Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31497db947942b9b98537746e80526f715ef6e4.cer
File:                     b31497db947942b9b98537746e80526f715ef6e4.cer (raw, json)
Hash identifier:          Md7SDj0BBDdV2swDzDhihHCi1KaC+RxXUCbyRJnXE9Y=
Subject key identifier:   66:2B:1F:3E:4C:E8:EA:1F:7D:D8:7A:04:AD:31:EA:9C:23:87:4E:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E82E61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/b31497db947942b9b98537746e80526f715ef6e4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:40 +0000
Certificate not after:    Mon 03 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 21980
                          IP: 200.74.192.0 -- 200.74.239.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15216225 (0xe82e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:40 2017 GMT
            Not After : Jun  3 15:00:00 2024 GMT
        Subject: CN=b31497db947942b9b98537746e80526f715ef6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:65:ef:bd:ed:8c:95:fe:84:f3:5e:62:ca:
                    d4:6f:de:95:9c:28:b6:a2:dd:a6:d5:19:9c:72:0d:
                    76:66:2b:c5:92:1f:84:12:34:3b:d2:03:4c:10:2c:
                    e3:e2:cb:76:a4:7a:46:86:a3:c1:02:db:10:a9:aa:
                    f3:0d:16:99:26:d0:a0:bc:8a:b4:a4:cd:2e:04:8b:
                    9c:28:67:40:be:02:9b:07:7e:33:91:f2:03:24:27:
                    89:98:e0:44:f7:81:99:3a:62:e2:0c:10:cf:50:3f:
                    37:78:e0:fd:9d:45:08:e6:e6:53:b5:f4:41:39:e3:
                    6a:83:4f:80:6a:26:22:f8:02:93:7f:d9:17:9b:6a:
                    4c:9f:ff:15:ad:d5:d2:b4:46:6c:3c:41:32:3b:92:
                    89:2a:5a:0a:19:6b:23:35:90:15:fb:87:1f:dc:6d:
                    e2:bc:50:60:39:a5:8c:8c:9c:c5:76:d8:97:de:4b:
                    6b:56:82:6a:62:68:0a:63:fc:0c:26:a0:c9:eb:c0:
                    a2:64:af:8f:55:fb:30:63:3a:49:17:c5:69:82:d6:
                    b1:a5:f9:aa:82:bc:1f:9e:8a:05:5a:5f:11:85:c8:
                    01:e2:ab:0d:d4:47:96:b5:92:49:c8:c8:7e:7d:43:
                    93:65:00:ef:44:1f:85:ef:65:71:58:b9:63:d7:b3:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:1F:3E:4C:E8:EA:1F:7D:D8:7A:04:AD:31:EA:9C:23:87:4E:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/b31497db947942b9b98537746e80526f715ef6e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.192.0-200.74.239.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21980

    Signature Algorithm: sha256WithRSAEncryption
         b1:d9:67:e7:77:30:64:9f:0b:7f:78:22:7d:49:69:f8:3e:da:
         dd:49:e3:ae:b9:a5:b6:8b:38:0a:50:d6:b3:fb:1c:61:4f:a0:
         a0:ba:3d:8c:53:e8:93:2f:3f:58:59:71:46:5a:1b:c9:bc:0b:
         16:8f:43:0c:e0:0a:7e:29:37:e9:53:50:74:f3:cd:e6:5c:56:
         62:15:ca:7c:60:aa:0d:2d:28:97:33:2d:90:24:c7:36:e1:51:
         1d:fa:3c:a2:95:3a:f5:64:50:ea:f2:47:f0:42:f4:42:c8:1e:
         42:74:aa:d5:02:9e:2d:11:ff:b6:26:e6:99:92:22:c0:f2:f3:
         22:a0:09:d2:f9:c0:5f:c4:2b:2e:93:01:17:08:17:a6:d3:ea:
         90:a0:6b:bf:be:73:bc:a7:4e:f3:19:57:3f:bd:de:a9:05:1e:
         e6:22:0b:33:6d:9a:e5:ba:1a:d2:19:e5:1e:d7:22:85:38:79:
         34:e0:b8:81:62:e8:77:1a:a5:fd:a2:43:ba:92:13:3a:10:7f:
         18:2c:cc:8a:6f:3b:d5:4e:29:3f:a1:7e:6d:f0:d8:f9:27:e5:
         ee:fa:5c:fb:b2:c9:d6:3b:84:23:f1:1f:7e:9a:c3:3d:80:17:
         a0:75:15:1b:40:f7:79:09:5d:b3:9c:d1:f9:53:65:44:81:b0:
         a0:ec:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----