Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5ad3b382e8f78d52ba5b114118cfbad8f00f86f.cer
File:                     d5ad3b382e8f78d52ba5b114118cfbad8f00f86f.cer (raw, json)
Hash identifier:          HIitqSQcj4gnjwgDVMsIaF9xfnrIt1kCPk00wDgDVWk=
Subject key identifier:   1F:60:09:4F:26:77:D7:C8:25:DC:C3:69:92:C3:26:6C:DB:9C:7F:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1FCCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7fa9cd6-50b2-48a6-8036-96c29375a23e/d5ad3b382e8f78d52ba5b114118cfbad8f00f86f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7fa9cd6-50b2-48a6-8036-96c29375a23e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2017 18:11:49 +0000
Certificate not after:    Sat 17 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 52381
                          IP: 186.65.64.0/21
                          IP: 200.24.248.0/21
                          IP: 200.107.88.0/21
                          IP: 2803:a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15858893 (0xf1fccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 27 18:11:49 2017 GMT
            Not After : Aug 17 15:00:00 2024 GMT
        Subject: CN=d5ad3b382e8f78d52ba5b114118cfbad8f00f86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:5d:ff:1b:eb:9a:96:f5:c5:76:94:26:bd:
                    0d:45:0d:c7:ba:b8:23:08:73:62:93:f6:15:a3:02:
                    62:c6:ea:7d:67:b9:44:b8:c6:4b:53:72:65:0c:81:
                    83:4e:ca:b9:28:d9:3c:52:6c:a6:4b:1f:9c:7d:8d:
                    1a:de:83:20:d3:07:68:02:ed:7d:bc:81:15:bf:65:
                    99:2b:a4:03:1c:ae:9d:36:95:02:48:67:1b:0a:a0:
                    0f:91:75:8d:29:08:fc:d9:19:41:33:e0:8a:6c:36:
                    fc:bd:a1:08:40:29:93:5d:90:6f:d8:85:55:4c:dc:
                    b1:84:cc:b9:be:52:a1:db:2b:09:0b:63:05:62:62:
                    f6:72:bb:23:3d:45:24:1f:1f:fb:63:45:5b:19:ed:
                    d9:1a:35:b9:af:b6:45:0b:bc:2f:81:61:3d:10:cd:
                    76:56:a7:93:66:e4:81:eb:d2:3b:4c:63:54:50:8b:
                    a5:7b:75:aa:94:1c:4a:2f:80:90:cf:fb:da:3f:99:
                    b9:21:27:60:66:24:50:06:ea:87:6d:a5:cf:26:27:
                    44:df:af:26:5f:03:d6:02:10:49:66:d5:b8:81:71:
                    ab:3d:dd:ec:07:18:c7:7e:6a:32:eb:ba:bc:97:ca:
                    9a:b1:b5:f3:bc:45:e7:12:5a:35:b5:67:e7:a6:9a:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:09:4F:26:77:D7:C8:25:DC:C3:69:92:C3:26:6C:DB:9C:7F:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7fa9cd6-50b2-48a6-8036-96c29375a23e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7fa9cd6-50b2-48a6-8036-96c29375a23e/d5ad3b382e8f78d52ba5b114118cfbad8f00f86f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.64.0/21
                  200.24.248.0/21
                  200.107.88.0/21
                IPv6:
                  2803:a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52381

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:1f:aa:3f:49:c8:72:72:1c:d0:bd:0e:3d:a6:63:09:f4:
         8a:53:6f:bc:48:e7:34:8e:12:ad:ef:4a:a9:6c:16:71:63:02:
         c5:95:f5:b1:7b:3a:d1:16:2d:ef:29:6e:f3:26:22:1e:2d:61:
         03:6a:0f:c3:dc:49:db:a5:6c:e1:2a:3c:a5:23:e7:be:0f:4d:
         93:76:e4:be:45:07:37:8b:3e:1a:38:0c:2c:71:77:90:8c:1e:
         c5:7b:29:36:35:68:d1:c3:0e:fe:3f:7a:f9:b9:d3:6b:b3:b3:
         b8:01:38:26:d4:ab:bb:f0:88:4e:67:41:91:b3:4a:3f:46:3f:
         08:e3:de:25:17:69:f2:19:7b:90:b4:8a:67:23:b7:f6:f9:7d:
         c1:ed:04:cb:7f:f3:9c:18:37:13:bf:4e:49:04:22:2c:fd:b5:
         b7:46:5d:a9:8d:e6:8f:45:30:f0:50:b2:af:a8:0d:01:26:79:
         42:47:bc:fa:40:48:c2:7e:90:33:4e:75:db:bc:20:5e:72:0c:
         03:c2:09:ec:f9:dc:9b:75:5f:0f:df:c1:5b:1a:96:cd:8a:71:
         a6:db:23:5a:bc:a7:c6:61:da:5f:16:d2:eb:07:a5:a5:8c:8e:
         02:8f:5e:f1:18:bc:b2:0c:53:a9:c8:99:88:a2:59:3e:60:f6:
         18:8e:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----