Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer
File:                     9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer (raw, json)
Hash identifier:          MwSBkE6Axf2WdHEYYporM4r04giderbDkxQUmlLb+/Q=
Subject key identifier:   94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB6824
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.188.58.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16476196 (0xfb6824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:52:65:f9:3a:59:61:ee:73:84:9d:df:a3:
                    fa:61:9b:91:06:4a:80:8f:4a:65:83:93:ec:84:8c:
                    46:95:07:0f:53:9e:7d:10:1a:70:cb:3d:55:3e:49:
                    e2:a9:16:f7:d4:fc:46:d1:c4:d9:76:42:fd:01:0a:
                    1e:cd:ee:84:c5:40:e7:0e:42:fa:e9:22:48:66:44:
                    66:e6:1e:57:0e:5c:13:81:cd:f5:09:86:31:cc:25:
                    61:fe:af:0b:c9:25:dc:e0:54:cf:a4:b9:55:05:d2:
                    db:a7:08:40:0c:25:9f:95:52:0f:70:fd:ae:67:87:
                    29:33:d6:6c:26:75:b9:39:6b:83:e7:f9:76:bd:4f:
                    cd:6d:59:35:e6:7c:bf:fd:12:36:c5:4f:84:39:7f:
                    80:15:0b:c0:2f:82:ef:e5:e6:29:7f:37:bc:82:c7:
                    0c:e9:c7:e9:f2:2d:1b:3d:26:d4:58:89:e4:df:44:
                    a8:7b:bf:e7:dc:98:03:bd:eb:4f:be:5c:99:ce:7c:
                    54:bd:0b:77:c2:ac:1f:72:0b:02:69:75:81:85:28:
                    ef:7a:28:4c:eb:f4:de:ea:46:c5:36:de:bc:cf:a9:
                    44:09:40:a6:b7:39:a3:19:2d:a4:83:fd:63:fa:db:
                    a7:f8:39:c8:70:d4:f0:80:08:15:86:34:e8:ba:9e:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ef:07:ba:99:6d:16:87:17:ff:d6:7e:2d:9b:33:b0:d0:3d:
         49:f8:e0:99:34:53:7b:a2:5d:d2:e4:0b:c7:bb:2d:cb:56:00:
         b2:28:4c:22:d8:33:db:d7:a5:21:36:df:4a:0d:f5:b8:23:37:
         03:c0:03:2e:7b:5c:82:9d:4b:f1:e6:6e:95:aa:7f:6e:a5:96:
         17:dd:38:7e:26:8f:da:22:73:a0:9e:88:93:a6:23:0a:87:42:
         b3:da:ad:f4:7c:47:ab:8b:c2:70:18:a3:72:98:06:bf:ca:9a:
         33:16:92:b1:d8:4e:0c:fa:c2:76:95:47:5c:b8:ea:c8:1a:94:
         dd:d8:d1:c7:10:b8:a8:db:0b:cf:7f:c3:eb:c8:67:7a:88:af:
         cd:a9:b1:bf:fe:74:58:e0:6a:b5:d1:22:10:c0:a0:5e:a5:43:
         33:df:0b:73:1f:58:44:2d:ac:da:22:b0:dc:66:4a:50:bb:62:
         68:83:6a:71:3a:70:f3:2c:7d:1a:8e:85:96:40:f1:55:2f:7b:
         35:ab:b5:95:e9:da:a7:fc:eb:46:ec:ae:7d:72:b0:11:9a:aa:
         39:7e:bc:04:84:29:41:0d:50:9f:d3:2d:07:9f:b5:66:bf:27:
         77:39:33:7b:4f:b2:ca:0a:c9:3e:f4:a8:14:23:4e:0b:af:77:
         76:d5:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----