:0f:d1:8d:f3:c9:4d:ff:2a:27:fa:
         93:81:91:aa:61:b1:33:fe:de:98:d2:82:9a:2b:80:d5:66:f5:
         8a:e6:11:19:bd:d5:86:fb:67:72:f4:f6:87:6e:57:95:f5:48:
         3d:e8:f5:17:51:0c:30:26:2f:d4:14:c5:15:62:aa:71:39:e5:
         59:13:76:5e:95:2f:ff:7b:6b:7e:e4:cb:11:19:14:89:e1:66:
         26:ba:56:39:3e:39:de:48:a7:b3:ad:29:c4:be:77:69:e9:25:
         93:76:9a:73:77:d3:bd:8f:28:da:c6:a0:7e:a0:f3:60:59:e3:
         5d:9c:83:a0:f0:67:4d:bd:ab:1a:c4:b1:47:1a:de:b3:f8:a8:
         fd:c9:6b:0d:8c:14:7b:9a:b4:c3:58:a9:cd:a7:f9:a0:0a:e9:
         c4:b1:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----