Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/421456d9e45db9330f8c7a4b9aa4a99bdb9f1324.cer
File:                     421456d9e45db9330f8c7a4b9aa4a99bdb9f1324.cer (raw, json)
Hash identifier:          7mPMnLFHUuPmtsvNsjdKhiSu7rNObg3xxvTFBqkAu5w=
Subject key identifier:   C8:58:1C:A7:E7:F0:CC:44:F2:EA:7E:27:45:53:76:48:D8:A5:DD:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB28FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8eede5bb-de99-4d7b-b0fe-38407dc1780b/421456d9e45db9330f8c7a4b9aa4a99bdb9f1324.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8eede5bb-de99-4d7b-b0fe-38407dc1780b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Sep 2020 17:53:13 +0000
Certificate not after:    Sat 03 Feb 2024 17:59:39 +0000
Subordinate resources:    IP: 45.5.160.0/22
                          IP: 2801:1f:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14362876 (0xdb28fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 23 17:53:13 2020 GMT
            Not After : Feb  3 17:59:39 2024 GMT
        Subject: CN=421456d9e45db9330f8c7a4b9aa4a99bdb9f1324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:55:9c:6a:59:ef:11:3b:e9:1d:e9:a6:3a:
                    44:6b:65:c9:aa:ae:5f:6a:93:01:d7:21:32:3b:27:
                    14:d3:62:54:e4:84:ba:c5:f4:fe:72:ed:95:11:cd:
                    de:8c:21:9b:d9:cb:8f:62:ea:ad:05:14:46:ab:5d:
                    06:6d:7c:52:d3:2d:e7:31:51:dd:5e:47:a7:83:d3:
                    c4:fd:fe:ff:dc:c0:fa:d4:aa:95:13:ad:49:2e:24:
                    de:fe:b3:71:0f:7c:7c:03:6f:48:74:bd:38:d3:e7:
                    22:8d:7e:74:9f:46:80:bf:65:9c:0a:a0:82:02:19:
                    f2:24:4b:9d:78:d7:e6:33:d9:f7:e3:d2:6f:bd:d8:
                    7e:4e:e6:9f:51:78:0f:b7:6c:95:b3:7f:fd:a9:eb:
                    d8:d1:1f:1f:5b:0f:1e:b5:56:13:df:60:1b:7d:ed:
                    6f:40:e5:39:32:0a:72:48:1b:3b:bb:20:5a:59:c5:
                    92:5b:49:ab:92:94:12:72:ec:b1:de:c5:d0:81:0b:
                    8e:36:bb:32:2e:35:64:36:82:44:88:a2:6f:c0:de:
                    5f:24:a0:98:19:cb:fb:f5:ee:cd:44:16:c5:34:78:
                    df:76:c6:53:e4:c6:1d:00:4d:25:bc:20:40:4b:73:
                    e1:ed:87:48:4a:a3:20:ae:8d:d5:1b:aa:c8:2b:66:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:58:1C:A7:E7:F0:CC:44:F2:EA:7E:27:45:53:76:48:D8:A5:DD:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8eede5bb-de99-4d7b-b0fe-38407dc1780b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8eede5bb-de99-4d7b-b0fe-38407dc1780b/421456d9e45db9330f8c7a4b9aa4a99bdb9f1324.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.160.0/22
                IPv6:
                  2801:1f:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:91:fd:38:2a:56:b2:28:14:6e:fa:1d:19:ff:b5:d9:c9:ac:
         d0:35:f8:d1:89:21:4d:57:18:8f:53:f6:ec:e3:3e:77:dd:90:
         6c:f9:d8:1e:25:14:78:92:9d:c5:d8:53:ac:56:c4:94:10:f1:
         ad:88:ec:4b:5b:9e:df:4c:39:e4:a0:dc:5c:0d:78:d5:5b:ce:
         07:b9:b9:68:f6:d2:16:49:02:a3:5e:6a:ed:55:01:d3:5c:0b:
         90:b6:a1:d1:7b:89:20:38:05:eb:a2:eb:33:4b:6f:c2:ab:63:
         4d:f8:92:e6:71:68:41:98:4f:80:bf:93:aa:a8:d5:e5:4a:20:
         c5:7f:32:5c:f6:83:52:3e:eb:06:9f:0d:c0:b5:19:67:c0:a6:
         2b:2c:1a:38:08:9c:98:15:84:91:39:2e:a0:fc:4a:d7:27:b4:
         c3:7a:8e:54:06:41:64:af:b2:ee:f4:f1:f0:f8:d2:bf:8f:4d:
         5a:70:ab:15:f7:d0:6b:b8:b7:f0:85:46:03:d9:58:2a:98:dd:
         8a:38:eb:f2:81:61:5b:72:53:3d:f5:67:53:63:ad:71:c2:83:
         84:0e:0e:fd:99:d9:86:14:2b:7e:42:b0:d7:24:bf:c6:c5:fe:
         b9:9a:92:21:1f:78:91:a3:88:71:dc:93:10:2d:2c:b7:7e:94:
         60:5b:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----