Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
File:                     259c4fb25c604824d214cf7cbe588eab433a5691.cer (raw, json)
Hash identifier:          WAxxfCyu+NIP6Ff8OHxgmtnxd0Dr6ryaA8nkR3lXRbQ=
Subject key identifier:   3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3DDFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Tue 03 Sep 2024 19:36:10 +0000
Subordinate resources:    IP: 45.225.88.0/22
                          IP: 2803:e620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15982078 (0xf3ddfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Sep  3 19:36:10 2024 GMT
        Subject: CN=259c4fb25c604824d214cf7cbe588eab433a5691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:e2:84:36:68:b0:d4:b9:9d:e8:93:ab:75:
                    64:f3:54:dd:8d:a9:79:d0:26:78:15:50:8f:a0:e5:
                    09:de:0e:7f:aa:b1:7d:73:d9:0f:5d:8a:14:16:17:
                    60:fe:99:5c:70:9e:dd:7e:b9:41:2b:f5:59:74:be:
                    77:49:f9:1c:51:94:ca:29:32:9b:9d:78:60:38:c5:
                    09:a9:2a:0b:c6:da:c8:da:c1:2c:04:e0:e6:a8:81:
                    00:a8:01:d4:16:84:a8:f5:d4:94:eb:82:00:f5:9b:
                    90:08:9a:9c:e6:81:f4:66:6c:d6:d9:73:39:aa:bc:
                    fe:cf:14:d2:fc:b1:5f:cc:6c:e3:ae:5d:e2:b6:c2:
                    11:76:f2:4e:a7:2c:2f:51:e1:63:6a:72:7e:2a:2c:
                    1a:df:c9:b5:c2:63:75:47:6b:cc:51:1d:e2:61:19:
                    a7:e1:a1:f8:7d:b6:f3:b5:2d:95:79:6e:da:6f:5f:
                    40:5a:92:60:69:34:52:4d:93:90:aa:cc:65:fc:97:
                    33:0c:08:54:20:cf:d9:e3:f3:1d:0d:c7:c5:70:b6:
                    4e:9a:90:e1:63:15:5a:c9:f4:ea:81:3a:81:29:2c:
                    12:e9:ba:cd:52:76:8a:89:0e:08:24:70:a7:01:e0:
                    79:59:22:e6:10:9e:75:40:c9:93:31:f7:35:27:d7:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.88.0/22
                IPv6:
                  2803:e620::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:11:4a:95:3a:a9:e4:13:81:e1:8c:69:68:ef:a1:ee:e3:
         e5:ca:cb:33:b3:21:09:34:cd:78:95:f4:95:71:77:95:51:9f:
         2e:38:65:1c:db:d8:c0:20:0b:f4:5e:13:d6:90:61:85:3d:59:
         f2:b9:d9:79:d4:c2:d6:05:72:e5:ac:e3:1e:22:a5:29:c0:d1:
         10:a6:50:13:fa:4f:9e:ed:4f:82:c1:e3:44:58:0c:3b:a9:f8:
         63:6a:cb:38:d6:44:e9:14:0d:06:50:c1:ae:ed:25:6d:62:d8:
         3f:d2:b7:79:fa:c8:e2:70:08:ec:71:54:1f:4c:d4:97:7a:77:
         c1:a1:e1:92:23:f9:44:eb:9d:3f:ac:2b:78:4b:54:4c:11:84:
         a7:db:b4:0b:23:aa:2b:cf:c9:bc:cb:60:d9:d2:eb:6a:58:b8:
         bc:bd:66:bf:8e:7e:b5:5f:a2:57:94:80:6f:44:f1:d8:04:85:
         22:4c:1e:3f:fe:a1:15:b6:96:9f:77:f6:53:b2:89:d0:fd:ea:
         92:04:6f:68:f3:5f:69:f1:5d:a6:d5:53:35:48:ff:b4:e1:90:
         5c:df:86:90:a0:cc:8d:6a:98:b1:ae:99:de:b8:af:ea:07:f3:
         58:0c:75:37:77:30:e4:25:5d:d2:65:47:0e:b0:44:70:db:39:
         e3:82:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----