Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
File:                     10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer (raw, json)
Hash identifier:          5TwaNAECr+5R4uRMkBSKgRc7aPJxb/k7Ao9Y/a5iqZI=
Subject key identifier:   B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDAA0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Jul 2018 16:52:52 +0000
Certificate not after:    Mon 04 Mar 2024 18:17:17 +0000
Subordinate resources:    IP: 45.235.140.0/22
                          IP: 2801:13:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14526989 (0xddaa0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 23 16:52:52 2018 GMT
            Not After : Mar  4 18:17:17 2024 GMT
        Subject: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:df:02:de:b1:3e:25:eb:0b:79:f8:a9:e7:
                    b7:0d:1a:99:f0:91:ea:01:c9:6c:2e:ad:e1:e5:a6:
                    88:42:cd:72:1e:53:7b:3d:98:11:9e:75:4c:b9:fb:
                    ab:10:87:61:6e:7e:ca:70:5a:b0:d4:35:3b:03:76:
                    1f:5d:c5:a0:36:8f:8b:b6:8b:18:18:c8:8c:30:0c:
                    af:41:eb:49:55:23:32:a3:2b:98:f2:fa:41:1f:2e:
                    01:83:2b:32:b0:8f:05:a3:30:6a:c4:6d:3a:37:37:
                    1a:08:23:c6:75:a8:95:8c:a6:8a:aa:f7:b2:d7:28:
                    60:3e:73:d0:7e:20:ea:da:e4:04:85:54:ec:dc:a6:
                    02:1f:1a:5d:b0:73:f0:fd:44:64:54:b7:64:1d:e1:
                    ed:32:a5:07:d0:58:35:14:91:e2:1f:4f:1a:fd:92:
                    4a:50:5a:0e:cc:18:3d:05:eb:d7:49:06:ad:d0:b8:
                    24:80:46:60:7f:61:32:00:87:1f:36:ba:7c:0f:a2:
                    33:ea:b1:71:c3:eb:b5:7b:3d:fe:cf:71:1a:f6:ff:
                    ad:21:b3:63:f7:a2:14:a9:16:fb:57:b2:b0:85:58:
                    83:aa:3d:af:81:61:62:bc:6e:02:6f:6b:0c:f2:3c:
                    1b:93:80:b0:8a:5b:16:6f:3c:80:37:01:6d:e6:2c:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:d8:85:eb:18:99:1f:d4:42:97:2c:8d:c7:ae:3c:38:f7:
         a3:65:98:9e:cf:45:cb:4e:15:66:a3:a7:2a:61:d7:67:ed:97:
         00:ba:20:d3:62:c1:9d:66:c2:f9:d0:f3:c7:9a:af:0b:90:5a:
         32:75:bb:6c:2c:ba:42:c5:00:de:ba:b5:29:5c:e0:b8:fa:bf:
         52:60:f9:2e:04:17:a4:3d:3a:b3:5b:72:a4:ca:16:17:29:77:
         34:f7:8c:ff:de:c9:97:68:55:66:f8:f3:70:2c:e4:ba:63:6b:
         2a:98:d6:13:2c:95:45:88:79:7a:52:d3:a1:9c:89:ef:8d:04:
         dd:94:8b:d2:e0:b2:f9:d9:61:b1:98:b9:86:59:90:5b:7c:68:
         29:14:55:ce:81:c6:07:e7:85:27:9b:4b:c2:d1:35:87:34:6e:
         c0:66:b1:b9:6a:b4:d0:67:b4:e6:96:b9:b2:87:b8:d0:66:35:
         fb:6d:fb:31:d9:41:fd:5d:08:42:ac:46:7a:f1:51:88:21:d5:
         ad:ca:28:77:a7:d9:92:cc:0c:56:ae:33:8c:82:51:bd:12:db:
         06:87:96:46:ee:a8:ae:d9:33:65:d0:de:db:5a:2c:9d:42:c3:
         45:f5:d1:9f:33:20:5f:89:e2:04:ea:a7:fc:e1:7e:e8:84:f4:
         2a:bd:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----