Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
File:                     1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer (raw, json)
Hash identifier:          XIxlmAfD7zsvnHMcm6ybiqRaI73LCAhNsQ30IwIiCPI=
Subject key identifier:   2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D59D25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2019 11:09:21 +0000
Certificate not after:    Sat 25 Nov 2023 13:54:42 +0000
Subordinate resources:    IP: 45.170.132.0/22
                          IP: 2803:aba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13999397 (0xd59d25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 11:09:21 2019 GMT
            Not After : Nov 25 13:54:42 2023 GMT
        Subject: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:5c:9e:b1:da:05:45:45:d9:bf:7b:68:88:
                    41:11:91:0b:3e:bf:b9:c5:1f:4f:07:36:23:25:60:
                    c5:56:c3:f0:b8:80:64:ab:93:07:a8:15:28:d4:26:
                    55:bf:42:e3:f5:e7:d7:25:7f:80:c3:5a:68:e7:e8:
                    36:d4:65:e7:4a:34:88:b9:d2:5e:80:60:e7:d7:e2:
                    42:b4:6d:7a:7a:db:ea:3c:b2:6a:0c:4b:11:fb:20:
                    f2:7f:28:36:72:13:b9:14:ac:98:e0:e7:66:23:d7:
                    19:a3:7c:4b:33:37:ab:71:18:98:31:41:15:79:e2:
                    09:9f:8c:24:1f:4f:f6:09:e0:5a:eb:eb:71:df:7f:
                    d7:2e:4d:bc:b6:e6:cd:6b:ad:4d:42:58:3c:fb:a9:
                    85:c5:7e:b5:81:d2:cb:51:2e:e0:f6:a4:f9:84:85:
                    d6:0c:c7:f0:90:0a:a6:17:ec:48:16:71:79:5b:56:
                    a4:16:8e:da:d9:03:91:55:e6:a9:7d:84:3d:0c:54:
                    80:d8:22:f6:fe:ef:e1:3b:25:8d:dc:3a:fa:b9:78:
                    ed:4a:7a:f0:76:66:0c:77:ac:ef:b4:2d:e3:fd:b2:
                    96:e2:ce:1d:af:aa:70:24:57:76:f4:fc:5f:3b:5e:
                    65:92:54:6f:bb:3f:b7:2a:6e:fa:bd:9c:14:90:04:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.132.0/22
                IPv6:
                  2803:aba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:65:2d:47:6a:2d:02:9c:e4:df:e1:3b:d9:25:c4:d0:fe:
         1f:2a:70:4b:5a:7c:78:76:c7:ce:90:78:42:61:ba:9a:46:b4:
         8d:39:a7:c1:6a:91:51:4a:8d:bc:45:fe:16:f1:dc:9a:09:2c:
         41:0b:f5:74:c1:af:ee:cd:f2:6f:eb:da:b1:dc:9a:6c:6e:8c:
         fb:14:28:e5:4e:ce:04:e5:a1:00:5d:06:78:6d:61:1a:d2:9d:
         46:d3:f6:d5:60:c4:b9:82:aa:f4:c9:39:4d:5b:e2:5b:b5:37:
         02:7f:b6:59:1f:ea:3c:83:e4:b1:21:27:83:fb:cb:7b:ec:c9:
         18:cb:3a:e5:1a:25:a8:da:18:91:e6:49:18:78:22:e5:23:e3:
         40:31:d2:38:c9:1c:33:17:00:a5:48:52:50:eb:81:78:70:2f:
         74:58:ce:17:0f:65:06:61:77:66:38:79:91:22:e4:de:e8:57:
         6c:a4:3e:e6:f9:34:af:7d:45:e7:fe:72:56:b2:30:ef:aa:8f:
         88:78:cb:31:b2:22:73:4e:5f:11:9f:cf:20:41:af:a6:7e:33:
         62:8d:57:a6:a7:2f:e6:4c:55:85:fe:c3:51:02:74:1d:02:b6:
         4d:4f:91:4e:c2:09:ec:32:bd:54:01:b4:ec:52:28:93:fa:7b:
         7e:c4:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----