Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
File:                     598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer (raw, json)
Hash identifier:          IZwg041EBExK0SJn0v27or1Uuh144aKDeM/rq7mI86A=
Subject key identifier:   27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA2266
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Feb 2019 15:28:16 +0000
Certificate not after:    Sun 20 Oct 2024 04:00:00 +0000
Subordinate resources:    IP: 45.169.144.0/22
                          IP: 2803:dda0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16392806 (0xfa2266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 20 15:28:16 2019 GMT
            Not After : Oct 20 04:00:00 2024 GMT
        Subject: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:5b:99:3e:14:60:b3:f7:0b:c8:e1:3d:02:
                    23:92:3b:d8:a0:05:73:9d:7f:d4:04:4d:f0:d6:ae:
                    5f:99:12:08:cb:f2:1c:58:f8:d4:0d:e5:30:bd:58:
                    3a:a5:08:0c:92:d5:91:6d:99:c5:8d:34:df:f5:99:
                    9a:d3:80:7c:3c:f4:43:20:00:80:e3:8f:94:a8:6e:
                    78:66:5f:53:16:96:28:68:dc:6c:f4:dd:61:35:eb:
                    e9:44:dd:12:76:bd:b5:f6:e7:66:64:91:44:f3:e2:
                    2c:2f:3e:a8:65:97:8d:09:73:45:92:6b:ba:9b:14:
                    c2:cf:e7:c7:35:65:c0:7b:63:b9:f7:e9:6d:cc:b6:
                    3d:40:ad:22:1d:c6:07:ec:99:a3:91:df:75:bf:34:
                    53:9d:c9:0f:83:6d:3d:12:9e:ea:d2:9d:8d:5b:ad:
                    96:43:8d:58:9f:eb:26:80:02:4e:b2:43:7d:d4:e1:
                    21:0a:9a:33:ad:3a:2d:ba:34:d8:90:03:93:35:d0:
                    1b:60:4b:48:d6:dd:46:a6:fd:33:f1:1e:15:1a:40:
                    12:51:a3:e7:c7:fe:53:dd:29:6c:2a:89:c3:3f:18:
                    32:40:ff:b0:08:5b:e7:ca:4a:4f:22:41:d2:83:7e:
                    a3:b2:ef:40:ae:00:55:60:b5:01:1c:d2:c3:55:71:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.144.0/22
                IPv6:
                  2803:dda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:5a:bb:0b:b7:fc:0a:9e:14:d4:66:3e:2e:e4:bc:ef:53:
         b6:43:8e:cf:af:c2:7a:cf:65:e0:c5:c4:cd:66:30:c0:bb:79:
         de:4f:7d:6e:2f:85:d3:0e:a8:3e:aa:62:60:4a:31:30:c7:b0:
         35:02:62:0b:78:d9:81:f1:1a:3d:55:61:8f:7e:e8:cd:ad:54:
         c7:d7:0c:3d:41:17:f7:20:3d:1b:33:85:a4:17:db:40:95:3c:
         cc:d2:d0:77:67:05:12:1d:3f:7b:46:aa:b3:f1:a6:a9:a5:dc:
         ff:27:97:00:48:aa:ba:13:ae:2f:1b:f9:d5:3e:a5:be:60:30:
         2b:51:03:1d:3a:19:9b:a2:c7:e6:7c:ca:c3:03:61:08:f6:be:
         ae:e5:6c:1c:d1:ab:01:7f:df:73:a1:74:6e:90:89:ba:92:84:
         1c:e1:68:c0:69:71:24:f5:b9:a5:d7:1a:36:8c:1a:2e:8b:80:
         82:d1:39:4e:6f:e3:24:d1:6b:52:82:d9:5a:95:ba:00:16:30:
         49:20:d5:4b:bf:3d:60:b7:d3:74:e9:db:86:e2:9e:c1:61:12:
         5e:8c:cb:6b:f8:5f:62:bd:b7:58:3e:c9:65:be:c3:80:7a:66:
         e4:06:a0:14:fd:f6:1a:78:b3:2d:f0:71:5c:92:56:e6:c4:70:
         51:79:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----