Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
File:                     5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer (raw, json)
Hash identifier:          Ai8Wnn4bCRvB7x7+dBXqTcAxo3XnjFEtHuZfc9+oHqg=
Subject key identifier:   EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DED5F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Sep 2019 13:31:23 +0000
Certificate not after:    Sun 17 Mar 2024 02:22:02 +0000
Subordinate resources:    IP: 45.176.188.0/22
                          IP: 2806:33d::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14603764 (0xded5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 11 13:31:23 2019 GMT
            Not After : Mar 17 02:22:02 2024 GMT
        Subject: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:e4:e3:ea:23:69:6a:26:9a:5c:d3:99:e2:
                    ef:8d:0a:b2:97:0c:4d:03:f6:1f:69:ec:08:e2:5d:
                    a7:dd:e9:12:32:fd:41:0f:12:d0:8d:19:12:0b:85:
                    65:71:1a:b2:f3:f7:3a:fb:97:07:f4:34:55:5b:09:
                    ec:5e:27:6e:d7:71:56:d4:b6:04:1c:25:f3:73:ec:
                    60:46:e7:4e:69:d1:7a:cd:1e:0f:db:d6:b3:fd:1f:
                    ef:4e:11:1a:2c:6f:31:73:86:f4:85:9d:94:0b:15:
                    67:9a:da:7d:71:21:b8:0b:ea:db:98:fd:ed:41:8f:
                    ba:85:d0:26:99:af:a4:06:f8:3c:73:2e:a6:a4:7b:
                    c6:9b:27:57:0d:cd:e1:7b:73:60:b4:12:0c:3d:47:
                    65:d7:a7:c5:bb:b7:cc:4f:a6:9b:4e:ca:2b:82:20:
                    af:0f:ed:d6:57:f8:e6:58:f4:f3:6c:ea:49:df:7c:
                    a5:fd:76:1f:be:8c:e8:2c:e8:7c:fb:64:3e:a9:b0:
                    8d:59:a0:ef:9c:f7:cb:b5:b2:20:b6:7d:b6:9f:c9:
                    cd:db:e3:5b:5a:14:0b:e2:a8:04:a8:04:e8:c5:43:
                    b5:7f:4e:cc:7f:bf:a6:bc:99:94:2f:90:79:c1:c8:
                    73:d2:14:e7:21:d3:3b:6e:db:b9:2a:54:2a:50:e8:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.188.0/22
                IPv6:
                  2806:33d::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:69:d1:d7:30:7b:e9:db:16:70:84:b9:ef:9d:56:03:72:
         6a:f7:46:98:10:9b:ab:bd:e0:89:3f:78:83:86:c6:bb:30:ce:
         ae:92:46:5e:5c:03:96:a3:05:66:e2:df:55:c0:27:32:7d:88:
         00:25:5b:1d:95:14:c8:f6:e6:ef:3f:8a:52:67:8b:99:dd:0d:
         f4:8a:b3:e4:8c:39:7a:14:57:99:b1:21:2e:4d:00:23:39:bb:
         a9:c9:92:5a:df:67:91:4b:5f:f4:58:87:6c:26:f2:cd:27:ea:
         d6:a4:f5:cb:70:39:88:30:d1:7c:aa:10:f5:1b:de:cd:f2:01:
         5c:1b:9a:58:29:99:1a:74:d0:dd:0e:4f:3e:12:fd:d5:1a:f4:
         6f:ad:2b:cd:4e:3d:03:39:ba:9a:0d:ca:39:c5:6f:19:08:f0:
         2d:f4:00:6b:92:c5:bb:b6:81:e2:89:f8:6b:5c:71:db:2c:28:
         82:66:38:cf:74:40:e8:f4:a1:17:6d:ef:39:9e:dd:9a:fc:3b:
         6c:92:8f:fe:49:3a:65:3c:05:6a:58:70:af:85:dc:f6:0d:74:
         ea:f9:f0:f4:c5:2c:7f:42:97:47:74:d4:d9:59:6a:ae:2a:c2:
         bb:26:1d:c1:09:67:b5:e2:45:4f:02:0e:5f:cb:63:70:02:8d:
         a0:00:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----