Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/542999ed47b4dd08993c5b807fe3cba00834cc1f.cer
File:                     542999ed47b4dd08993c5b807fe3cba00834cc1f.cer (raw, json)
Hash identifier:          oZWJ8gppczcjwbmuAgpQbQTUEyoCGom2He/ZNlFH50o=
Subject key identifier:   57:CD:20:66:58:3C:E9:9F:BE:F9:27:72:93:53:2F:C1:4E:F3:52:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAC947
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cac0a680-fb4d-48a7-9abd-eee4dee1b183/542999ed47b4dd08993c5b807fe3cba00834cc1f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cac0a680-fb4d-48a7-9abd-eee4dee1b183/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Sep 2020 21:46:52 +0000
Certificate not after:    Sat 26 Oct 2024 20:51:43 +0000
Subordinate resources:    IP: 2801:1d2::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16435527 (0xfac947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 24 21:46:52 2020 GMT
            Not After : Oct 26 20:51:43 2024 GMT
        Subject: CN=542999ed47b4dd08993c5b807fe3cba00834cc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:49:e6:18:02:c6:b4:e0:c0:48:3e:24:7b:
                    13:7a:80:82:b5:e3:92:29:b0:49:42:1b:35:89:c4:
                    0a:51:d9:94:7c:18:86:75:7b:da:91:47:ff:54:51:
                    36:8b:7a:5a:43:48:e5:31:67:e7:fa:e9:50:4e:3d:
                    28:9d:3f:c5:57:49:0c:3e:d9:9c:60:79:97:f6:36:
                    75:d6:bc:ea:1d:58:67:56:5a:dc:3a:f5:94:6d:29:
                    35:f3:b1:41:01:70:92:5a:62:60:41:07:c5:9a:37:
                    e9:62:2f:f7:27:c4:4d:82:64:82:c6:ef:bc:0f:dc:
                    0a:05:39:4d:57:5c:d9:3a:9d:b4:04:7c:eb:41:d9:
                    ec:7c:e2:f9:0b:fe:cf:f7:f4:c5:a3:96:cc:8a:f6:
                    d1:b6:8e:67:14:ed:f4:3b:3b:09:7f:1e:33:3b:35:
                    d8:47:4a:d3:d8:b2:fa:dd:b4:31:38:f1:66:76:2e:
                    d8:d9:66:f8:86:9b:7d:97:b1:a2:e5:d8:83:1c:38:
                    dd:55:6d:5d:0d:c3:e4:8f:d9:c5:69:56:88:d3:78:
                    ae:98:b8:18:d5:e6:54:e4:17:ac:69:a2:b5:a2:53:
                    cc:ac:70:aa:94:9e:e4:4d:ca:2a:3b:42:a6:87:2e:
                    00:70:93:12:30:0e:f3:1c:41:80:55:f3:68:7a:a2:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CD:20:66:58:3C:E9:9F:BE:F9:27:72:93:53:2F:C1:4E:F3:52:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cac0a680-fb4d-48a7-9abd-eee4dee1b183/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cac0a680-fb4d-48a7-9abd-eee4dee1b183/542999ed47b4dd08993c5b807fe3cba00834cc1f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d2::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:58:54:43:41:2b:2e:40:f0:af:a0:a8:09:13:13:4d:e9:
         ad:ff:af:36:77:c5:ee:bd:a7:aa:74:39:27:ac:6f:2c:c1:ac:
         5b:aa:0d:53:98:0f:03:4d:9b:5f:34:06:3b:81:6a:6a:0f:72:
         47:d2:2c:03:38:10:be:53:27:b8:71:e4:db:02:e0:49:da:79:
         b6:8c:70:2f:d0:78:71:0f:22:87:fc:b8:b7:4b:a3:a2:99:7f:
         04:b2:f2:96:36:46:9f:25:cc:fb:30:09:ad:1a:00:c2:13:7d:
         8d:26:d5:dd:03:1f:f9:62:76:1e:2b:0f:57:42:5b:d9:a5:b8:
         4e:b8:a0:e5:5d:68:0e:92:57:24:81:4b:27:5a:72:10:17:d8:
         99:67:a4:be:23:39:2b:e5:d2:b7:63:80:99:18:69:2c:3a:46:
         1a:95:ed:89:0a:68:d0:53:6f:dc:ad:3f:4b:7e:8f:a5:13:9d:
         bf:86:6f:36:93:be:f3:32:a4:cc:de:c7:3e:06:51:d4:63:f7:
         38:d3:df:43:71:c5:a9:16:1f:48:ea:9c:bf:4d:9a:a7:d8:8a:
         d6:8f:db:3f:a7:4f:68:27:1e:07:65:ae:d2:c0:46:98:3a:31:
         95:a4:07:82:69:42:49:b7:78:06:60:61:e9:0d:d7:ae:06:00:
         59:bf:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----