Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9527b858846f6022832bad81d0fc8bc215515f.cer
File:                     fa9527b858846f6022832bad81d0fc8bc215515f.cer (raw, json)
Hash identifier:          VjIfMVnT0qUtqBdyKn7jT/jg8Qaa3QUq1E3XujKJrzw=
Subject key identifier:   9F:56:40:B0:FE:BF:7D:87:6E:0B:34:7D:4A:0E:A0:68:B2:8B:4E:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C8A171
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/fa9527b858846f6022832bad81d0fc8bc215515f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Sep 2018 16:24:54 +0000
Certificate not after:    Fri 30 Jun 2023 18:37:24 +0000
Subordinate resources:    AS: 266896
                          IP: 45.239.107.0/24
                          IP: 2801:11:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13148529 (0xc8a171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 16:24:54 2018 GMT
            Not After : Jun 30 18:37:24 2023 GMT
        Subject: CN=fa9527b858846f6022832bad81d0fc8bc215515f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:e9:19:73:04:ce:9d:ee:5f:9e:4b:28:c6:
                    a1:8a:bc:c6:79:5a:0e:0a:15:57:bb:6d:ce:55:5b:
                    4c:c8:3f:44:39:2b:5a:ed:fb:71:0a:44:90:fa:e8:
                    81:eb:55:22:3e:f0:34:10:e2:f5:04:ae:4b:61:62:
                    1f:32:5f:3d:37:08:cf:2e:f6:39:e1:7d:b1:d5:82:
                    c3:e7:38:9e:a0:d9:c5:e0:40:70:0d:e2:2b:14:16:
                    55:e8:c4:15:e9:f2:2f:3f:4f:11:42:e3:e6:89:a7:
                    25:1d:b3:20:4c:01:15:96:6f:19:b2:33:ca:41:3e:
                    d5:d2:b7:45:07:e6:86:67:ec:0b:12:d2:c2:e1:5a:
                    07:05:5f:68:3e:72:df:c4:b6:89:0b:d2:d1:f0:8e:
                    01:ca:42:d9:7d:0d:d0:33:c8:02:7a:54:4f:58:8c:
                    1a:e7:b8:eb:89:ff:f1:59:00:02:16:5e:e6:c1:99:
                    a7:90:66:f2:1d:39:cd:f7:19:8a:6a:e9:6c:d2:e8:
                    2b:b3:9c:d7:76:6e:b5:d6:78:ae:01:ab:a3:1a:07:
                    8c:c3:c8:75:18:7c:23:4a:29:58:fc:54:b1:59:9c:
                    d1:01:41:cd:f5:a9:e1:05:5c:9b:6b:46:ef:19:77:
                    72:1e:52:c9:9d:5d:b3:1a:25:b7:43:1b:7e:06:14:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:40:B0:FE:BF:7D:87:6E:0B:34:7D:4A:0E:A0:68:B2:8B:4E:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/fa9527b858846f6022832bad81d0fc8bc215515f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.107.0/24
                IPv6:
                  2801:11:f000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266896

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:34:99:ec:c7:1e:15:84:a2:0a:23:9c:3f:83:93:00:3d:
         a1:42:8d:7c:37:63:59:31:84:b3:6b:e1:39:ce:06:20:a0:c0:
         d9:56:9f:76:8a:e3:7f:07:99:90:df:75:10:4f:1f:0e:2c:fe:
         66:7c:54:1a:5c:9d:8f:b6:23:6d:b1:8f:77:1e:06:b1:aa:fc:
         43:f8:6e:1d:a8:76:67:5d:68:a1:f2:a3:7f:cf:f0:5c:83:f0:
         9e:84:8c:1a:79:b7:ce:b2:76:f0:f2:99:11:aa:d7:76:f1:97:
         ca:92:02:ee:b8:a9:a3:93:09:56:b9:25:ae:75:48:ec:f8:24:
         c3:07:1f:5e:2b:95:f5:11:39:ba:31:cd:fa:fd:dc:de:b4:92:
         74:92:e7:4d:e7:9a:bd:d9:ae:ea:75:57:91:6f:2c:db:ca:3c:
         8a:cd:97:fa:ba:aa:84:9a:64:dc:0e:e2:ea:8d:da:da:81:dc:
         d1:2d:ce:08:f0:70:bd:0d:b9:ce:c2:76:b9:10:16:c4:4c:6f:
         17:5c:e4:ec:6f:76:0c:73:76:dd:7d:44:57:63:3b:4f:92:94:
         ce:b0:b9:01:2e:46:79:17:6f:3a:30:2e:0e:2e:6b:09:8f:a0:
         f6:3f:5f:f0:a1:e4:98:4a:56:08:80:38:b9:d3:04:41:a3:48:
         49:db:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----