Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdd526d7e7abffb4e5ca5b33105025838990e9a7.cer
File:                     fdd526d7e7abffb4e5ca5b33105025838990e9a7.cer (raw, json)
Hash identifier:          p+p2uJ679ZAE+VklLVFkxX2Zd9OZtlgcmWtYVZ0dKYA=
Subject key identifier:   E6:07:43:CA:87:2A:92:14:91:9E:4A:9E:2E:7D:77:B7:0D:3B:B1:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4A307
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Sat 11 May 2024 16:44:35 +0000
Subordinate resources:    AS: 61467
                          IP: 131.0.136.0/22
                          IP: 2803:e580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14983943 (0xe4a307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : May 11 16:44:35 2024 GMT
        Subject: CN=fdd526d7e7abffb4e5ca5b33105025838990e9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:0f:c5:f7:cc:1f:23:54:d7:04:d8:2c:94:
                    51:8b:fc:55:19:71:70:87:79:b2:29:57:a8:6d:5e:
                    95:bf:1c:9a:6b:05:47:f5:79:20:19:a1:a4:b7:c6:
                    ce:ad:99:a8:b1:c2:35:6b:91:92:18:b3:60:c3:ff:
                    34:b7:9d:9e:5c:f0:3d:86:33:18:ed:6e:0b:d6:42:
                    74:24:e9:aa:8c:97:74:f4:30:c6:64:ef:a6:45:6a:
                    a0:7e:1d:28:20:ea:d3:7d:e2:d5:84:67:3a:64:a0:
                    75:b5:3d:26:ca:a7:c2:78:5e:47:9a:06:48:e5:3a:
                    5f:21:23:f8:d5:59:d5:1c:91:55:00:a0:3f:2f:2c:
                    af:ea:8c:72:a4:97:4e:82:47:29:31:83:08:5d:34:
                    03:33:1a:3e:16:34:1b:2b:06:a6:e1:ce:04:56:e1:
                    4e:a5:95:bd:54:f1:3d:56:5f:bc:a2:de:50:ea:ca:
                    43:e1:4b:b2:b9:37:36:97:65:59:41:fe:1e:7e:d8:
                    42:70:59:93:52:38:b0:6d:13:7d:a2:4c:26:1f:dc:
                    91:52:6e:8b:58:04:7e:4c:65:60:db:8e:c5:95:90:
                    65:ff:2a:62:c2:c8:57:58:a0:39:50:73:66:8d:95:
                    f8:3d:0c:75:cf:03:21:9e:4c:01:1f:f3:51:03:90:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:07:43:CA:87:2A:92:14:91:9E:4A:9E:2E:7D:77:B7:0D:3B:B1:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.136.0/22
                IPv6:
                  2803:e580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61467

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:d8:3a:1c:1e:1b:ab:51:87:09:8b:37:1b:99:87:84:e8:
         9a:c4:75:87:e5:e9:4e:ff:9f:a3:94:92:7a:7f:38:45:87:5b:
         20:bd:0b:8c:4a:eb:ad:02:df:d0:a8:cd:21:ae:98:1e:1f:2b:
         2e:59:58:86:6a:93:57:13:14:0a:7b:6a:bc:a5:d9:77:23:1e:
         d1:e5:f0:97:13:a9:fa:a7:4c:75:4d:ac:9b:30:7a:6c:1e:7c:
         8a:13:1d:bc:b0:17:2c:f0:46:80:73:a0:78:18:90:95:0a:9f:
         8d:57:16:f7:ac:87:e3:ad:83:4c:09:bc:5c:25:be:d0:ee:ce:
         fc:59:39:48:37:ed:1e:20:ad:fb:a5:75:8e:e1:fe:d1:9a:f1:
         39:df:da:01:27:db:90:9a:f5:bf:b9:5a:d4:38:2e:3a:8e:68:
         09:0b:1c:8c:e7:02:55:29:ea:95:05:05:bf:4a:3b:8b:f7:27:
         cd:0e:44:8b:75:17:b0:1a:c9:cd:ad:08:ab:05:36:5c:b6:1d:
         4d:29:48:6b:6e:27:1b:37:22:4d:48:4e:55:ea:d2:a2:06:56:
         ff:a2:d8:5f:a6:a2:40:09:7c:5d:bc:08:3e:5a:f6:76:b8:cd:
         ed:2e:ed:c2:89:ac:6b:15:51:45:c0:ee:15:fb:cf:18:aa:5a:
         70:dd:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----