Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21b8730514026edc86e82b40ef606caea445e458.cer
File:                     21b8730514026edc86e82b40ef606caea445e458.cer (raw, json)
Hash identifier:          JJDoDewa6PRFqsnJ8Zm3EB4SINXTCpyI5eDRtO2eg8g=
Subject key identifier:   DA:4A:1C:5D:C1:43:69:33:3D:4C:F6:27:7F:35:D2:08:FD:D3:7F:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BCE170
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/21b8730514026edc86e82b40ef606caea445e458.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 08 May 2019 21:45:43 +0000
Certificate not after:    Tue 03 Jan 2023 21:45:08 +0000
Subordinate resources:    IP: 2803:3d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12378480 (0xbce170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 21:45:43 2019 GMT
            Not After : Jan  3 21:45:08 2023 GMT
        Subject: CN=21b8730514026edc86e82b40ef606caea445e458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:57:a7:63:49:57:a3:59:a4:f5:75:db:00:
                    e3:3b:a3:13:d7:8b:d2:f7:54:b2:f6:a8:7d:fb:70:
                    7d:6e:62:0c:50:bf:2f:09:36:75:72:c8:cb:8c:b9:
                    02:01:a2:a1:72:d4:e7:58:dd:e1:a0:68:af:c1:fb:
                    76:c6:70:4e:da:fd:04:09:ff:ce:c8:25:e3:a2:7a:
                    ec:b9:90:45:c7:5b:e5:b8:dc:be:a6:e6:7a:18:a8:
                    ca:3b:5f:3e:24:f9:88:bc:47:09:e4:e9:77:2e:a5:
                    ea:19:9b:3f:ab:94:8e:b8:de:73:29:2d:cf:34:23:
                    3c:7d:2a:de:c9:24:18:83:8a:54:c6:bc:5b:ea:31:
                    42:2b:9c:44:5f:9a:3a:49:65:f6:3c:e4:17:25:19:
                    dd:79:d8:bd:bf:10:8d:2f:23:08:53:c0:62:eb:9c:
                    5f:88:18:26:2f:6d:d3:b5:5f:de:47:ea:74:73:ac:
                    af:48:4c:68:11:80:fe:35:2a:45:3e:2a:b8:14:02:
                    63:54:98:7c:22:2e:9b:28:b2:eb:e3:3b:84:34:99:
                    28:5f:15:3c:f8:1d:95:97:b0:fc:b3:70:ad:d5:2e:
                    37:05:2b:1c:db:16:d7:39:b2:07:93:48:bf:95:95:
                    d1:b1:5c:6a:25:33:d8:56:8e:85:14:95:c5:e6:23:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:1C:5D:C1:43:69:33:3D:4C:F6:27:7F:35:D2:08:FD:D3:7F:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/21b8730514026edc86e82b40ef606caea445e458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:93:d0:29:6f:bb:18:3f:43:de:52:23:cd:6d:22:00:5b:
         4c:9d:84:bf:d2:40:4e:94:64:89:77:78:d4:ff:a2:18:84:98:
         fb:f1:0d:48:1e:2d:16:e9:51:ac:f3:90:f9:68:55:13:2d:af:
         6c:4a:ab:f2:15:72:24:57:a4:9f:a5:d6:2c:3d:ad:78:84:42:
         36:17:3e:72:7b:64:33:e7:bd:e0:80:65:b8:3a:a9:db:c0:93:
         34:59:22:6f:23:33:bc:73:55:11:a5:96:24:97:0e:f4:37:bf:
         79:55:ba:7f:f7:dd:28:29:40:da:8a:8c:30:46:41:f8:c9:20:
         d8:b4:20:34:f3:93:e7:ab:b6:26:47:2b:f5:54:97:c4:f1:62:
         5c:6c:c9:43:49:d8:8e:38:02:4f:ea:3e:66:41:28:a7:f6:36:
         09:16:5b:a0:bb:ff:c8:00:1e:2b:ef:6a:07:dd:55:61:d3:03:
         a7:6e:a0:cf:3c:22:38:b0:96:bc:a5:2e:fe:21:c8:31:7c:1d:
         2a:1e:67:4d:1f:d1:a6:11:a2:15:f6:c8:d2:f9:13:30:38:c6:
         dd:dd:37:ca:16:c4:24:61:fd:6e:38:99:03:43:fb:94:ea:d4:
         2d:52:be:72:b2:07:30:5d:dc:8c:b2:5c:54:49:0f:ac:44:ec:
         7b:1b:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----