Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f8d3d2c1ceee0154c33b1d62c4d89121805a205.cer
File:                     8f8d3d2c1ceee0154c33b1d62c4d89121805a205.cer (raw, json)
Hash identifier:          iiUaa5ooxYxCoKMlnUwDfnw03OZQS7PdaG22ATNx7II=
Subject key identifier:   D5:C0:87:C6:12:3F:7E:68:EE:DA:7E:89:61:C7:50:83:03:E0:BC:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6B8AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6de9aecf-6a7d-49be-8353-6a5419bd7a89/8f8d3d2c1ceee0154c33b1d62c4d89121805a205.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6de9aecf-6a7d-49be-8353-6a5419bd7a89/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Nov 2019 16:09:28 +0000
Certificate not after:    Thu 26 Sep 2024 21:55:32 +0000
Subordinate resources:    IP: 2801:10:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16169135 (0xf6b8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 27 16:09:28 2019 GMT
            Not After : Sep 26 21:55:32 2024 GMT
        Subject: CN=8f8d3d2c1ceee0154c33b1d62c4d89121805a205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:0c:a5:fc:48:d7:3b:1b:6b:10:41:f5:1f:
                    2f:ef:6e:63:c6:3a:ef:4f:6d:50:26:ea:86:fa:37:
                    d8:17:59:f2:e1:f5:44:dd:13:95:2c:1b:c5:bc:5e:
                    d0:db:0d:bd:8f:3f:4e:15:cb:bc:21:3a:34:48:0f:
                    22:65:12:4b:88:77:47:09:6b:25:55:bf:fd:7a:fa:
                    5c:eb:46:72:06:cd:be:c7:7e:d6:4a:a5:16:a8:ea:
                    34:b3:9f:60:d3:cf:3d:e7:43:46:9c:8f:04:64:19:
                    fe:d1:81:68:a4:48:1e:9f:db:87:17:cc:83:83:ea:
                    28:69:0e:b8:44:24:05:0c:81:fe:e2:1e:e3:36:aa:
                    2c:d6:fc:bf:88:69:1f:64:c8:a5:e1:7e:5f:66:c1:
                    c6:e0:df:54:17:7b:15:be:88:ba:6b:bc:ac:bb:87:
                    a5:3b:ca:88:95:5f:5e:f1:c2:c7:6f:7b:60:b1:5c:
                    3a:07:6a:88:06:3f:cc:0a:a5:4f:52:2e:35:c2:7f:
                    50:7b:9e:fe:83:a4:44:ad:1d:38:cc:9a:c8:6b:b5:
                    b7:3a:01:32:d1:6a:ca:e2:29:2b:58:98:b4:31:d1:
                    d8:f8:c4:ff:64:f4:3f:23:9c:71:d0:c1:20:71:12:
                    9e:30:9c:52:0d:b8:38:62:81:94:2c:99:0a:48:3f:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C0:87:C6:12:3F:7E:68:EE:DA:7E:89:61:C7:50:83:03:E0:BC:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6de9aecf-6a7d-49be-8353-6a5419bd7a89/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6de9aecf-6a7d-49be-8353-6a5419bd7a89/8f8d3d2c1ceee0154c33b1d62c4d89121805a205.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:72:da:54:bf:f8:f3:ff:1b:ec:11:06:5c:90:e8:70:87:78:
         83:f1:58:35:41:34:68:76:8d:30:02:05:aa:e7:1f:4a:cc:e0:
         08:41:61:cf:00:98:ee:4b:df:73:ab:15:e6:24:ee:77:45:2f:
         a3:6c:fe:c1:12:c4:ca:58:92:6a:fa:c6:cc:7d:c6:1d:ed:1a:
         04:5b:7e:ea:1c:37:80:8c:3f:ea:09:75:c3:72:9e:e7:91:f8:
         99:94:56:50:a3:68:cc:b4:8c:c1:8c:cf:25:15:21:17:6c:17:
         97:7c:39:9e:29:11:17:c7:d1:eb:95:19:f7:be:d9:81:3d:11:
         22:93:33:87:2f:8f:98:83:07:1a:ac:8d:87:b6:d5:9b:64:0a:
         60:0c:ad:2e:77:c4:bc:da:06:72:2c:f2:95:bf:9f:65:c2:bc:
         85:71:6e:1f:4a:e0:53:1b:6b:be:73:21:80:3d:2f:1a:ff:a2:
         a5:6c:28:0f:e1:20:b6:e9:9e:fe:2a:62:f5:1f:b5:df:c7:7e:
         76:59:d8:36:bf:21:9f:a7:68:fd:ec:03:96:ac:d7:43:91:2a:
         d2:a6:56:9c:b0:08:37:fa:e8:dd:36:09:e4:53:27:5f:66:c9:
         c1:37:aa:9e:ac:27:4e:28:e1:02:5f:98:ea:33:bf:11:46:37:
         13:37:e6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----