Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f96f12eb7e64f4a5d987b62fdb1944445102da7.cer
File:                     3f96f12eb7e64f4a5d987b62fdb1944445102da7.cer (raw, json)
Hash identifier:          0dCNMoJCcmqlg6OhAwPFRLsrRuLQwRy4toWI9Mo1bvI=
Subject key identifier:   02:46:34:DB:E3:FD:6B:E0:43:19:DE:78:3D:38:69:E7:43:AA:7D:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F40E80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/3f96f12eb7e64f4a5d987b62fdb1944445102da7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2019 02:46:15 +0000
Certificate not after:    Thu 05 Sep 2024 17:04:10 +0000
Subordinate resources:    IP: 45.188.136.0/22
                          IP: 2803:8f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15994496 (0xf40e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 02:46:15 2019 GMT
            Not After : Sep  5 17:04:10 2024 GMT
        Subject: CN=3f96f12eb7e64f4a5d987b62fdb1944445102da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:7d:e3:c6:7c:85:ec:34:63:97:ad:39:7e:
                    35:8c:d9:e7:95:a5:27:76:64:83:a9:c7:3c:d7:2c:
                    49:bb:9c:64:3f:1f:08:7b:e3:60:ed:27:0f:b9:60:
                    79:7e:11:9b:58:1a:89:f9:a3:77:6e:36:f0:a1:a1:
                    fb:1c:fd:b9:a9:a5:6e:da:a6:f5:f9:53:41:4d:3b:
                    60:41:8d:3c:2b:d8:4c:df:0b:f2:e1:8b:0d:73:4c:
                    76:94:47:f8:1d:ee:73:ce:5a:44:85:aa:8e:61:24:
                    74:ea:94:36:d8:e4:03:cd:1c:a9:f7:f9:bb:5a:f3:
                    9a:f9:29:63:59:37:6d:42:b0:4b:b4:ba:5b:fb:09:
                    29:ad:01:3a:e4:f4:d2:ef:9c:89:65:06:4c:bd:3f:
                    ff:99:b2:45:73:b6:db:a9:86:90:26:36:4e:c2:6a:
                    8a:04:b2:4c:04:52:36:62:97:be:95:34:60:e2:04:
                    da:17:45:6b:bd:29:89:6b:be:3d:b1:d4:f3:be:c4:
                    c1:32:81:39:3e:e4:cf:92:24:fe:2d:35:1f:f3:09:
                    11:29:0b:ec:f2:c6:0c:f5:c0:24:6c:2c:cd:a2:60:
                    9a:8e:96:2a:c9:3f:cd:75:63:a1:1e:b8:c6:2f:42:
                    fb:86:ae:b3:43:dd:ed:37:fe:d2:0f:9b:ac:66:6c:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:34:DB:E3:FD:6B:E0:43:19:DE:78:3D:38:69:E7:43:AA:7D:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/3f96f12eb7e64f4a5d987b62fdb1944445102da7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.136.0/22
                IPv6:
                  2803:8f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:91:f8:2a:a9:18:49:b1:21:ba:9b:ae:58:c8:fa:a2:aa:5d:
         c3:da:6d:5e:87:b4:ad:20:8b:f3:25:dd:f1:6e:97:a1:cf:25:
         fc:e7:b2:17:9b:ba:c9:65:b0:04:26:6f:26:2f:5e:45:d5:04:
         f6:52:a6:87:ed:f9:03:66:58:7f:82:fb:74:d7:69:62:72:34:
         65:cf:63:80:2c:4a:02:46:f7:48:4e:1c:74:79:0e:81:15:9e:
         19:b1:7b:36:36:a3:25:89:c0:a0:ed:f9:ef:61:41:c0:08:8a:
         f9:28:09:da:04:3d:73:17:44:fa:89:2e:c4:1d:28:47:53:ad:
         5f:28:5d:01:af:68:db:74:de:4d:f9:34:df:9d:36:eb:cd:91:
         6c:00:6e:c4:0a:19:ca:d6:40:84:cf:8c:9e:c8:c2:50:26:33:
         ca:54:9d:bc:85:f2:28:ff:12:67:c8:25:99:43:8c:42:c7:05:
         fb:3b:6e:35:b9:0f:0d:7c:84:59:b5:b2:d8:92:91:39:f5:fc:
         36:3c:28:b8:82:3b:c1:93:c9:5f:29:93:e3:e8:aa:a1:b0:93:
         95:20:95:bc:ca:87:2a:02:f9:e1:dc:00:b2:0c:1f:83:f4:89:
         a8:71:de:e8:1b:98:ee:d2:3c:d9:94:ab:c7:34:79:24:7d:3e:
         e1:d1:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----