Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer
File:                     bcdf4d97f35391de289dae3eec82d9065b4520f4.cer (raw, json)
Hash identifier:          tslSIQVanzR3YXpdmGA1AfgVCxV1Uvx4Uq0PGStdiKY=
Subject key identifier:   12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D578EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2020 22:20:16 +0000
Certificate not after:    Wed 22 Nov 2023 19:00:18 +0000
Subordinate resources:    IP: 45.189.216.0/22
                          IP: 2803:82e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13990124 (0xd578ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  6 22:20:16 2020 GMT
            Not After : Nov 22 19:00:18 2023 GMT
        Subject: CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:7b:94:89:1e:29:42:1d:0c:87:0a:40:29:
                    05:a8:9f:fc:a0:cc:38:4a:7b:07:c1:2b:c2:fe:f9:
                    da:9a:76:e0:f6:47:bb:48:b9:36:1d:3f:a6:7b:6f:
                    b7:57:c1:8b:7f:eb:6c:be:c4:80:8b:38:53:56:8b:
                    bb:72:88:ce:af:eb:4f:97:16:e8:d0:e2:ab:6c:45:
                    84:44:d6:83:c3:a3:5d:2d:e4:6b:ca:eb:ed:f4:71:
                    8e:b1:e5:1b:dc:70:37:13:e7:22:70:c9:fc:be:e1:
                    09:b5:58:0e:4a:ec:a4:f9:23:9e:7b:64:ea:9c:fe:
                    06:f8:ae:00:69:da:7e:89:a2:b0:c2:6c:ef:15:d6:
                    e1:14:94:b1:35:98:2e:dd:89:30:46:79:77:80:bc:
                    40:7a:91:ca:03:67:a7:f5:b6:99:82:fc:d0:c1:ec:
                    40:22:e9:2f:a3:d3:6f:65:58:76:f6:7a:7a:f8:b7:
                    94:3f:3a:40:81:fd:e3:a1:0c:ca:b6:b4:bb:88:48:
                    5e:f7:a0:6e:fe:72:f6:f1:26:53:da:fc:fc:3d:d4:
                    27:c9:1b:3e:25:f6:42:7d:bf:fc:ae:8e:9f:c2:e3:
                    4a:a3:4a:6d:50:c3:ec:b0:44:a0:49:d6:c6:b8:d5:
                    80:4c:a2:4a:a0:75:ff:e0:82:26:2f:8a:62:11:b2:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.216.0/22
                IPv6:
                  2803:82e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:e4:61:23:2e:db:35:d0:b6:e4:31:41:41:9c:71:a6:a8:
         fe:0f:8b:66:e7:4f:12:e8:85:e2:3a:94:71:93:e3:b8:cb:5f:
         f8:6b:86:bc:37:83:b2:c4:3e:48:63:6f:2b:ee:6a:2f:75:89:
         7c:f6:7f:83:41:af:ed:28:8f:18:44:16:1f:71:95:07:73:99:
         30:20:e1:c4:f4:d7:c5:31:88:e1:f2:c0:f5:14:4d:88:16:54:
         a7:3c:47:a2:53:3c:02:48:81:37:62:ff:59:d1:30:ef:54:05:
         1b:aa:47:2e:08:81:70:cb:94:27:1d:ed:d8:2e:bb:7f:b8:cf:
         90:be:f5:e5:f3:a6:72:3d:3e:63:6e:cf:21:ac:75:74:86:05:
         41:94:e2:31:31:b7:df:fd:47:25:38:67:70:e1:64:81:9f:2f:
         66:d8:71:46:ca:03:3e:e0:a5:2b:e7:9a:3a:a7:8e:07:81:55:
         60:48:24:1e:36:23:c7:c3:ff:0c:bb:f8:78:12:33:ce:50:84:
         d8:53:5c:38:98:11:16:73:23:c5:36:3d:cb:5d:9d:0d:7e:b5:
         46:8a:9d:7f:24:82:bd:f3:e8:43:a8:68:d9:e2:31:64:92:2b:
         cd:1b:c8:92:1b:98:b8:ca:08:e3:c4:83:c4:2d:be:6c:31:26:
         b3:6e:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----