Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49a28afd9e7d55240140db2ac13bc606d7fbac5.cer
File:                     f49a28afd9e7d55240140db2ac13bc606d7fbac5.cer (raw, json)
Hash identifier:          dzg7duhx8BtG8dCDoDt93knWwGvfJ9sz5uDMFmRKh6Y=
Subject key identifier:   72:2B:23:1D:D6:88:5D:32:49:A5:BE:74:94:A1:62:4A:A2:52:AF:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4F392
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/f49a28afd9e7d55240140db2ac13bc606d7fbac5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:23 +0000
Certificate not after:    Fri 13 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 27997
                          IP: 186.5.192.0/19
                          IP: 200.29.248.0/21
                          IP: 2803:f820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16053138 (0xf4f392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:23 2017 GMT
            Not After : Sep 13 15:00:00 2024 GMT
        Subject: CN=f49a28afd9e7d55240140db2ac13bc606d7fbac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:c4:1c:3a:3f:01:1c:ad:03:96:3f:3e:0c:
                    8b:0e:f9:c3:09:67:ce:df:fe:51:4d:21:5a:81:94:
                    27:4a:65:0b:a3:4e:aa:25:0a:3e:63:ca:ab:1f:f9:
                    f9:0b:5f:13:1d:bc:5d:45:75:a5:d4:34:a6:50:c7:
                    ab:b9:2a:17:73:cf:23:dc:a5:d4:6e:ec:70:a0:0d:
                    1a:66:8f:a4:24:fa:b4:ec:f6:e8:bd:38:90:8a:10:
                    eb:d4:2b:6f:ec:99:c2:16:e9:5e:60:03:84:a9:5f:
                    df:3b:1a:7f:7c:10:45:27:47:62:12:10:a5:11:33:
                    d4:c2:e8:6d:f9:95:80:d3:0e:0a:68:0a:28:04:44:
                    75:2e:63:3a:2e:a0:84:d6:9c:e0:71:0a:1c:c4:9e:
                    3f:dc:df:5a:da:13:da:5e:c4:6c:c3:12:34:52:6d:
                    9f:b6:ca:b9:7a:f7:17:3e:ca:e7:a6:b0:d5:cb:c8:
                    1a:aa:e1:9e:9c:ec:ce:f1:94:9a:6b:5d:44:34:13:
                    a6:1b:1e:21:16:f8:2b:ed:4c:cb:a3:63:cd:9d:08:
                    9c:55:27:ed:a3:01:89:57:76:2d:e7:25:79:6a:ee:
                    2b:93:96:52:9a:20:d2:5f:16:08:30:7c:8d:d4:b3:
                    de:9f:01:a7:cd:ec:c0:15:c1:c9:28:5f:3d:2e:51:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2B:23:1D:D6:88:5D:32:49:A5:BE:74:94:A1:62:4A:A2:52:AF:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/f49a28afd9e7d55240140db2ac13bc606d7fbac5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.192.0/19
                  200.29.248.0/21
                IPv6:
                  2803:f820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27997

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:49:12:75:1a:09:e7:84:0e:1b:10:b9:09:6c:02:e7:d8:
         65:d3:2c:79:27:c9:91:9d:0f:97:bb:a7:85:dd:36:b9:5f:42:
         ad:ef:46:1b:80:7d:d7:a5:39:ef:f8:cb:a1:04:73:49:8e:93:
         96:10:9d:a7:c9:bb:29:f6:e0:b7:e0:30:77:59:c2:18:c5:30:
         eb:18:2a:47:56:d4:94:87:98:07:26:5e:27:cb:9d:e5:10:db:
         2a:ad:1d:b3:f6:13:22:49:c5:81:7c:b2:c7:bc:2c:ad:ca:83:
         0b:f9:e2:b4:f3:ad:d7:c3:fd:6b:fb:5d:81:ec:74:32:c5:4d:
         74:90:9b:24:d4:2b:20:1b:6e:6a:d2:26:1d:d8:88:72:c5:6a:
         ee:66:6b:ea:30:0a:12:bb:0c:6d:bd:0d:c8:e8:ce:83:ca:66:
         0d:91:6b:04:ea:56:5c:33:76:2a:b0:85:d6:74:58:9a:08:8c:
         53:5f:b5:40:11:64:26:59:52:8f:2e:d2:1e:85:d7:b8:f2:db:
         03:b6:f8:c5:c5:36:f4:c8:da:f6:c4:9e:28:79:19:e3:3b:20:
         7d:b9:28:ec:3b:e0:89:6a:ff:6f:60:a2:10:4e:a1:94:29:8b:
         83:ca:52:18:52:6a:25:c6:a0:25:d2:aa:36:58:2f:78:9c:f0:
         78:58:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----