Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
File:                     af74f3aa42340a4c03a724bcfe9d604390d00998.cer (raw, json)
Hash identifier:          nnibJJVThW+1RDvDaPI6Q2xtcfXbGm2mzgcjP/zRV+0=
Subject key identifier:   F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF6BCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:09 +0000
Certificate not after:    Fri 26 Jul 2024 18:13:16 +0000
Subordinate resources:    IP: 45.71.36.0/22
                          IP: 2803:cc20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15690700 (0xef6bcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:09 2017 GMT
            Not After : Jul 26 18:13:16 2024 GMT
        Subject: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:0d:64:94:fd:b9:b4:36:93:16:21:3a:30:
                    32:5c:52:41:ac:8f:5a:99:3c:b7:24:25:cc:ed:91:
                    92:b8:1d:da:8a:30:a3:d1:0d:c8:73:1b:27:e1:91:
                    d3:0f:b9:ee:73:34:4d:2f:45:27:bd:d0:2c:81:b1:
                    5e:b7:5c:11:7c:7b:15:0e:d6:a7:d3:35:d1:ac:8b:
                    96:27:e3:75:4f:4c:b5:95:e9:f3:65:d1:8d:94:a1:
                    64:18:2f:7b:66:3f:bb:9f:6f:a7:2b:0a:04:06:5f:
                    59:a1:7f:f3:0e:33:a7:c5:ec:c8:a7:33:0e:38:6d:
                    5d:60:93:7e:a2:b4:54:f5:b7:30:49:22:a5:3c:90:
                    54:52:d7:74:aa:6f:4a:3b:03:e3:ca:d7:17:1f:4e:
                    16:d7:d7:6f:d4:4c:55:f0:9d:46:55:bd:75:e8:dd:
                    bf:a7:2f:b7:24:14:cd:7a:42:cf:07:3f:06:ff:94:
                    f3:d0:3f:b2:17:a3:5f:0a:de:44:56:d5:5c:3f:ea:
                    84:a0:48:03:01:93:0f:ef:ca:50:b8:24:e1:82:0f:
                    f4:bf:c5:d6:9d:da:9f:9a:06:0b:b8:c3:3a:11:2a:
                    b2:f9:a6:9b:fb:4b:17:d0:6f:f1:0c:8d:95:92:67:
                    1f:0d:3f:99:9e:a6:a3:69:41:44:84:35:43:0c:cd:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.36.0/22
                IPv6:
                  2803:cc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:2b:9e:de:3d:89:1d:04:f5:4b:d9:e2:de:3e:a4:cb:e2:
         57:b0:76:ec:9f:e6:84:df:cd:36:68:e5:99:38:b6:c6:6f:10:
         d9:01:8b:ac:c7:94:70:f4:a2:e7:53:cf:18:5e:ff:eb:37:e4:
         4c:a9:d3:5e:19:a7:e1:9d:74:70:41:b5:33:b8:fa:41:57:fe:
         06:37:5a:12:d5:3a:96:64:de:f0:fe:81:2f:20:f3:28:9e:ec:
         06:4e:1f:a5:3c:fe:64:90:60:32:37:84:22:45:5c:bf:99:56:
         f3:98:5f:f8:7c:04:34:b7:0d:5e:a5:f2:52:5b:b1:4c:60:92:
         d3:ba:92:20:44:4f:7e:a2:c2:57:29:b2:1d:90:08:c0:41:3c:
         06:24:04:65:81:f2:cb:3c:85:d3:ad:7d:d7:67:3a:75:3c:77:
         1b:12:a8:fa:cc:f6:02:aa:b7:ba:fe:47:28:d9:1e:3e:a8:f3:
         94:b6:fe:7f:15:76:fa:de:37:2b:34:ec:d8:cf:3c:ea:0b:1f:
         ed:50:03:23:c8:8f:42:ce:07:bf:67:cb:e4:1b:64:70:67:cf:
         bf:0d:f6:8e:e6:8e:55:75:19:e3:27:1d:c7:59:12:94:e2:c5:
         60:ee:e4:1a:a6:be:fc:62:e5:55:54:f1:e0:57:36:d3:2a:b9:
         89:18:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----