Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0862dd9c5fdd3b7cf649c9991a66fa51c2f8dc1d.cer
File:                     0862dd9c5fdd3b7cf649c9991a66fa51c2f8dc1d.cer (raw, json)
Hash identifier:          OdM109owxPGQZkepHVfRrVICgEZ4XI0M+nityCJVaOM=
Subject key identifier:   2F:65:59:2B:88:5E:15:48:94:86:43:36:06:43:68:70:41:2D:58:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F609B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6510a7d0-25c3-461b-ac55-3c302cd29977/0862dd9c5fdd3b7cf649c9991a66fa51c2f8dc1d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6510a7d0-25c3-461b-ac55-3c302cd29977/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2019 22:01:32 +0000
Certificate not after:    Sat 21 Sep 2024 16:56:02 +0000
Subordinate resources:    IP: 2801:162::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16124337 (0xf609b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 16 22:01:32 2019 GMT
            Not After : Sep 21 16:56:02 2024 GMT
        Subject: CN=0862dd9c5fdd3b7cf649c9991a66fa51c2f8dc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:26:b5:07:20:69:25:c4:39:ad:26:ec:25:
                    00:4c:74:af:5b:c6:36:28:8d:d7:93:e0:51:9c:3b:
                    40:b6:1f:cd:b9:c6:c6:9e:b6:ec:af:98:25:ad:9f:
                    39:5e:0b:36:d7:5f:b6:9e:38:16:8d:bd:ad:0d:a7:
                    f3:48:ce:1a:35:27:47:c7:7d:81:88:48:31:e1:e2:
                    0b:d1:9c:1d:29:96:9c:2a:91:5b:56:f1:81:9d:d6:
                    95:c1:28:be:d2:00:4d:9f:95:57:d7:09:8c:f5:29:
                    bf:71:ff:b8:dd:c6:96:01:15:44:5a:3e:38:3d:80:
                    7b:23:68:80:02:dd:0c:d1:0f:ae:d2:60:27:fd:86:
                    2f:a9:4d:d1:7f:e4:e8:5d:18:ae:eb:24:0b:d4:5c:
                    3b:02:1c:c3:f2:96:b8:cf:30:86:2d:5d:ba:87:f1:
                    bb:d7:2d:67:10:d0:d0:ea:e1:24:50:3c:63:0c:9d:
                    8e:b8:e3:06:32:53:33:4b:76:ef:24:6d:ff:3f:72:
                    4e:5f:1d:53:2f:da:06:4d:40:77:9d:74:07:49:fa:
                    af:6a:b4:88:e9:8a:8e:dc:fc:72:c3:62:33:0b:c8:
                    b2:2b:2e:f8:3f:e7:a4:f4:06:26:2f:22:a1:d3:df:
                    28:b1:fe:f9:45:04:d2:b6:1f:46:cc:85:b7:63:0d:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:59:2B:88:5E:15:48:94:86:43:36:06:43:68:70:41:2D:58:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6510a7d0-25c3-461b-ac55-3c302cd29977/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6510a7d0-25c3-461b-ac55-3c302cd29977/0862dd9c5fdd3b7cf649c9991a66fa51c2f8dc1d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:162::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:f3:15:e4:f6:34:39:49:91:cc:92:12:f4:52:72:7f:d5:
         95:eb:c0:42:6c:d0:46:c8:ca:a6:5d:9e:b4:5e:40:eb:8e:74:
         f7:21:c0:be:4f:57:a8:37:e6:45:74:10:2c:50:0e:26:58:bb:
         3d:99:a7:a3:59:ea:73:98:5d:97:75:75:c2:51:ca:3a:4f:cc:
         29:d0:eb:d7:f7:b7:0a:8f:da:1b:ec:4e:ec:40:67:9b:61:1e:
         ae:7b:88:fd:99:ec:4d:c0:1c:49:c9:0c:1d:e8:76:99:21:b4:
         74:57:7c:d8:e9:80:e1:24:8d:79:58:6a:2d:a0:cd:8a:ca:e0:
         0a:a1:71:72:ec:45:c9:9f:1a:25:a2:13:00:6a:97:9d:a6:ab:
         97:ec:af:9b:0d:68:54:61:50:46:b9:83:7e:72:5b:73:52:d2:
         b7:c2:30:f0:8f:4d:e9:5e:23:1f:fe:f1:01:b2:70:97:bb:1e:
         3e:05:03:66:fa:cd:a2:3a:c2:b4:38:d7:01:6d:d7:f5:bb:72:
         ff:5e:73:95:65:b6:a6:67:d3:c5:06:cc:73:62:27:f5:c2:33:
         03:43:98:c2:df:75:1b:6d:bb:5f:e8:00:8a:3c:e2:58:6b:67:
         eb:8c:9e:43:fc:63:70:67:a2:1d:b1:08:2d:51:6c:c1:ce:74:
         d0:ba:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----