Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.cer
File:                     d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.cer (raw, json)
Hash identifier:          HEIr1cNgV4AvVT8iwBqBZ6FZCzw+pIW524VqUYmRIVw=
Subject key identifier:   A9:1B:32:AC:9A:82:C9:5E:9F:55:E0:B1:F9:86:81:A6:1E:D2:68:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F67EEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2017 11:03:20 +0000
Certificate not after:    Tue 24 Sep 2024 19:46:55 +0000
Subordinate resources:    AS: 266656
                          IP: 45.225.156.0/22
                          IP: 2803:a120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16154350 (0xf67eee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  1 11:03:20 2017 GMT
            Not After : Sep 24 19:46:55 2024 GMT
        Subject: CN=d47c38dd10c49ac6f7ceb27120ce4600eec5ece4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ca:aa:07:00:e9:bc:0f:3a:a1:3c:a0:69:6e:
                    f7:4b:e8:e8:5a:44:f7:b1:f3:6f:d3:48:66:72:03:
                    e3:74:5e:ba:4e:04:5c:67:75:c4:b6:e7:bd:19:01:
                    85:81:20:ab:0c:01:0b:5b:0e:02:48:e4:b2:05:12:
                    d5:90:ce:d0:ff:41:3d:df:21:81:74:b4:d1:fb:34:
                    a4:6b:3a:3c:0a:fc:c3:58:67:8e:8f:37:57:05:f4:
                    a4:89:2a:5d:34:e5:6f:f1:2e:33:74:b8:35:b6:04:
                    96:e0:8b:fe:05:9b:4c:0d:a8:10:cc:bf:51:0a:90:
                    26:c4:29:73:5c:a1:a2:26:6b:d9:70:fc:8c:f0:02:
                    55:48:c6:24:ea:c9:eb:2d:68:ec:f5:cf:b7:f4:c9:
                    0a:de:b7:60:51:eb:fb:d0:b0:8b:8e:60:26:cc:e4:
                    ea:7b:f5:60:89:0d:03:11:91:2c:15:85:5b:fe:59:
                    18:2b:7e:fb:ce:cb:e7:f9:e4:c0:be:a9:8c:0f:9d:
                    37:9e:cc:b8:ce:52:4f:94:22:00:5d:67:dd:02:f7:
                    f0:b3:b9:c0:02:3c:7b:a7:4c:88:87:b7:93:3a:84:
                    3b:b8:4c:ee:ee:c5:b9:3a:b5:7d:13:c9:98:57:98:
                    8e:62:10:d3:c9:82:28:31:bf:b6:ab:2a:ba:e5:b4:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:32:AC:9A:82:C9:5E:9F:55:E0:B1:F9:86:81:A6:1E:D2:68:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.156.0/22
                IPv6:
                  2803:a120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266656

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:a2:bd:53:eb:d7:cb:77:df:e4:33:f3:17:c8:d8:38:9e:
         01:72:7b:33:b1:d6:17:e1:af:f7:b8:35:16:aa:5e:ad:62:ff:
         e4:0e:89:0f:aa:dc:14:ff:18:1a:83:ec:59:da:4c:7e:3b:08:
         57:7d:3b:2c:b4:bc:49:79:31:8f:d4:9a:31:bf:c0:ed:6b:2c:
         9d:fd:7e:54:ce:8e:21:4f:9b:dc:a2:a5:f0:fe:46:4c:60:cf:
         46:0d:cf:dc:2e:fe:47:e5:c6:a6:aa:ca:6b:d3:4a:b7:33:91:
         46:f9:ee:1d:c2:bb:89:69:6e:c5:98:9d:24:27:59:c7:c8:3b:
         5d:65:8b:c2:05:7c:67:a6:7f:e9:d7:3a:b2:22:f6:b4:9a:88:
         f7:09:70:ee:08:6f:f0:31:62:a8:a8:00:00:52:a0:6a:71:4f:
         bb:29:af:f3:30:5d:4a:37:cd:df:6f:8f:03:bc:46:95:91:e4:
         67:37:74:29:54:b2:57:fb:ea:aa:80:b1:b6:4d:63:7e:fd:76:
         66:2c:c4:4e:ef:13:64:ac:4d:a0:08:bc:35:b0:84:d5:05:85:
         c4:03:70:7f:7c:24:2c:a1:ff:11:e3:54:e1:40:89:1a:03:0e:
         e0:5d:c4:d1:ab:fb:3f:90:c8:f8:6a:d3:b3:70:5a:13:08:2f:
         ce:64:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----