Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fd13bb6c152df2de42e94dc89624f31b656962e.cer
File:                     2fd13bb6c152df2de42e94dc89624f31b656962e.cer (raw, json)
Hash identifier:          ZZkgSXL055IMNcg55h5DwBe13EZ7epsbeIhrYKucwqA=
Subject key identifier:   9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8493F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/2fd13bb6c152df2de42e94dc89624f31b656962e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2019 21:38:05 +0000
Certificate not after:    Wed 27 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 269876
                          IP: 45.168.174.0/23
                          IP: 2803:77a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14174527 (0xd8493f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 19 21:38:05 2019 GMT
            Not After : Dec 27 05:00:00 2023 GMT
        Subject: CN=2fd13bb6c152df2de42e94dc89624f31b656962e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:6c:0e:11:94:57:fd:90:b1:11:4e:7f:6c:
                    5a:15:20:de:02:0d:eb:58:e9:25:d7:15:cf:08:85:
                    7b:2d:36:b8:87:8c:1e:d8:13:94:4f:94:d8:b4:5f:
                    eb:51:32:46:47:b0:04:d7:11:64:fc:e1:97:6f:91:
                    43:58:db:fc:e0:68:70:48:50:67:6b:92:72:5c:01:
                    d4:5b:85:c2:c9:33:bb:46:08:86:b1:0b:1b:af:80:
                    73:5f:a9:8d:be:ca:14:03:11:85:68:3b:c6:fd:f2:
                    10:8d:ef:9f:5c:5f:ff:15:0f:d1:93:a0:8c:ad:40:
                    c1:ef:73:77:bb:a1:1c:4c:86:cf:b4:38:8b:45:39:
                    e9:7b:4b:a3:65:b7:99:62:d6:4d:a3:aa:64:d4:d9:
                    e1:03:c4:e6:a8:1a:6d:f1:74:52:91:18:2b:1a:a2:
                    36:4f:1f:b5:f9:14:76:27:c9:c7:80:f5:4e:84:2c:
                    69:ec:c6:9f:e7:ef:d1:42:cc:f1:07:99:8f:d3:24:
                    72:32:7a:6e:b6:95:be:54:d3:dd:f6:df:1a:ee:30:
                    fe:bc:bc:58:3c:4d:13:47:48:d5:59:cc:87:36:e6:
                    6e:5a:e2:fc:66:84:58:64:6d:2e:79:41:bf:a3:b6:
                    0b:6d:7e:ae:d2:ef:ba:69:cc:e4:96:6a:9a:c3:76:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/2fd13bb6c152df2de42e94dc89624f31b656962e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.174.0/23
                IPv6:
                  2803:77a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269876

    Signature Algorithm: sha256WithRSAEncryption
         c2:16:44:1c:94:4c:e2:bc:8f:a2:34:00:10:91:f2:d0:f6:7c:
         27:97:cf:c4:21:bd:38:f7:7a:31:0b:a2:7f:b9:50:38:a1:1f:
         af:f3:15:89:ec:fc:c5:e4:19:59:ca:57:5a:3e:ac:69:cb:d4:
         5f:39:2c:d4:e0:b7:3d:48:e2:3b:43:52:e6:62:e3:5c:27:3f:
         5f:a3:8f:03:a6:1c:f0:38:82:44:14:05:49:5e:f1:11:76:ec:
         b7:23:a1:45:82:8c:22:14:3e:55:58:dc:ae:40:80:e6:0c:71:
         62:19:67:1a:69:7e:16:37:0d:39:64:12:d6:2a:f1:f5:66:20:
         47:dd:14:8a:c1:02:bf:c9:72:82:67:fa:aa:3f:05:b7:92:62:
         1b:a0:3c:85:a4:fc:2f:52:c5:81:16:fa:0c:60:9b:8c:c8:c6:
         0d:a8:70:7d:46:ee:ae:c9:0b:88:44:64:21:dc:4a:20:5f:0b:
         7f:f0:29:41:09:6f:bf:de:6d:46:34:f4:dd:54:76:ad:fe:fa:
         4f:27:2a:bc:dc:62:9f:a2:f8:e2:12:2a:17:5c:46:80:3b:fa:
         f9:4f:2d:45:4d:10:32:a1:3a:48:c8:58:c6:61:1e:19:23:f2:
         18:c6:22:8d:7e:f5:1e:94:76:f0:83:e8:2f:11:54:70:34:cd:
         22:ad:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----