Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4019f35f7ca8fc11898d08928b649b585f772286.cer
File:                     4019f35f7ca8fc11898d08928b649b585f772286.cer (raw, json)
Hash identifier:          +pi1a+K8qQjlodoBH7Y+FI3hF+5fN16ZLtUf4mlvLUM=
Subject key identifier:   13:2E:0A:EA:89:AA:A3:3A:E0:44:88:58:38:B5:DA:64:68:31:D5:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E57CCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/4019f35f7ca8fc11898d08928b649b585f772286.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Aug 2020 18:15:25 +0000
Certificate not after:    Tue 14 May 2024 20:37:08 +0000
Subordinate resources:    IP: 131.0.168.0/22
                          IP: 168.197.68.0/22
                          IP: 2803:1580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15039694 (0xe57cce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 12 18:15:25 2020 GMT
            Not After : May 14 20:37:08 2024 GMT
        Subject: CN=4019f35f7ca8fc11898d08928b649b585f772286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:30:02:ae:1d:53:de:31:b1:ab:f6:1f:17:
                    c5:f1:83:1b:dc:b7:b4:cd:d8:3e:79:dc:45:1f:b2:
                    15:62:5e:e0:08:e1:f2:7b:6e:1f:00:97:20:72:27:
                    2d:78:71:10:2e:47:00:51:59:65:cc:18:de:c3:8f:
                    d9:d4:a0:d7:e4:39:4f:88:1a:9b:09:d3:b8:1f:32:
                    5c:4c:94:44:0c:0f:30:b6:75:93:91:18:6d:1c:91:
                    c4:3d:92:e4:04:76:46:d8:41:a8:12:ac:b4:ad:7f:
                    a3:16:33:6e:37:01:a7:6f:d2:23:b5:e9:ce:ff:75:
                    da:53:d0:19:c9:c8:f3:76:92:f1:e7:48:7d:cc:b3:
                    92:01:2a:b0:b9:ed:c4:bb:dd:9b:61:8e:b3:fd:5d:
                    c7:57:83:c9:e0:63:7a:94:5f:9f:51:25:fb:3f:22:
                    d4:5a:52:20:75:ab:68:42:88:66:b5:a5:43:45:e1:
                    22:ad:cc:66:b2:f7:51:f2:0b:6f:ad:81:ba:7a:05:
                    60:60:a4:21:f4:90:1d:aa:38:f4:f2:8e:0e:2e:92:
                    6f:77:fe:23:b3:36:5d:70:d9:1b:75:1a:22:91:ab:
                    3a:70:ee:3b:95:97:0b:fa:98:87:b4:df:3b:41:ad:
                    43:19:1a:3c:68:b2:d1:ea:81:66:7e:8e:07:34:96:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2E:0A:EA:89:AA:A3:3A:E0:44:88:58:38:B5:DA:64:68:31:D5:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/4019f35f7ca8fc11898d08928b649b585f772286.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.168.0/22
                  168.197.68.0/22
                IPv6:
                  2803:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:16:72:1d:58:ae:09:99:12:7d:2d:fd:a3:55:fa:0f:f0:7d:
         60:01:40:3d:d1:ed:c9:a0:1c:e8:3c:6a:79:c4:e8:3e:60:39:
         83:d2:51:83:04:40:be:fa:21:2f:8a:de:49:5d:aa:42:cc:96:
         cf:eb:ca:9c:51:09:81:b0:f0:a9:b7:4d:8c:60:cf:b9:11:d9:
         65:b5:fc:c0:27:b7:47:06:18:8d:a1:db:90:48:64:40:20:45:
         ac:e5:0a:60:8d:21:da:b2:e4:66:12:f3:14:5c:4a:af:18:da:
         2c:6e:18:a7:1c:1e:ef:18:36:2b:ea:6e:cf:f3:6c:8c:45:d0:
         c8:e3:99:a9:e6:94:4d:f2:29:70:a3:e0:26:a0:00:69:f2:9d:
         e8:bd:eb:3d:c7:05:68:28:4a:26:65:78:bb:14:78:75:d6:13:
         d5:c0:39:c1:57:4f:0b:1a:ee:64:53:ca:a2:95:ac:22:c9:58:
         00:45:bb:8a:25:fe:2c:c9:3c:ef:85:4a:f1:55:62:ea:5c:13:
         05:83:60:c4:68:0a:5d:36:89:d3:09:4a:12:ea:5a:0e:8a:7a:
         3a:e6:ed:1c:37:e4:c4:1e:9e:47:96:fa:48:8c:80:a4:39:aa:
         c6:c5:e2:2c:de:ed:89:11:fe:0b:b0:36:17:db:c5:0e:91:ea:
         73:9e:8b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----