Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
File:                     a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer (raw, json)
Hash identifier:          Ye8qMKDs8xs56ENdtkHN8NwVSWtnGpILk/k+Q+e9Jug=
Subject key identifier:   B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6CD36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Nov 2018 20:01:47 +0000
Certificate not after:    Fri 27 Sep 2024 21:36:57 +0000
Subordinate resources:    IP: 45.166.92.0/22
                          IP: 2803:55a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16174390 (0xf6cd36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 28 20:01:47 2018 GMT
            Not After : Sep 27 21:36:57 2024 GMT
        Subject: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:01:b0:31:5d:68:53:57:56:d2:06:5d:d5:
                    e5:1e:a4:cc:9d:c8:3a:26:b7:8c:4c:45:71:5f:b2:
                    4d:75:56:44:7a:6a:bf:52:20:65:75:fe:8b:85:67:
                    36:cf:2f:4c:a0:8f:14:11:47:36:8c:08:23:9f:5a:
                    0b:3e:8f:44:47:a2:a9:ea:0c:82:11:53:91:81:de:
                    a5:84:c5:4b:eb:8a:85:a8:89:39:1d:26:81:a8:84:
                    14:c5:ea:01:7b:27:3f:db:ff:01:28:f5:e1:11:7d:
                    54:3c:6f:c5:5f:b6:18:c9:83:c2:e4:a4:3a:bc:b8:
                    3a:cc:8e:1d:95:b1:e6:f9:e1:f4:c5:93:09:09:ff:
                    65:74:b5:eb:70:ff:d4:2d:22:fe:10:f0:8f:18:91:
                    42:62:5d:f7:49:db:11:a9:e9:67:7c:fd:58:2a:eb:
                    78:b9:24:2f:26:96:35:15:f3:d9:a7:5f:d4:cf:21:
                    dd:74:0c:2a:20:ef:ae:69:1f:b2:34:30:46:21:4f:
                    75:00:b2:95:14:6c:47:6f:7e:cc:cc:3f:3e:0b:91:
                    84:5d:5b:bc:e6:b4:4f:85:7f:3d:46:c7:b5:99:e7:
                    44:77:4a:2b:1d:00:0b:29:80:b8:5c:a5:90:01:70:
                    d8:fd:e1:d3:df:19:82:f6:4e:46:8b:67:3c:35:56:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.92.0/22
                IPv6:
                  2803:55a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:fc:a1:e5:42:13:41:49:64:f7:5d:ee:5b:0f:f0:a0:54:
         07:3f:cd:97:2b:e1:24:81:b4:48:86:e7:e2:09:e4:9c:7b:5d:
         f3:12:13:2a:9c:ef:37:6b:48:16:16:02:5c:37:c6:d8:10:b8:
         a0:71:0a:87:1f:a5:16:00:81:01:fa:85:93:41:31:11:90:47:
         13:cb:43:89:5d:d1:8d:08:d8:f4:5f:89:01:ff:80:dc:48:89:
         34:d9:e4:f0:a5:59:9c:ef:80:25:6d:8c:cf:8f:ee:be:c4:33:
         43:d5:54:19:cf:03:b3:9f:3e:e2:b2:05:68:4b:d0:67:bd:3f:
         98:ee:b3:24:1c:f9:9a:7b:71:30:a5:fb:88:a0:75:c7:4e:58:
         fe:e8:9f:b5:e0:18:b2:d3:77:db:21:9e:51:1a:f0:e1:9c:aa:
         9b:50:81:57:c6:d1:23:ac:65:a3:18:8a:52:21:58:e8:0c:6d:
         9b:a0:7f:bd:d9:f3:84:6f:2a:44:c4:bf:57:12:63:6c:35:9a:
         59:61:a4:bb:47:d0:08:ec:48:fe:22:a0:4c:18:7f:c2:a3:b8:
         fc:e2:06:a6:86:31:b9:02:6b:0e:e1:1b:f6:00:71:af:7d:40:
         d7:2b:7e:47:b7:12:07:51:29:13:52:bb:df:73:2e:ee:4a:58:
         a3:cb:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----