Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4b2c2fe3a00f50a1e90d692950bdd43704615e4.cer
File:                     b4b2c2fe3a00f50a1e90d692950bdd43704615e4.cer (raw, json)
Hash identifier:          jvm3X/m95RYCzHRs3NniullmBliNjuh1B1fzG8WKm8w=
Subject key identifier:   27:AB:23:2C:0A:55:36:EA:37:A5:50:A4:D4:1D:E5:4C:BA:34:1F:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F41743
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba4dcbef-7f58-4411-bdfd-f3680390146f/b4b2c2fe3a00f50a1e90d692950bdd43704615e4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba4dcbef-7f58-4411-bdfd-f3680390146f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2019 02:38:04 +0000
Certificate not after:    Thu 05 Sep 2024 23:19:31 +0000
Subordinate resources:    IP: 45.188.188.0/22
                          IP: 2803:2f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15996739 (0xf41743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 02:38:04 2019 GMT
            Not After : Sep  5 23:19:31 2024 GMT
        Subject: CN=b4b2c2fe3a00f50a1e90d692950bdd43704615e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:68:1b:4c:28:fb:a9:eb:38:da:dd:64:c4:
                    7c:0f:41:cb:cd:e0:57:d8:d4:a7:2d:88:b0:c0:b9:
                    95:6e:7f:f4:91:69:6d:9c:cb:41:91:da:c4:1d:3e:
                    35:90:f4:36:36:b4:04:53:8e:c3:28:5d:84:a9:eb:
                    af:f7:f2:d9:87:5e:be:50:6f:03:4a:80:ff:6b:3c:
                    ca:f3:10:a3:12:ad:6c:9e:b3:b8:30:c0:2b:3e:1f:
                    17:a5:e0:81:8a:8d:94:7a:87:a9:73:77:32:f0:16:
                    b6:fb:c9:72:69:2f:22:d9:1a:56:29:45:59:17:81:
                    ae:01:6d:dd:d7:59:65:c6:f0:ed:38:66:73:9c:01:
                    98:24:9d:db:2a:c9:d6:9e:f0:58:5c:73:b6:72:ce:
                    e6:76:ec:d3:f5:b3:73:10:5c:bd:98:7a:dd:ca:62:
                    77:34:4d:62:cc:73:af:81:bb:54:54:7f:66:93:97:
                    d1:11:56:7d:44:51:c2:a0:99:f1:79:0e:fa:c7:99:
                    44:40:56:26:4f:a6:c4:ac:3a:06:ba:48:ee:75:c3:
                    57:cb:b1:ae:4b:b4:e5:7b:52:dc:c6:c9:64:a2:b9:
                    f5:c3:0a:07:af:80:31:4e:54:fd:68:c3:6e:27:84:
                    66:7e:17:58:3d:c8:9a:73:15:fb:f1:3c:eb:1d:af:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AB:23:2C:0A:55:36:EA:37:A5:50:A4:D4:1D:E5:4C:BA:34:1F:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4dcbef-7f58-4411-bdfd-f3680390146f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4dcbef-7f58-4411-bdfd-f3680390146f/b4b2c2fe3a00f50a1e90d692950bdd43704615e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.188.0/22
                IPv6:
                  2803:2f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:bb:58:0d:b0:07:2f:ac:9f:8b:d5:cc:a5:d6:53:3a:08:f6:
         d8:10:e5:58:02:20:ba:49:49:73:3e:c1:77:63:da:d1:11:c2:
         73:fa:43:b8:3b:64:aa:da:9c:b4:45:0e:ad:9d:f3:ce:a7:f6:
         87:c5:01:83:db:d6:1d:b2:0b:90:0b:ec:31:5e:23:f2:3f:a4:
         1a:9d:e7:d6:1b:b7:c9:50:ac:6b:d3:c0:77:be:a4:c8:25:60:
         dd:3b:77:a4:1f:b4:d0:4d:b4:45:89:52:53:87:f8:bb:08:65:
         8e:38:b7:b3:ff:66:24:4a:4e:4b:25:2c:d1:84:d0:6b:27:d5:
         de:f3:d9:f9:e2:9e:dd:48:b4:c3:fc:fa:8d:e9:94:93:db:22:
         60:11:b1:9e:9d:d7:90:fa:27:4d:83:6b:0f:5d:fd:6b:d7:15:
         27:74:92:91:52:46:0b:03:43:83:4c:b7:56:ec:d9:59:c5:fb:
         f7:98:65:9f:57:f6:a6:b2:b8:e4:da:2f:d0:fd:ca:2e:3b:00:
         dd:f2:58:19:78:2f:ec:7a:1a:86:cc:68:7d:7c:5f:66:1c:09:
         f0:03:4d:68:62:34:a9:b1:11:15:6b:63:c8:4d:51:15:a3:07:
         75:f6:46:05:6b:19:ae:9c:c0:c1:68:83:6e:67:5a:ef:c4:fa:
         da:cb:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----