Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c68514e340a0b39197cbb6d38d1378f39565c69.cer
File:                     6c68514e340a0b39197cbb6d38d1378f39565c69.cer (raw, json)
Hash identifier:          DzbCeyIxJbx0ESbHPSMd9BWkWP0msu7DpkzSfLx+2Tw=
Subject key identifier:   84:E6:07:3F:42:95:21:DF:B2:35:D7:50:57:0F:EB:7F:22:50:04:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9293C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2018 16:26:13 +0000
Certificate not after:    Sat 12 Oct 2024 18:32:48 +0000
Subordinate resources:    IP: 45.228.208.0/22
                          IP: 2803:e920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16329020 (0xf9293c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 25 16:26:13 2018 GMT
            Not After : Oct 12 18:32:48 2024 GMT
        Subject: CN=6c68514e340a0b39197cbb6d38d1378f39565c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:4c:61:0a:f2:30:0f:44:d1:b9:e0:63:80:
                    a2:c6:75:1e:07:80:29:3f:20:28:a9:e7:18:31:35:
                    53:47:fe:27:99:a9:e7:34:db:0a:13:3d:30:ae:20:
                    0e:36:b6:a0:ba:61:c3:b0:9a:20:c9:50:de:39:93:
                    a4:98:64:5c:46:c0:b2:ea:c4:bb:de:d7:c7:76:59:
                    e2:1f:a1:d0:86:fa:1a:57:55:a8:4a:e0:d1:e1:9d:
                    54:2a:26:ca:75:91:73:14:57:56:13:bf:c6:87:39:
                    7e:96:7c:57:50:08:f2:44:b6:92:e1:ff:6e:5b:9f:
                    2d:5d:11:60:06:f0:ba:64:ff:a5:4e:4c:65:df:8f:
                    71:1a:f0:61:2c:df:23:e7:0c:02:83:8f:53:68:f7:
                    07:30:76:ba:f3:e4:36:df:6a:bd:2a:3d:11:9e:dc:
                    6c:7d:0c:fd:6f:85:23:e6:e2:2d:7a:fe:b8:5a:5f:
                    b0:26:60:27:b0:c5:2c:26:b6:d2:ff:8b:b8:5a:7f:
                    c1:1c:f8:f1:4d:91:0f:d8:8e:ea:c9:76:13:1e:06:
                    3f:10:3e:08:46:64:01:89:39:16:15:ac:d6:d3:eb:
                    51:61:6f:4e:43:c7:4c:d2:fc:a4:d5:66:6b:3d:76:
                    0d:4e:22:73:86:4d:72:c5:81:95:a7:40:04:63:25:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E6:07:3F:42:95:21:DF:B2:35:D7:50:57:0F:EB:7F:22:50:04:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.208.0/22
                IPv6:
                  2803:e920::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:94:c5:48:79:32:f8:31:ac:e4:45:10:9e:c5:92:c6:01:
         21:95:db:07:9b:ed:67:0a:fb:27:da:72:0a:83:b0:16:27:40:
         2b:35:30:53:40:ce:da:e7:df:74:01:fa:d9:71:41:65:23:5c:
         68:0e:12:92:4e:72:38:a3:fd:a8:80:e2:70:b5:41:8b:af:f5:
         ef:72:ca:d1:41:00:fa:1d:07:89:39:50:0b:68:9f:7a:41:bb:
         06:af:fa:a6:17:ad:94:62:89:5d:6e:52:7d:c9:99:76:c2:c2:
         da:11:22:2e:01:51:ff:c0:d3:d6:88:55:fc:56:a0:68:fa:a2:
         d7:91:2d:8d:3f:b8:9d:10:c1:55:04:8a:f3:fd:b4:8b:d7:c2:
         d3:0a:9d:2a:03:1b:e8:14:7c:49:ae:12:dc:ff:a0:a1:70:34:
         e0:4d:62:8e:7b:62:73:1a:f5:9c:64:75:c0:0e:80:3b:74:f1:
         06:79:d0:57:e9:bf:0c:d4:54:5f:7f:49:28:8a:a1:72:76:f9:
         4d:58:5b:29:ad:33:33:4a:53:38:16:8d:48:c0:17:30:36:d6:
         14:92:6c:ca:b8:a1:95:94:f1:19:71:29:42:5f:62:62:bb:69:
         19:82:cf:26:37:12:9b:65:e1:03:bf:e6:29:ab:be:cd:1e:9f:
         e1:97:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----