Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919d25f91d1d68e6e59019691a59eb95c6967904.cer
File:                     919d25f91d1d68e6e59019691a59eb95c6967904.cer (raw, json)
Hash identifier:          HMZtTkntdAO4p2nuD6P25IKP5ChKHuMdCHgbf9olfyc=
Subject key identifier:   B8:57:72:8D:73:9F:FF:A3:EC:97:30:D3:6B:ED:C3:57:7E:DC:CF:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCCE76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/919d25f91d1d68e6e59019691a59eb95c6967904.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2020 20:10:52 +0000
Certificate not after:    Wed 13 Nov 2024 17:04:37 +0000
Subordinate resources:    IP: 2801:11:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16567926 (0xfcce76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 17 20:10:52 2020 GMT
            Not After : Nov 13 17:04:37 2024 GMT
        Subject: CN=919d25f91d1d68e6e59019691a59eb95c6967904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:83:72:24:9d:eb:80:7d:d4:55:e4:66:49:
                    ca:68:a7:e1:a7:3c:2c:6b:a7:16:09:78:ce:bf:a0:
                    15:ad:6c:b5:c3:87:97:50:2f:63:df:a4:d2:48:9d:
                    72:ea:33:94:72:83:4b:6d:8b:ab:79:63:72:12:1d:
                    bb:c6:0b:b7:c0:7b:5c:fb:44:2c:b8:4a:e9:67:ef:
                    df:14:67:bb:50:89:95:8a:37:86:2c:68:80:dc:5c:
                    36:84:7e:03:e6:9b:71:9e:ea:37:0d:04:40:79:9e:
                    c5:3d:53:20:37:92:43:a6:8e:10:bc:8d:3d:c5:1e:
                    e0:5c:63:9e:0d:86:46:98:aa:07:06:47:18:7f:49:
                    0f:ed:4b:ef:2f:b7:d6:37:77:ab:49:ca:0e:f1:e8:
                    09:fe:9a:4f:5a:ac:65:3e:06:be:34:26:c4:70:3a:
                    fe:24:c6:74:94:a8:b9:b2:fd:67:85:05:6a:3d:38:
                    ce:35:5a:9e:92:30:f6:42:a6:58:db:83:d6:96:7e:
                    3f:25:6d:3b:b1:7d:24:f5:aa:9c:f5:e3:67:17:66:
                    59:10:d2:2a:c9:8e:cd:56:d7:f8:59:e8:d7:f8:e2:
                    5d:9f:67:46:14:f1:5a:aa:c7:45:88:28:4e:96:07:
                    9a:57:e2:0e:89:6b:61:f1:b1:1d:f8:71:a0:59:89:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:72:8D:73:9F:FF:A3:EC:97:30:D3:6B:ED:C3:57:7E:DC:CF:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/919d25f91d1d68e6e59019691a59eb95c6967904.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:f0:fc:34:0f:8f:ef:a1:9f:4c:65:4e:9c:d4:c9:41:08:
         c2:b3:21:cf:dd:34:ce:ea:97:95:21:f6:74:1e:bf:2b:3c:22:
         b1:5f:94:47:b0:9d:0b:51:30:94:da:54:24:49:c0:e3:e5:5b:
         3c:57:11:85:cd:d9:9c:9a:6a:03:b4:2c:c2:a5:40:01:b2:00:
         e5:c7:fe:e6:c8:69:b7:68:56:fa:c4:84:ab:6c:82:c0:a2:97:
         51:e7:4b:a7:9c:12:be:66:53:06:48:8f:21:94:e6:56:be:48:
         86:10:b2:6e:cf:3c:c0:a1:7a:53:ce:68:e2:fa:af:b0:5d:73:
         20:14:19:ad:9d:6b:cd:0f:fe:05:c2:50:82:58:38:9d:93:d8:
         7c:72:7d:d4:16:41:e8:a1:a2:81:78:be:6f:a6:f1:9f:2f:b0:
         61:16:29:f3:fb:87:50:8a:a0:67:9c:0c:3e:a9:e0:f8:18:17:
         f4:c0:fb:a5:d9:3a:14:ed:4d:0c:47:e9:79:49:2d:82:fc:9f:
         fa:0c:ce:6b:d3:a2:99:e9:28:23:4a:ef:09:49:9c:8e:c0:50:
         10:90:2c:6e:5d:07:3e:02:8e:3f:8f:86:81:fb:50:ba:ec:0f:
         f2:7b:6b:f4:e6:42:42:52:0c:ff:8b:bc:29:83:16:4d:36:33:
         2c:fb:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----