Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer
File:                     14dd9710595884a6cdc2418a4de21b5c2b40042b.cer (raw, json)
Hash identifier:          AKWOpCZyJxUCUAlQXBNjs9ZI0VVI2/1QqD2sz2dkhVo=
Subject key identifier:   82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D61DEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2019 19:43:44 +0000
Certificate not after:    Fri 01 Dec 2023 00:06:01 +0000
Subordinate resources:    IP: 45.170.248.0/22
                          IP: 2806:31f::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14032363 (0xd61deb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 19:43:44 2019 GMT
            Not After : Dec  1 00:06:01 2023 GMT
        Subject: CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:fd:2f:8f:d0:83:38:5f:49:f5:92:ac:5c:
                    2d:4c:32:1d:d5:d7:b8:03:41:8c:01:7e:a6:f3:d9:
                    a0:9b:09:b5:9f:2b:c9:ef:3d:2b:74:26:12:c9:e3:
                    ff:03:3a:fb:02:ec:9a:99:54:8a:62:7c:23:de:a7:
                    10:db:5a:fd:44:2e:d6:58:74:76:19:0a:d4:a0:ac:
                    96:7d:e4:63:58:7f:e9:fa:ee:b7:a9:4f:74:af:5a:
                    94:19:c6:74:b2:f7:0d:76:15:3a:c8:51:93:0c:ca:
                    d0:f4:6b:8b:35:21:6f:f3:48:1c:43:82:7f:dc:98:
                    cc:da:54:b7:58:c1:10:87:33:cb:e3:e2:c4:1d:e9:
                    03:1c:6e:40:36:ee:f4:51:17:9b:54:3f:aa:05:82:
                    9a:da:cb:6e:60:5f:fa:66:bc:32:a1:e2:78:48:41:
                    dd:36:b9:91:ad:e1:fe:7a:2d:65:f3:3c:59:d8:2e:
                    6f:9d:be:59:24:02:c8:60:93:03:5d:7b:f1:e1:f8:
                    e9:d5:4a:78:06:15:ab:90:21:c6:6a:f6:16:e6:6b:
                    8f:da:28:4b:d9:a6:9f:72:74:29:62:19:fa:8e:4e:
                    88:4a:6b:92:8d:b9:eb:90:90:98:5e:5b:a1:75:d1:
                    c6:86:a6:93:44:c5:f0:66:68:19:c9:bf:92:15:b0:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.248.0/22
                IPv6:
                  2806:31f::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:1e:ba:ca:6c:10:37:63:a1:f0:b6:03:ca:7d:d3:27:4f:6b:
         dd:73:f5:bc:31:43:16:28:4e:6e:48:1f:5a:f2:1e:24:5f:c0:
         6a:8d:19:b9:ca:2a:3c:5c:b3:6a:87:96:b1:bb:a9:79:14:a1:
         14:e2:32:94:33:03:75:3e:c2:6a:c1:25:f6:50:72:35:1c:a9:
         03:ba:c1:af:79:6c:0f:78:58:4b:4a:2e:1c:21:fe:21:4a:e2:
         d3:74:a3:15:fc:6d:c4:31:a4:c8:fc:dc:05:78:17:e1:14:af:
         39:d9:11:cf:51:3b:63:59:7f:a8:03:6c:12:f4:1c:21:99:62:
         86:df:f8:31:1b:bc:5e:89:28:bf:1f:46:8b:48:05:af:c2:52:
         91:1a:fe:b1:e4:af:b6:0f:68:0c:66:aa:30:30:8d:3f:90:27:
         e1:ce:47:4c:52:57:7b:98:d3:2e:61:ee:25:f7:41:aa:9b:a5:
         5a:4f:9e:ae:0b:ca:a1:cc:db:f6:5b:3b:17:a3:0a:98:de:81:
         8f:85:d1:69:4b:53:a5:5e:92:f4:70:ba:09:58:4c:2e:76:af:
         1e:ef:0b:07:03:e1:62:9a:53:7c:1b:ec:84:8a:57:cb:18:5e:
         3a:53:a2:0a:f2:3f:a6:9b:4b:77:92:e7:a9:28:4e:90:50:62:
         7b:d5:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----