Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b201a19cd604f299d9163ea1142421d9e34c2d41.cer
File:                     b201a19cd604f299d9163ea1142421d9e34c2d41.cer (raw, json)
Hash identifier:          s7SFrms/nqoCs5AHve3K0UICmGCa8x5qP1nInJmSn7c=
Subject key identifier:   A8:49:EE:44:5F:56:7B:F6:97:3B:26:53:38:C1:6C:17:FE:30:AC:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D94BCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/b201a19cd604f299d9163ea1142421d9e34c2d41.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:13 +0000
Certificate not after:    Wed 10 Jan 2024 19:59:01 +0000
Subordinate resources:    IP: 138.59.108.0/22
                          IP: 2803:5f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14240715 (0xd94bcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:13 2017 GMT
            Not After : Jan 10 19:59:01 2024 GMT
        Subject: CN=b201a19cd604f299d9163ea1142421d9e34c2d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:99:bf:e6:95:c9:cf:58:49:cd:2f:37:2b:9c:
                    33:d4:a1:d1:98:a2:b5:43:24:cb:e3:16:67:6f:38:
                    21:f3:fd:e1:52:9a:fc:11:e9:59:f0:2d:d7:d6:1f:
                    b0:8e:ed:17:19:1c:8f:e0:67:5c:96:3f:4a:89:6c:
                    bd:bb:bd:a2:0b:99:59:d1:96:2f:fd:08:86:6b:1e:
                    9c:d1:5c:07:94:36:34:23:c1:a1:a7:90:3d:2c:57:
                    fa:81:cd:66:d4:f0:29:cb:a9:7f:77:86:c7:7e:ad:
                    26:55:e8:52:08:37:3d:9e:f4:c4:bf:f5:28:21:3e:
                    34:5e:30:a2:e3:49:68:31:cd:76:11:e8:11:88:8f:
                    31:e4:44:0a:aa:98:ce:04:da:0f:c9:bc:25:fc:92:
                    16:2e:82:fe:ba:03:c8:24:26:be:ab:f1:27:f6:37:
                    65:eb:25:e3:ad:6e:87:fe:df:81:27:90:91:a9:87:
                    78:75:84:ad:59:04:b2:9c:9b:f3:8a:c9:5e:96:08:
                    43:3b:19:59:23:77:29:c9:4c:d2:2b:16:77:1b:d8:
                    19:c4:e4:e7:9d:7d:8f:0a:32:fd:78:aa:5f:d9:e7:
                    fd:ab:ed:b2:d9:2d:5a:43:9b:6f:72:c1:74:c3:f6:
                    e4:d9:87:e7:79:2c:95:7c:18:e7:96:1c:dd:d2:b1:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:49:EE:44:5F:56:7B:F6:97:3B:26:53:38:C1:6C:17:FE:30:AC:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/b201a19cd604f299d9163ea1142421d9e34c2d41.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.108.0/22
                IPv6:
                  2803:5f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:d1:25:3e:0e:d8:59:85:e4:4e:bc:62:dd:aa:ec:ca:fc:
         68:48:9b:b0:a4:19:79:20:f8:7c:33:b6:f8:a6:60:13:87:46:
         0c:c7:2b:d8:dd:e3:46:3a:ed:e8:4c:4f:20:6e:68:cd:94:03:
         d5:c1:41:d4:f8:d5:e6:2b:65:79:3e:e4:12:07:52:12:5e:5c:
         1b:3a:97:92:ec:7d:05:a2:bf:c0:03:bc:84:2c:8a:73:2f:3b:
         1d:f5:0a:44:ff:a9:3b:00:f1:8d:c5:86:c1:ba:53:cf:97:91:
         ec:04:8f:76:43:44:08:e4:df:bd:40:0f:59:03:ee:4b:40:85:
         36:63:0f:93:d8:5e:fe:ee:64:28:0e:80:46:a9:d0:f5:52:57:
         7b:b4:e9:5a:7c:70:09:a7:d5:c1:f4:7d:69:13:03:4e:a6:a7:
         6f:83:3c:79:3d:26:37:d2:2c:66:7c:a6:d8:7a:c1:f1:f8:ad:
         d6:ad:d6:d6:38:5d:cc:26:24:63:c6:60:10:e9:04:bc:35:f4:
         9b:4d:12:b1:68:81:67:38:50:55:d4:a9:d6:22:62:ca:b6:7b:
         f3:c6:8e:7c:5d:39:8a:76:c9:4a:06:34:6e:e0:65:cc:97:bf:
         ab:ef:b5:e7:70:79:02:16:f8:82:58:20:ae:e8:96:4d:a3:c9:
         7e:55:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----