Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
File:                     ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer (raw, json)
Hash identifier:          KccuvhZN9VTbk+2TN9vkTjWVxJCsXUMzhn3NBzsxPLM=
Subject key identifier:   89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D0FD30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 May 2018 23:54:30 +0000
Certificate not after:    Sat 04 May 2024 20:35:48 +0000
Subordinate resources:    AS: 272007
                          IP: 131.196.208.0/22
                          IP: 200.3.148.0 -- 200.3.155.255
                          IP: 2801:19:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13696304 (0xd0fd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 23:54:30 2018 GMT
            Not After : May  4 20:35:48 2024 GMT
        Subject: CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:f6:e9:52:56:47:0a:1b:81:ed:e3:5e:40:
                    03:b4:46:2f:71:27:f1:e6:ea:b3:e1:ec:39:8c:24:
                    b1:90:85:60:6c:e1:5b:b9:03:36:dd:77:77:84:e4:
                    c0:52:b6:3b:44:08:ee:db:e1:4b:89:a1:28:d3:b4:
                    ad:8c:e2:e9:2d:5c:f5:26:d9:ed:ef:83:e3:3e:d9:
                    29:17:40:06:c6:57:e3:35:77:ba:c0:b7:5d:45:ca:
                    81:af:02:b6:f7:3d:a0:d3:f0:56:a6:d1:57:71:f6:
                    6f:c5:80:ea:5c:92:af:30:f5:08:7f:2b:58:fc:20:
                    09:16:39:02:fa:13:09:20:3e:f2:a1:81:71:54:56:
                    11:6c:7b:14:db:40:3d:19:3f:3e:78:a0:3a:f1:7f:
                    c8:87:a0:56:c6:67:3a:26:ea:95:4e:30:9c:7b:71:
                    8c:7d:e4:57:d0:1e:62:4f:8b:10:fa:b5:61:21:6e:
                    16:d8:f6:00:6b:02:68:3d:8f:61:53:2b:6c:57:8e:
                    5b:b7:ed:90:f3:89:89:0e:8a:cf:1a:12:3b:15:4d:
                    6b:ef:8f:89:1e:47:20:f5:9c:54:e3:c3:67:52:89:
                    e9:55:38:3a:71:ad:6c:0a:cb:04:04:d8:a1:0e:b1:
                    61:5c:6a:35:ea:89:bf:39:7e:90:7b:b3:68:94:7a:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.208.0/22
                  200.3.148.0-200.3.155.255
                IPv6:
                  2801:19:3000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272007

    Signature Algorithm: sha256WithRSAEncryption
         af:38:b7:32:ea:a6:7e:4f:73:39:b2:ef:bf:7a:c0:f9:a2:49:
         bf:bd:e2:6c:9f:59:bb:56:2f:c7:50:58:13:5f:2f:24:56:7c:
         b7:bc:e9:e8:8d:77:99:a2:0b:2a:7b:db:bd:91:c9:31:9d:47:
         83:9e:69:94:c6:c2:c5:8e:3f:c4:3f:14:d2:5d:2f:e7:4a:d0:
         1c:8c:6a:26:a6:5a:7b:0f:13:f8:7f:62:d8:bd:0e:7d:51:79:
         64:54:d6:41:0b:52:e2:93:bd:d8:e8:9d:49:9e:6c:9e:cf:3b:
         68:7e:53:5b:88:a9:06:33:95:63:75:50:a0:89:9f:bd:67:48:
         72:56:91:8e:dc:da:b8:91:bc:b2:46:9b:6b:94:6e:2c:71:5d:
         7f:47:34:92:90:50:54:68:07:80:20:5f:46:65:80:3c:c2:f4:
         de:b3:4e:74:f4:1e:80:05:76:69:0b:d2:55:fa:d5:7b:b4:72:
         cd:ff:be:1d:78:8f:4b:3f:f2:ef:43:7e:68:79:b4:3f:1e:35:
         f3:06:bc:21:f1:1d:5b:9b:49:38:47:6f:2e:19:b6:e3:91:04:
         3b:54:36:06:18:07:bf:73:02:36:1d:8d:fa:c4:3b:fd:4c:19:
         e0:ad:8a:73:ce:c6:1b:c6:e8:91:f9:04:52:10:2f:43:c2:f9:
         e3:3a:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----