Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
File:                     cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer (raw, json)
Hash identifier:          s3Vj5xb3PL0aYG+LuM75DnRp+q/bWXTKYle0ZCKx2+Q=
Subject key identifier:   8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D08D53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Wed 27 Sep 2023 05:00:00 +0000
Subordinate resources:    IP: 168.195.56.0/22
                          IP: 181.199.208.0/20
                          IP: 190.98.128.0/18
                          IP: 2800:240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667667 (0xd08d53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Sep 27 05:00:00 2023 GMT
        Subject: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:8d:4e:37:7c:4c:4a:fe:26:42:8e:a9:33:
                    7a:fa:b0:68:98:09:f1:1c:b6:e4:20:0e:5b:46:52:
                    46:ee:a5:9a:1b:b0:7b:0d:21:be:2e:44:eb:8f:73:
                    be:cb:dc:03:cf:9c:b2:7e:f1:45:89:7a:d5:46:86:
                    75:76:04:ae:9a:3f:e7:ef:ec:f7:a0:75:da:d7:24:
                    49:ac:27:dd:d1:7d:1e:aa:48:50:13:f4:47:59:08:
                    87:c3:e8:7c:ba:a0:05:6c:89:b4:22:02:71:48:7a:
                    64:76:48:66:b7:75:88:8e:ae:c1:09:4f:35:6a:c0:
                    4e:1c:c4:fa:83:1a:37:a6:18:e9:82:91:34:20:16:
                    b1:04:11:0f:a0:66:84:ef:98:29:d4:10:bc:f8:ff:
                    cd:64:f1:c6:60:95:b4:d7:c1:48:88:d4:3a:ed:c3:
                    d8:42:0c:10:70:2a:1b:ad:41:49:56:b4:41:6e:4d:
                    f9:0f:ad:7b:be:40:e1:5c:33:85:84:da:2b:cf:ba:
                    70:9d:9e:3a:d7:cb:01:47:a1:32:79:d8:a1:af:8a:
                    c4:74:57:9a:39:39:da:be:9d:a0:5d:e3:eb:27:54:
                    d6:47:1b:04:0b:f0:7c:ce:79:82:bf:9e:3e:3d:2f:
                    c6:b2:97:41:15:b2:ba:b0:1e:6d:af:d8:29:76:3a:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22
                  181.199.208.0/20
                  190.98.128.0/18
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:18:e3:e1:0d:35:62:d7:f2:e8:84:f3:c8:b8:26:ec:71:
         d6:dd:3c:14:fa:00:d9:94:12:20:63:41:bb:67:cc:51:0e:84:
         01:36:75:c6:a7:da:bc:cf:2a:01:83:b6:83:7d:c7:14:f8:c2:
         39:73:93:01:8b:dd:00:4a:8f:89:77:fe:a6:6d:38:90:9b:c6:
         0e:42:ba:9d:b5:ef:c8:7b:1b:62:d8:15:23:82:3b:2a:3a:20:
         12:21:75:4e:a1:9f:bf:1a:6f:c4:8c:4a:46:fd:fa:a5:57:e4:
         4f:35:83:fe:a0:cb:b1:29:c6:6a:92:d1:02:d9:54:9e:4f:61:
         54:5c:ea:3d:08:4b:54:24:df:63:29:c1:50:ca:69:74:48:e4:
         0c:d6:5d:30:26:28:d9:28:d9:fc:92:eb:fc:98:48:51:da:bf:
         41:1e:e3:18:dd:27:d3:aa:60:ad:92:4a:08:fa:b4:77:86:41:
         a6:ad:14:84:30:01:70:b5:ab:04:53:e5:82:a1:45:07:3a:95:
         30:f7:d1:28:1e:55:14:0c:51:76:70:6f:82:61:d1:15:e2:04:
         31:a3:85:b1:a6:3e:7c:fb:e3:52:df:f6:1f:55:65:c8:8d:dc:
         56:f3:ff:bb:be:3f:72:df:52:7a:44:c1:8d:04:3a:78:b7:0e:
         6b:8d:69:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----