Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d9ddd044bcb08dfa2883e8990797737d942efe.cer
File:                     46d9ddd044bcb08dfa2883e8990797737d942efe.cer (raw, json)
Hash identifier:          Jbep2zHOTES4fH7nwrilgTWWDUTS7OgqrnEEWMIadrk=
Subject key identifier:   F1:F5:A6:C4:81:85:3A:FD:FD:EE:84:F9:A5:98:17:00:7F:3F:AC:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F60ACC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/46d9ddd044bcb08dfa2883e8990797737d942efe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 18 Apr 2020 21:32:38 +0000
Certificate not after:    Sat 21 Sep 2024 16:33:28 +0000
Subordinate resources:    IP: 2801:17:4800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16124620 (0xf60acc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 18 21:32:38 2020 GMT
            Not After : Sep 21 16:33:28 2024 GMT
        Subject: CN=46d9ddd044bcb08dfa2883e8990797737d942efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:ab:7b:e1:ed:5e:84:dd:4d:86:29:a4:e9:
                    81:9a:45:ab:20:21:5a:d8:50:11:1d:7f:ef:2f:64:
                    cc:b2:e8:cf:57:a7:e1:63:eb:a0:71:62:5d:ff:86:
                    7f:3b:4f:a0:41:35:c9:89:0d:61:7b:fa:1e:0f:00:
                    f7:8d:99:6a:f7:8e:0e:88:11:95:f4:fe:85:0e:86:
                    0d:49:42:21:b2:05:32:b2:41:ff:13:8c:fc:d5:49:
                    de:e3:b9:96:ce:89:7d:2d:92:90:59:09:1a:55:a9:
                    a3:f6:21:d6:6b:d2:3e:34:c9:d5:92:47:5d:0f:71:
                    a1:b1:d8:d9:6b:58:8b:e8:82:bd:9c:cc:c3:4e:71:
                    c8:da:61:97:44:55:9b:49:9b:40:3a:61:23:67:e0:
                    79:26:15:41:86:89:f4:ba:ce:6d:cb:41:16:bc:4e:
                    4c:68:43:30:26:74:86:f0:3c:40:5b:7a:11:83:36:
                    76:9e:a5:58:c0:e3:df:17:db:f5:31:f9:f4:7c:ba:
                    4e:b9:30:14:9a:c3:92:2e:c2:4d:7b:58:4f:16:1c:
                    33:3c:1a:77:4c:11:59:a1:d8:61:f3:5a:be:b7:b9:
                    b9:a9:12:74:c6:0c:c2:0a:db:b6:62:75:8c:d5:a7:
                    27:a6:4b:65:29:f0:79:f8:1a:dc:63:c3:96:da:ad:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:A6:C4:81:85:3A:FD:FD:EE:84:F9:A5:98:17:00:7F:3F:AC:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/46d9ddd044bcb08dfa2883e8990797737d942efe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:34:c0:85:5f:bf:61:f2:cb:e5:f6:c8:78:e1:9e:b7:91:
         d0:a9:60:8b:98:09:08:e4:81:19:5b:44:87:3a:75:b7:84:0d:
         d8:9c:21:d1:24:d5:c3:80:6e:e0:d9:6b:3c:39:96:7f:01:75:
         5a:a2:d8:e6:b3:49:f8:a0:ee:13:2c:b7:aa:40:20:47:8c:32:
         70:a3:4a:fd:ec:08:a4:db:d8:fb:f9:9c:1e:ab:da:7b:56:43:
         0d:9c:5b:34:99:2c:98:97:c2:e2:4c:12:60:38:15:24:24:34:
         11:5a:31:ac:9d:d8:4a:a2:5f:6a:59:d4:94:da:ed:6a:61:d0:
         bc:8c:c1:42:e2:4c:3c:b0:31:70:8e:e4:02:70:6f:9a:7b:43:
         a0:1f:1d:8b:4a:f6:fb:08:ff:7f:54:28:cb:9d:7f:5f:d0:e5:
         14:6a:79:41:54:b5:9c:33:66:fd:cc:12:69:74:e4:ff:4b:09:
         99:b2:24:ce:bb:12:59:ab:48:a0:3a:6d:57:04:bf:f8:56:57:
         e6:e3:91:37:fd:86:c7:16:3e:0d:6f:38:55:b9:d5:5b:ac:30:
         68:34:9d:2b:12:0e:d4:7b:3b:a8:41:08:fc:84:0b:d4:e5:59:
         84:37:6a:35:82:1f:13:e3:43:5f:bd:19:73:17:ba:5d:66:45:
         9d:4d:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----