Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68190cc97a33ea3c321b5cbf58281b119c07dc2e.cer
File:                     68190cc97a33ea3c321b5cbf58281b119c07dc2e.cer (raw, json)
Hash identifier:          3dm7eeS3BnjK+/i7LJNvyksrwyF6XxceDtA6fUpx+TQ=
Subject key identifier:   F3:0A:9B:56:87:FB:4A:3A:C4:02:AE:5F:7B:89:1F:4F:6B:DF:41:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ADBF1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/68190cc97a33ea3c321b5cbf58281b119c07dc2e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Jun 2021 17:59:46 +0000
Certificate not after:    Fri 06 Jan 2023 16:58:56 +0000
Subordinate resources:    IP: 45.4.128.0/22
                          IP: 2803:cec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11386655 (0xadbf1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 17:59:46 2021 GMT
            Not After : Jan  6 16:58:56 2023 GMT
        Subject: CN=68190cc97a33ea3c321b5cbf58281b119c07dc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:02:12:9f:22:aa:f4:08:83:fe:d7:13:06:
                    dd:3b:23:41:3d:4b:8f:77:e8:f7:5d:35:41:22:c3:
                    2f:63:dc:28:ef:97:f9:d6:32:b8:d0:7f:cb:27:b2:
                    6a:3a:1e:e8:e0:4d:33:b0:48:03:ad:54:de:3a:fa:
                    63:51:1c:bc:76:08:14:4d:9d:7c:f7:7f:f9:56:bd:
                    10:2c:d5:fc:27:1d:6d:f4:50:3c:bc:9c:f5:88:af:
                    2e:05:21:bc:de:a2:b6:ec:50:e3:ea:c4:14:6c:ba:
                    6a:34:7e:ef:4b:d6:b5:57:7e:2f:dc:d2:70:b1:18:
                    4f:14:9b:b4:68:70:83:69:16:55:ce:50:82:1b:a4:
                    07:bb:59:c7:75:34:20:b8:da:df:f5:69:0a:b5:a6:
                    ee:33:fb:61:8e:f3:24:3e:6c:8b:a8:31:53:9b:8d:
                    fc:28:65:56:92:5d:29:5f:19:5d:a3:86:08:6b:f8:
                    1c:77:10:6c:1b:75:42:0c:b1:16:00:e3:f0:2a:70:
                    8c:71:5e:35:db:45:50:2b:d6:36:22:12:fe:f8:83:
                    4f:15:58:47:c5:9d:24:ac:da:76:b9:fd:bc:4f:e2:
                    fa:af:24:98:25:c1:e9:ee:02:da:e4:e2:58:f0:99:
                    5b:61:c0:19:3e:00:3d:79:3f:6c:70:24:94:2c:2f:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:9B:56:87:FB:4A:3A:C4:02:AE:5F:7B:89:1F:4F:6B:DF:41:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/68190cc97a33ea3c321b5cbf58281b119c07dc2e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.128.0/22
                IPv6:
                  2803:cec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:af:d0:00:a3:e6:13:47:12:71:0a:81:38:82:ae:13:53:19:
         67:6e:79:07:e3:65:93:ff:d3:95:10:e4:3b:c4:ca:2e:bd:54:
         df:eb:8a:7e:dd:6d:cb:b4:df:2c:07:03:2f:3d:9e:a0:75:52:
         66:3f:b4:7c:dc:e1:66:e5:12:ed:14:04:c3:e7:be:57:94:af:
         e7:d0:d3:25:01:b0:ce:e0:fb:99:e6:29:85:ff:43:09:ed:c3:
         cc:33:b9:62:3e:6f:ec:b7:aa:d5:86:a4:ae:9f:c0:d9:d1:99:
         08:7c:d5:18:5f:c3:3d:b8:e3:65:4b:ff:0e:09:b0:10:e0:cf:
         a2:b7:0c:ab:14:12:f0:d0:af:7d:ed:c9:dc:9a:8d:01:62:e8:
         7c:c8:9a:58:01:02:f1:80:76:49:73:5c:40:eb:2c:74:1d:5a:
         3d:b9:e8:51:69:18:15:89:91:47:45:43:e1:51:06:4e:26:7b:
         d5:ff:41:e8:52:15:d5:f0:bb:aa:47:f8:ae:46:75:b1:c3:02:
         16:8b:d3:33:d2:62:f0:3a:af:0f:17:72:41:d3:fc:fd:92:a3:
         a0:00:08:34:b0:13:9a:e6:81:28:8d:83:e3:fe:a1:db:89:b8:
         08:fc:fb:61:bf:a2:f4:4b:59:19:9d:22:e2:76:be:c7:50:73:
         88:f2:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----