Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1cb9c49815293f5f9842b7199758ddd455e663.cer
File:                     0d1cb9c49815293f5f9842b7199758ddd455e663.cer (raw, json)
Hash identifier:          qRmQQuOftcHS+x+4hdN1aneBsUAdpV2wAKnaNUwBJKw=
Subject key identifier:   43:56:E9:F6:88:6A:E3:9E:F1:8C:27:6E:3F:69:D3:78:86:12:DC:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D60BFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/0d1cb9c49815293f5f9842b7199758ddd455e663.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Feb 2019 07:04:15 +0000
Certificate not after:    Thu 30 Nov 2023 14:27:59 +0000
Subordinate resources:    IP: 45.170.104.0/22
                          IP: 2803:9ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14027771 (0xd60bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 07:04:15 2019 GMT
            Not After : Nov 30 14:27:59 2023 GMT
        Subject: CN=0d1cb9c49815293f5f9842b7199758ddd455e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:3a:69:7f:4b:1c:2d:43:db:a7:db:98:9b:
                    fe:89:9f:7a:a4:af:29:4c:06:7e:e3:60:ff:48:eb:
                    44:25:4a:09:3d:94:a0:a8:af:39:69:e3:98:65:6d:
                    64:31:c2:83:69:5f:14:a6:aa:c8:1e:23:1f:3a:28:
                    78:7d:21:48:2f:10:95:f4:72:79:d8:34:70:bf:c5:
                    e4:93:22:f3:69:e5:56:2e:d2:fb:b1:8b:98:54:94:
                    a5:29:70:b3:29:64:dc:eb:a2:5d:71:64:b8:e8:7a:
                    cf:55:d8:f7:13:32:a2:4c:a6:7f:4a:48:cb:bf:e3:
                    69:f1:ea:d8:1d:1d:ec:87:49:82:c9:aa:45:a4:40:
                    ba:ec:3f:bc:fa:6b:bf:32:e8:2b:0c:4c:ee:98:aa:
                    8f:3a:4a:7f:76:6d:1d:14:ef:6c:4a:95:84:ca:0d:
                    45:72:9e:40:92:0a:91:bf:6e:2e:6e:8f:6e:69:5f:
                    28:64:c8:ea:b5:9e:12:22:4f:7a:79:8a:11:86:2d:
                    b8:a0:8b:a9:4c:fa:9b:3f:aa:e9:f6:64:25:e4:e1:
                    d8:44:22:94:d6:7b:5e:67:e4:c2:c0:7d:93:c4:9c:
                    3d:fe:63:d7:aa:ec:2a:14:91:ec:ea:b2:87:2f:ba:
                    1b:ac:ef:1b:14:dd:e9:9b:50:85:52:d8:77:4c:f6:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:E9:F6:88:6A:E3:9E:F1:8C:27:6E:3F:69:D3:78:86:12:DC:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/0d1cb9c49815293f5f9842b7199758ddd455e663.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.104.0/22
                IPv6:
                  2803:9ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:41:45:03:bc:ea:45:05:9a:81:ef:12:e8:a7:8d:fd:96:
         26:83:ef:eb:ff:09:b7:bd:88:1f:d5:72:2b:83:07:d1:21:aa:
         f6:49:23:bf:18:9d:84:a6:8e:27:d0:45:70:96:ec:35:86:7a:
         91:18:af:b4:7d:b6:f2:c3:91:00:3f:07:b5:b7:67:44:2e:37:
         36:b7:83:83:d4:95:18:27:8f:45:92:2f:e6:d3:c1:4f:07:f6:
         f5:ec:44:29:84:96:38:fb:b7:9f:0a:6b:53:d5:9c:1d:cc:d7:
         de:b4:8b:cb:76:8b:7e:b7:6b:47:e0:a9:d9:66:43:4f:6f:b8:
         f6:57:98:aa:46:64:a0:35:72:6f:11:15:38:c3:84:fb:b1:19:
         ce:a9:df:4f:dd:1c:e6:28:06:fb:fd:d6:75:be:ff:e9:5b:78:
         a8:9c:04:ea:71:81:b0:19:d1:7c:87:35:fd:d8:ac:0b:9b:dc:
         d8:05:7c:30:a3:3f:a4:00:9e:12:56:fe:3c:18:7b:5b:c0:77:
         97:ee:f3:90:79:4f:dc:24:cd:6e:bf:56:a3:8f:ef:e3:56:7a:
         fc:09:9c:be:45:b4:ce:95:e4:05:12:33:2a:bf:a7:e5:4f:f5:
         63:1a:45:f0:72:ed:f3:03:1b:83:ff:84:e5:75:ca:0b:4a:f8:
         9e:1c:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----