Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e28ebb51eda580381e5bb87344d5b4f14a425ec.cer
File:                     1e28ebb51eda580381e5bb87344d5b4f14a425ec.cer (raw, json)
Hash identifier:          5BvcT08Hy/kzMJaXQ5mzrMiyNsv5L/tRZnHGMtU6l4c=
Subject key identifier:   FD:BF:00:EC:1A:46:22:F4:A1:BD:09:D4:CF:BD:83:38:1A:71:3E:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE9634
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0fd3a2e7-fc15-4e91-85e7-6efbdcc04571/1e28ebb51eda580381e5bb87344d5b4f14a425ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0fd3a2e7-fc15-4e91-85e7-6efbdcc04571/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Feb 2021 17:42:17 +0000
Certificate not after:    Fri 15 Mar 2024 01:21:45 +0000
Subordinate resources:    IP: 45.235.128.0/22
                          IP: 2806:301::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14587444 (0xde9634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 17:42:17 2021 GMT
            Not After : Mar 15 01:21:45 2024 GMT
        Subject: CN=1e28ebb51eda580381e5bb87344d5b4f14a425ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:c0:8f:99:85:2d:56:92:e3:37:71:4a:e5:
                    bf:7c:8b:f6:30:81:90:95:b3:b2:bc:fa:05:36:b2:
                    79:1c:d5:41:aa:ba:cb:f1:e6:c2:61:87:f0:7d:39:
                    ea:bf:14:82:fb:c3:d1:64:cf:4d:53:f8:9d:b3:50:
                    63:f0:1d:1b:1d:01:7a:66:eb:6e:53:1a:c6:f4:52:
                    b2:88:87:7d:79:77:31:ff:16:ae:8e:86:ec:b7:da:
                    de:f2:6b:6b:a3:c8:6f:2a:53:91:e4:32:4a:02:03:
                    ef:8b:60:1c:71:42:ff:d7:93:e5:01:11:f6:fa:44:
                    72:e5:80:7f:25:61:60:3e:b7:f9:e5:f8:8d:45:30:
                    b2:4d:75:12:9e:19:15:06:d0:e3:4f:92:34:ae:ed:
                    ae:2b:e1:a8:7b:28:97:c6:63:2e:07:b9:81:87:9e:
                    77:6a:b7:87:5d:3c:bd:ec:26:52:f4:70:64:69:72:
                    39:bd:3a:80:67:ef:7c:b1:fb:e6:7c:de:76:a8:14:
                    32:51:57:a4:c8:fe:70:ce:31:fc:ad:d6:59:8c:77:
                    90:46:91:59:ff:3c:9d:31:a7:68:af:dc:b0:a5:b7:
                    77:17:5b:e6:9d:67:6b:a5:ae:ca:3a:db:4e:8f:f1:
                    dd:4b:f8:e0:20:b9:f5:05:ce:7d:11:a6:9d:a7:c9:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:00:EC:1A:46:22:F4:A1:BD:09:D4:CF:BD:83:38:1A:71:3E:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd3a2e7-fc15-4e91-85e7-6efbdcc04571/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd3a2e7-fc15-4e91-85e7-6efbdcc04571/1e28ebb51eda580381e5bb87344d5b4f14a425ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.128.0/22
                IPv6:
                  2806:301::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:e3:da:c7:b9:2a:7c:64:2c:20:5f:3e:cd:33:17:36:ec:
         82:45:d7:97:10:3e:26:08:4f:68:45:b2:a8:24:75:22:8d:8b:
         d0:5e:7b:ee:4f:d4:5c:bc:88:0d:7c:f7:9f:be:f8:ba:1d:e0:
         c2:9d:5b:bf:0d:5e:df:71:c3:5b:d4:b7:3b:10:4d:9d:cf:9e:
         5b:8e:ef:9f:b0:09:14:c9:9d:2f:48:f4:37:48:0d:9a:1e:bd:
         1a:b9:40:f9:3c:6f:36:02:f5:a6:86:33:1b:c1:7a:39:ac:05:
         4d:2d:9b:57:d8:f1:6c:24:4f:65:92:07:2a:1c:82:d1:71:38:
         18:cc:7f:46:39:af:ba:a9:25:f8:d7:99:f5:6a:b6:d8:e9:93:
         27:74:88:3d:7d:13:87:2c:29:fe:5e:60:7b:c6:25:23:82:5c:
         1e:8e:3e:da:56:bc:97:40:41:17:23:5c:9e:32:63:40:37:53:
         d8:3f:ed:34:27:c1:61:b7:4d:d8:97:ee:5d:bb:2b:09:69:74:
         21:09:51:09:c7:70:98:c4:a0:b8:d1:02:59:68:6b:f6:48:f8:
         41:3f:03:bf:42:c3:85:3b:de:4c:06:59:af:4e:c1:86:ea:89:
         aa:de:9e:87:91:b1:48:7a:5e:77:b8:87:43:ed:94:ba:5d:bc:
         98:fd:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----