Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8fafb1e569b39f087174e8f6871507e115844c0.cer
File:                     d8fafb1e569b39f087174e8f6871507e115844c0.cer (raw, json)
Hash identifier:          5roGcr+K0WD+bEQtfeXiAwVg3x4ULLyiN9Jhq5QIGfo=
Subject key identifier:   96:4A:38:1B:DA:0F:80:BF:52:87:D1:98:66:0B:51:CE:AA:B1:DE:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDF9F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/54beb487-aeda-44da-ab79-8acd87f5f955/d8fafb1e569b39f087174e8f6871507e115844c0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/54beb487-aeda-44da-ab79-8acd87f5f955/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:24 +0000
Certificate not after:    Fri 08 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 27912
                          IP: 200.107.208.0/21
                          IP: 2801:0:30::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14547446 (0xddf9f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:24 2017 GMT
            Not After : Mar  8 15:00:00 2024 GMT
        Subject: CN=d8fafb1e569b39f087174e8f6871507e115844c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:7e:df:64:03:0a:cd:26:72:73:58:02:f3:
                    5c:b8:1f:30:11:cd:a0:8b:08:5b:63:95:11:ad:ed:
                    0f:0d:80:87:70:6d:82:71:89:48:f2:17:31:93:77:
                    82:74:d5:37:94:ad:7c:df:e7:f9:90:71:75:c2:c4:
                    b8:fb:dc:a1:b4:1e:62:4f:97:14:fb:4b:8a:e6:a6:
                    66:4b:e5:bf:85:c1:89:b2:5e:15:de:2c:96:2a:96:
                    e9:ea:af:32:49:cf:32:a1:6d:9c:95:f3:e1:d4:db:
                    ab:a3:82:ab:c9:40:4e:f7:a6:87:ce:91:7f:09:29:
                    96:f2:c1:da:9d:05:b6:77:75:3b:ab:48:d4:78:04:
                    c5:e8:d0:9e:d4:ef:06:7f:40:06:b1:dc:9e:3a:fe:
                    42:6f:95:52:87:b9:e6:77:95:f3:36:2b:70:1d:90:
                    12:00:73:f0:3f:db:e3:2d:3a:21:6c:74:c5:c4:92:
                    d8:dd:a4:4c:2e:fd:97:2d:0d:c2:c9:c1:1d:a8:b7:
                    e1:2f:1b:5a:33:e6:db:93:28:57:30:56:54:aa:98:
                    be:73:c8:ac:ed:34:98:e3:b4:29:10:0b:d9:65:c6:
                    d1:b1:7c:10:d2:a4:8b:b7:3b:0b:00:70:94:c8:15:
                    6f:a1:60:00:97:96:ef:c7:5f:c4:05:09:d7:df:89:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4A:38:1B:DA:0F:80:BF:52:87:D1:98:66:0B:51:CE:AA:B1:DE:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/54beb487-aeda-44da-ab79-8acd87f5f955/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/54beb487-aeda-44da-ab79-8acd87f5f955/d8fafb1e569b39f087174e8f6871507e115844c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.208.0/21
                IPv6:
                  2801:0:30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27912

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:7c:59:ae:97:d5:cb:35:9b:5c:41:21:f9:be:64:96:3c:
         9f:8b:f9:02:7c:e9:8b:e9:79:45:d1:51:c4:5c:38:cc:02:15:
         dd:fc:68:d1:05:6f:8d:d5:13:80:e2:10:b3:25:16:73:2c:32:
         b2:e8:f8:61:18:c5:62:4c:6d:e8:14:3d:ba:70:4e:41:21:1f:
         4c:09:7c:df:cc:4a:49:e0:b5:b8:46:5b:a8:d5:51:9d:c2:c6:
         41:7e:b1:a0:5b:e9:07:84:79:e3:e5:69:63:cc:46:a6:9c:af:
         91:ec:ac:5e:48:c5:aa:63:19:da:3d:87:6b:04:1e:a8:38:a0:
         e8:10:cd:0a:ea:21:f9:34:e9:16:6f:3c:f8:e4:3a:4c:8f:1a:
         4e:ca:fe:7f:c9:17:06:7f:6a:d6:ba:14:da:a9:32:bb:b1:48:
         33:e9:2f:8d:16:97:43:b6:4c:da:e6:d6:05:2a:8d:01:61:ae:
         05:38:34:98:42:65:13:7d:67:3d:c1:1f:ce:2e:f7:71:52:39:
         df:a6:17:9b:95:ef:6e:3a:2a:17:d1:db:d5:4a:93:ad:41:fa:
         8e:02:73:c9:63:65:2b:75:44:38:67:be:e3:ae:71:24:14:32:
         38:51:66:3d:fd:af:c2:b4:b0:2b:75:5d:76:a4:a1:7b:0c:08:
         d0:89:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----