Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer
File:                     958f499ac41f5f1d49e25d2caab8318b95a1c691.cer (raw, json)
Hash identifier:          CRRD7SgGmt9g33+FaNq1mKx0skwXjIvcmsw96iMOgZk=
Subject key identifier:   F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1FD05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Nov 2019 22:46:20 +0000
Certificate not after:    Sat 17 Aug 2024 15:07:51 +0000
Subordinate resources:    IP: 2801:1c2::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15858949 (0xf1fd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 22:46:20 2019 GMT
            Not After : Aug 17 15:07:51 2024 GMT
        Subject: CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:a2:b3:6a:0c:c4:fc:c0:cc:0a:78:c2:9b:
                    9b:b7:ed:ab:67:d8:b3:b8:45:9e:8e:57:cf:92:2f:
                    7d:09:81:11:d6:c4:48:02:97:1f:29:36:41:06:d0:
                    71:1c:16:fe:e5:96:cc:5c:48:e8:25:88:0f:76:1f:
                    4a:9a:5a:69:b6:62:8c:4a:47:b2:86:53:49:08:65:
                    68:76:24:b6:76:de:a4:91:14:94:80:bc:f3:43:bb:
                    3b:f1:e9:b1:74:ba:1c:55:be:a4:79:c7:e3:e8:ed:
                    f5:92:c3:1e:44:06:fe:e4:82:52:9d:c6:b7:95:1e:
                    a6:c1:af:83:33:be:cc:c5:d8:c8:d5:fc:7d:5f:2c:
                    6b:65:42:59:59:b4:25:40:8c:40:7b:a3:63:70:d8:
                    75:31:ce:87:b8:62:83:ef:45:09:ce:fd:24:13:b5:
                    77:75:cb:36:79:95:ba:a3:0c:91:95:c0:53:12:ab:
                    b6:fc:a5:7d:20:27:1e:8c:35:3a:ec:7a:8e:5d:01:
                    f1:6b:b3:86:cd:86:9d:db:c9:1b:bf:2e:de:dd:15:
                    48:c7:95:cd:46:13:1f:80:6a:c6:0d:a7:eb:95:04:
                    21:d7:51:8b:ec:ba:25:d2:70:7e:61:5b:b1:4b:de:
                    23:06:58:e1:ec:e5:e0:89:fa:0e:2f:f5:e1:d2:36:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c2::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:eb:ae:05:e9:45:22:10:48:f8:dd:83:72:ec:4d:43:09:0e:
         2a:15:92:c5:37:b9:a1:ea:58:ec:32:19:e9:ac:08:25:02:9b:
         e7:a2:e5:f4:d8:a1:ee:1e:7e:88:3d:fa:3b:a3:b1:74:38:ee:
         17:af:b4:5d:00:82:82:21:7b:a8:9d:07:70:4e:7b:8c:74:fe:
         78:64:bd:2d:b4:9a:4e:92:ae:f6:98:e0:e4:92:98:f8:7c:fc:
         2d:f0:82:aa:49:0e:cc:06:29:2b:cf:12:2b:4c:04:55:d0:8d:
         c6:d3:2a:21:d3:df:f1:25:6e:a0:bb:9a:0d:06:06:64:bb:7a:
         e9:9e:2b:14:cb:5b:82:79:a0:38:59:1b:d9:7b:46:d0:d8:ff:
         d5:e0:2a:6b:d7:ea:06:3b:01:45:b0:38:25:36:45:e9:13:63:
         5a:5e:e4:b2:1c:09:78:ee:b2:bf:d1:60:af:76:9c:d7:09:e6:
         b6:43:dd:f2:17:a9:63:67:ec:f6:37:b0:18:9a:35:c6:5e:89:
         3b:2a:f4:a2:2b:5b:ba:7b:b8:2d:90:63:b8:63:94:ac:37:74:
         12:0f:8a:39:2a:2b:33:50:9a:07:ae:55:5f:95:f1:52:9d:73:
         49:c0:3b:b9:ed:67:9b:54:68:d2:0a:31:1a:0b:16:5a:d7:01:
         d1:dc:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----