Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
File:                     694b3d580e07f84edc87befe8b29d4e23ac87258.cer (raw, json)
Hash identifier:          /5a1EpimkU6NgUXuGFIf2mBzHoHNCbiMBwe9LgnVMxQ=
Subject key identifier:   18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6BF12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2019 19:51:59 +0000
Certificate not after:    Fri 08 Dec 2023 00:07:02 +0000
Subordinate resources:    IP: 45.170.244.0/22
                          IP: 2806:321::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14073618 (0xd6bf12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 19:51:59 2019 GMT
            Not After : Dec  8 00:07:02 2023 GMT
        Subject: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:45:4a:60:cd:75:d7:64:c7:e0:59:8b:c7:
                    01:ca:e7:38:56:4f:e4:48:fc:5d:c7:84:20:68:77:
                    a3:f8:a6:e4:26:bd:20:49:8a:2b:6c:e9:df:bd:ad:
                    a8:b2:49:95:f3:3c:db:3c:89:83:38:96:68:1a:5a:
                    66:22:e4:3d:a0:9d:8e:27:93:aa:c1:a2:e4:d4:5c:
                    e7:b6:bb:21:66:c8:67:a2:4c:10:16:2e:24:1a:67:
                    33:45:75:13:53:52:12:12:e3:45:ba:50:e5:78:ac:
                    0f:07:0d:2d:d9:7c:08:c5:b2:f7:65:d9:13:40:56:
                    eb:cf:6b:7f:37:36:57:0b:99:3e:b1:3d:36:5d:ea:
                    5c:c3:ab:28:7c:66:fe:d6:2f:d7:0b:33:67:bc:1d:
                    3f:e8:4d:fb:6f:24:0d:83:d1:23:5b:3a:50:a4:f7:
                    69:e8:7e:d6:64:ee:ff:67:84:13:ab:f4:97:4e:f9:
                    cc:58:24:e8:0c:e3:48:2f:9d:16:7a:2d:e5:9e:72:
                    fe:6b:4a:ee:fa:26:56:d3:e5:66:96:d0:67:48:8b:
                    89:29:00:48:5d:f5:0e:3b:1d:57:cb:ef:e8:98:2f:
                    ea:93:c1:dd:6a:13:c3:eb:86:72:f9:22:ac:67:85:
                    98:6e:7d:6b:9f:45:e4:c5:e8:cf:31:5a:c7:05:3b:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.244.0/22
                IPv6:
                  2806:321::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:21:fd:97:31:55:06:78:98:cf:e9:77:38:b9:98:d7:67:
         f2:2b:23:7a:30:12:ef:4a:1b:16:b6:01:9b:c1:98:1b:cc:b8:
         e0:ca:ec:ab:03:28:54:a0:1a:cd:0c:a7:4d:59:df:f4:71:ac:
         90:54:7d:b9:d7:08:4e:8d:ec:5e:df:2e:ca:c5:5c:61:a7:10:
         4c:7d:a8:a1:00:98:0a:71:6d:37:08:04:bb:67:bd:65:4e:37:
         bf:d6:c7:3d:3e:e5:6d:ea:2c:34:8a:5b:e1:c7:24:30:49:e5:
         b8:b9:af:f1:37:42:f9:92:be:a0:93:2f:d2:d8:ac:44:c5:42:
         62:25:a2:4b:f4:f8:b4:a2:dc:41:25:5f:b2:f9:79:ac:bd:7b:
         29:f0:c7:b9:27:5c:c2:17:a5:b8:c9:a2:07:e4:9a:b9:8d:b4:
         74:46:68:0c:ea:a3:5d:38:19:f2:45:d4:04:74:bb:29:d6:3c:
         cf:98:a3:1e:51:4d:54:56:c9:2b:7f:f7:3d:52:51:4d:02:ab:
         6f:04:0d:ad:5d:88:01:73:9a:8c:9f:39:d7:94:77:41:de:7b:
         bd:70:d3:b9:b2:ad:5f:94:d2:2c:a6:f5:2a:58:bf:86:b4:c4:
         72:2a:45:c7:6e:c1:f8:51:39:61:65:91:c0:e7:ee:af:d0:72:
         17:25:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----