Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
File:                     1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer (raw, json)
Hash identifier:          C4CB/Q+QeboSO8BkWaVI4+UFlQxtMGyyjSytTfVskZ8=
Subject key identifier:   4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFDF2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Sun 28 Jul 2024 23:34:21 +0000
Subordinate resources:    IP: 45.224.20.0/22
                          IP: 2803:ec20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15720235 (0xefdf2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Jul 28 23:34:21 2024 GMT
        Subject: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:76:2f:c7:49:db:f2:fe:a9:3b:a9:bc:ff:
                    59:6d:a0:00:e6:eb:49:53:0f:97:ef:bd:64:b8:da:
                    12:53:e3:7e:22:23:05:c7:0a:20:16:d4:d5:df:4d:
                    95:82:6e:a6:b2:26:b6:7c:71:71:d8:49:1b:64:0e:
                    10:e4:a2:ef:97:39:a5:e1:4b:16:15:cc:0a:18:f3:
                    9e:be:9c:e7:06:da:22:8e:e6:7a:8d:aa:f8:fc:3a:
                    5d:57:23:c5:c3:40:b3:3a:f1:b5:3d:5b:19:30:cd:
                    62:81:69:fd:b3:7f:8a:3f:0d:c0:34:d0:24:6c:d1:
                    63:b2:56:b3:a8:42:8c:01:40:41:44:4e:10:18:41:
                    93:42:a8:e7:93:28:dc:87:10:66:a4:da:f5:2d:c1:
                    6e:dd:fb:3e:1e:f2:fa:c0:8f:c5:15:6a:9a:66:85:
                    45:29:85:01:c5:40:97:9d:81:68:4a:6b:9d:35:a6:
                    72:8f:45:13:1c:47:3f:d1:2f:75:43:37:33:52:fd:
                    b9:89:83:4d:38:48:be:41:8f:a4:23:3c:1b:a3:64:
                    7d:2d:18:cd:9a:2b:53:ac:ee:0c:9e:1e:58:8d:5e:
                    61:88:e6:e9:29:2e:2c:3d:f0:ed:70:a1:e6:29:52:
                    4c:0e:98:b9:71:12:38:3b:1d:16:1f:b1:75:c1:a6:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/22
                IPv6:
                  2803:ec20::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:06:5b:b1:cc:a8:e2:07:d5:c6:1d:22:b3:3a:86:59:12:2b:
         07:de:3b:a8:39:68:91:eb:1e:65:46:29:5a:18:a2:73:a1:8e:
         44:a4:b2:91:7c:d7:1b:36:28:5b:dd:64:16:d4:45:be:4a:63:
         25:e0:15:2c:0b:11:cd:f7:8d:dd:5b:32:49:f0:54:d2:48:a7:
         a8:3d:49:88:d9:5d:cc:20:86:3d:ad:84:bb:e2:c4:4b:89:4c:
         15:fc:5d:61:5a:ae:e3:46:38:1e:1d:64:ae:b9:e9:65:38:ed:
         42:b5:4a:2e:0c:e1:57:86:79:57:b9:33:00:46:45:83:a0:4e:
         45:47:30:09:72:98:67:fa:c3:7e:4c:7e:b3:73:e2:15:37:1f:
         f3:d5:42:e1:a9:1c:99:5d:e0:44:a4:59:a3:a6:7f:e5:06:8c:
         7f:15:28:f4:4a:a0:3f:af:c2:d8:58:8e:58:88:33:24:d9:da:
         36:f8:da:db:36:f9:bc:95:76:7e:db:98:71:2e:f0:54:9f:26:
         e6:62:26:00:02:c2:b9:45:17:66:f5:af:96:45:9f:3b:c3:47:
         e8:7b:18:bf:74:ac:e0:12:20:93:cc:f6:10:32:1b:40:d7:f4:
         dd:bb:e4:83:a3:05:b7:82:a7:df:f1:fa:2f:3f:d9:ff:c6:3c:
         68:95:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----