Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/405a0d6925b8e57e39b19fa223882e25fdf3f79a.cer
File:                     405a0d6925b8e57e39b19fa223882e25fdf3f79a.cer (raw, json)
Hash identifier:          ilJNiiswpo4Fkx4BLj3Q6nk7K4f3FSQnD3EbEJ8ZNLk=
Subject key identifier:   78:4E:FC:2D:87:62:DB:1C:80:36:DB:B5:27:61:CC:2A:8A:35:32:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8DF6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9ce05994-4e1b-4e0d-85e0-921f8c93267a/405a0d6925b8e57e39b19fa223882e25fdf3f79a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9ce05994-4e1b-4e0d-85e0-921f8c93267a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Dec 2018 23:24:46 +0000
Certificate not after:    Thu 10 Oct 2024 15:42:56 +0000
Subordinate resources:    IP: 2801:1ac::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16310126 (0xf8df6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 10 23:24:46 2018 GMT
            Not After : Oct 10 15:42:56 2024 GMT
        Subject: CN=405a0d6925b8e57e39b19fa223882e25fdf3f79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:df:38:93:c2:3f:4b:23:75:40:a9:83:ab:
                    41:9a:14:eb:00:0d:9a:a3:a6:62:6e:16:f7:c8:3e:
                    94:ba:e4:07:5c:15:54:d0:d9:1c:d4:de:1b:7c:31:
                    45:30:4a:1c:55:7b:2c:e3:f8:2f:0c:d7:25:cc:31:
                    1d:72:58:16:50:24:cd:e8:44:18:d3:2d:41:71:de:
                    cd:d2:b4:56:3e:6e:7f:de:91:9a:ac:4f:1f:dd:46:
                    d5:10:a1:89:39:f3:52:a1:73:87:af:ec:35:4a:83:
                    07:ee:89:31:c4:49:ac:f0:7e:8c:45:f2:60:85:a0:
                    f0:50:34:fe:63:50:ff:5d:28:65:07:6f:ce:2c:86:
                    db:cc:b5:43:3e:26:98:c6:89:73:01:a0:52:a1:a8:
                    f1:be:35:ae:c1:78:cf:92:41:db:9e:c3:ba:b9:88:
                    c3:a4:d9:6f:99:66:62:16:63:71:ec:77:32:32:e9:
                    f1:21:17:99:0b:13:2b:6a:0e:fd:f1:4e:ac:da:05:
                    5f:4b:76:a1:42:25:4e:53:e8:48:c8:4c:be:dd:67:
                    da:d0:55:36:40:74:a2:b3:8e:b1:9b:23:8e:b8:15:
                    0f:13:1a:32:46:bc:bc:07:7d:02:e6:20:b5:b5:8c:
                    5a:8e:53:d0:92:4f:79:97:d3:ed:d7:05:79:10:8d:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:FC:2D:87:62:DB:1C:80:36:DB:B5:27:61:CC:2A:8A:35:32:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9ce05994-4e1b-4e0d-85e0-921f8c93267a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9ce05994-4e1b-4e0d-85e0-921f8c93267a/405a0d6925b8e57e39b19fa223882e25fdf3f79a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ac::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:29:23:1e:46:40:68:d1:86:46:f3:d3:f9:24:77:c8:ae:64:
         a9:86:a0:c7:82:7e:cd:ea:44:fe:39:67:ef:a5:a3:d7:f2:99:
         01:b1:d6:fa:15:eb:a1:be:f7:58:0f:db:9d:e4:b6:5e:95:e0:
         69:ca:fe:f5:6e:e6:1c:51:f1:f9:3c:fc:7c:41:5d:0c:a9:13:
         46:28:38:79:05:c3:d0:3b:13:93:eb:5c:a1:d1:8d:51:7f:43:
         2b:61:fe:f4:3f:7f:c2:a9:9b:af:91:1f:ec:5b:78:02:31:04:
         8b:e6:9b:35:a1:80:f1:5e:57:91:df:fb:81:c0:97:1c:58:cf:
         d9:d2:0c:de:a6:3a:15:01:e7:48:de:9e:1c:be:7e:0e:79:ad:
         85:b8:72:ca:92:e7:83:ec:a3:b1:6d:31:95:90:24:73:44:ec:
         f0:7f:2d:88:5c:de:f2:08:fb:8e:d1:9a:e8:ff:72:7c:88:73:
         61:2e:12:f5:b7:85:c0:3f:e7:31:ca:12:1b:6a:2c:dc:e6:1d:
         f8:66:ed:d8:f5:7c:b1:8c:5a:88:68:c8:9e:30:8a:b0:39:3b:
         ab:bf:38:d9:01:7f:f9:f9:77:db:e8:8c:cd:7e:6c:21:46:68:
         16:d3:65:e5:e9:4a:8d:ae:30:3e:02:e1:75:93:83:14:dc:6f:
         f7:5a:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----