Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1759518f26b7397869e7c38be2dfc2aa9570316a.cer
File:                     1759518f26b7397869e7c38be2dfc2aa9570316a.cer (raw, json)
Hash identifier:          MOuBj8nnPRnfrKu8chO0LAvv9bTFR/RQOVO7onIOr84=
Subject key identifier:   44:DA:FD:D8:0D:E7:D8:42:F8:6D:04:92:DF:57:6D:9E:A7:FE:CD:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCD789
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c84a1ee8-7910-4e40-b704-e9c1fa702cf2/1759518f26b7397869e7c38be2dfc2aa9570316a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c84a1ee8-7910-4e40-b704-e9c1fa702cf2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 May 2020 00:25:57 +0000
Certificate not after:    Fri 23 Feb 2024 16:04:50 +0000
Subordinate resources:    IP: 138.97.140.0/22
                          IP: 2803:8840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14473097 (0xdcd789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 27 00:25:57 2020 GMT
            Not After : Feb 23 16:04:50 2024 GMT
        Subject: CN=1759518f26b7397869e7c38be2dfc2aa9570316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:6a:f1:c3:a4:e0:a7:d7:04:78:fc:b9:ff:
                    18:e0:4f:53:48:74:24:c6:d0:3b:aa:37:b0:d7:b8:
                    55:a9:bd:39:18:1e:36:b9:b0:8a:61:4f:a1:d2:2b:
                    c2:d5:61:3b:c0:2d:8e:3a:ef:7f:1a:75:6f:c2:9a:
                    42:37:c8:51:74:e2:29:12:74:70:4c:0d:69:8c:96:
                    cf:20:d5:39:30:f2:cd:38:5f:d6:e4:46:5c:63:36:
                    3d:7c:35:e3:24:42:98:58:5f:7f:cc:48:d4:11:fa:
                    d0:3c:85:cf:8a:64:61:1c:58:ee:ac:16:2f:05:55:
                    bd:5d:7c:47:e8:d0:bc:b7:8f:95:ae:57:32:70:8b:
                    33:a8:d6:e8:1f:dc:7a:72:f3:8b:32:1a:84:c2:2e:
                    fd:06:7e:ce:22:5e:90:b9:76:07:8b:d3:ec:f0:3a:
                    65:02:5d:00:55:40:11:be:1a:7a:e8:2a:f0:ef:45:
                    aa:8d:82:3c:70:6c:8c:38:e7:33:b3:31:a0:5d:1d:
                    f6:9d:48:9a:e3:7b:fc:31:ce:a0:f4:4a:6e:d3:f2:
                    94:da:98:ed:8d:43:33:4a:2d:eb:c7:df:78:a5:27:
                    84:f4:4f:b8:d6:5e:07:9d:9c:7d:63:a1:b8:7d:54:
                    86:d0:be:66:09:b6:38:e5:5d:fc:7a:d1:d2:e9:73:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DA:FD:D8:0D:E7:D8:42:F8:6D:04:92:DF:57:6D:9E:A7:FE:CD:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c84a1ee8-7910-4e40-b704-e9c1fa702cf2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c84a1ee8-7910-4e40-b704-e9c1fa702cf2/1759518f26b7397869e7c38be2dfc2aa9570316a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.140.0/22
                IPv6:
                  2803:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:89:d0:df:54:f3:a4:25:75:08:38:73:61:6e:ef:17:51:
         89:e3:69:a5:a4:c5:1e:99:dc:cf:45:4c:3d:74:95:24:e6:cb:
         45:67:f1:7a:f2:db:3c:97:9e:35:2e:85:ff:d7:f2:7a:37:07:
         89:62:52:a9:df:1a:f4:5e:4e:f6:3b:d2:61:00:af:da:70:2d:
         0a:7e:9f:3a:eb:de:1a:87:9f:05:0a:00:f7:b5:b1:ee:94:d7:
         db:ae:57:4e:6c:88:e0:2e:1e:92:9e:ec:f2:04:61:f9:db:ee:
         9c:3c:cf:28:6d:d1:bc:68:ee:29:47:b8:04:fd:3a:4f:7d:78:
         e5:68:ca:3b:bd:09:4f:d4:72:68:5f:1c:86:0e:14:31:63:ec:
         38:32:79:d4:86:1c:e2:c4:0a:2e:6d:e5:34:0b:b2:62:ae:7e:
         bc:6b:3d:18:93:71:b2:1d:2b:f7:62:0f:ff:6d:c3:28:48:e3:
         0c:70:0a:fe:fa:ff:e4:50:23:cd:9a:70:4e:c3:25:77:7b:a5:
         e0:61:d7:7e:35:53:35:f4:bc:27:33:a5:23:67:ef:5c:b0:fb:
         ec:aa:a2:55:7b:d5:1c:43:29:af:06:21:21:5a:26:e0:c9:72:
         e5:cf:09:36:de:32:e2:bc:97:1f:d7:cb:98:35:c7:54:eb:e5:
         0f:c2:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----