Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer
File:                     c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer (raw, json)
Hash identifier:          Sb1JGCWhi7oAMWTnM0BAKPpvSaqZ7XGKB3keRedz8aM=
Subject key identifier:   19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F12FDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Fri 09 Aug 2024 17:31:04 +0000
Subordinate resources:    IP: 45.70.200.0/23
                          IP: 2803:c220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15806426 (0xf12fda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Aug  9 17:31:04 2024 GMT
        Subject: CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:ca:b6:fb:17:e6:03:58:8f:72:3d:bd:0b:
                    cb:ee:ad:a0:81:31:5a:42:63:6c:3c:64:87:31:12:
                    71:fe:fd:7f:0e:ab:1e:9f:19:66:29:bc:ab:32:74:
                    ce:33:cc:c4:ac:33:bd:ed:a9:81:83:17:93:23:50:
                    05:47:ae:9b:be:72:cd:63:fb:51:e1:e4:f5:a7:72:
                    5f:e6:12:0d:27:83:a4:8b:66:e2:b8:98:55:cd:24:
                    78:5d:10:2b:7a:37:4b:d6:34:62:b9:04:47:2b:aa:
                    da:18:98:f8:3e:3c:80:68:39:a0:38:8d:87:ec:18:
                    b4:29:1d:ae:f6:e5:78:2f:af:68:6a:9f:48:64:51:
                    0d:7f:9e:2b:58:53:5c:f0:b0:bf:85:76:74:eb:10:
                    42:83:11:94:e5:b2:4b:7f:61:7f:03:f7:18:e2:53:
                    e1:ee:97:10:81:cd:a7:a7:eb:38:a9:e1:20:fa:f7:
                    77:3f:89:11:36:e9:55:03:ab:80:a1:88:c8:fc:aa:
                    7c:ba:f1:d6:8a:d9:b9:c1:7f:bb:7d:f3:b0:28:ca:
                    69:a3:f7:f8:fa:66:36:44:88:1e:98:99:66:a3:62:
                    a6:22:c1:0b:a1:22:14:ef:63:0d:f7:db:f6:5f:1f:
                    0e:17:1f:1e:3d:d9:58:4d:dd:5f:96:1f:b2:3d:a8:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.200.0/23
                IPv6:
                  2803:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:bd:fb:2f:68:71:e9:9f:67:54:33:d5:20:cf:75:bb:3c:
         2b:2d:69:7c:b9:96:3e:3d:06:57:92:16:dd:c0:14:91:b4:da:
         70:5a:41:27:ec:60:59:8c:f2:88:9a:73:6c:f2:a0:89:36:31:
         91:f1:dd:20:b0:cd:9c:6a:b4:cb:6c:cd:cb:54:35:49:02:a1:
         f7:fd:bf:64:4d:2c:50:6d:f0:ed:69:a0:ac:5a:32:24:65:54:
         03:10:3e:b3:b6:f0:10:89:7f:4f:8f:74:07:03:60:99:73:b3:
         01:45:85:95:13:97:1c:38:17:6c:b5:66:f8:44:6b:b4:53:0f:
         e4:42:e3:8c:5d:01:bd:66:d5:a9:69:0a:3c:c0:1e:4c:a0:00:
         ab:b3:d8:15:b4:35:c1:50:a0:fb:9d:fa:54:13:7f:3b:5c:02:
         ea:e5:43:aa:74:87:d1:07:f4:6c:2d:11:53:10:0b:9e:40:f9:
         05:46:84:1f:67:0b:0b:b2:e8:51:28:d2:13:0b:8d:1c:63:da:
         10:a6:af:28:ba:7e:25:da:1b:6b:94:18:61:c5:28:81:76:7a:
         77:97:71:6b:06:2b:e7:56:0e:11:a3:ba:85:74:4f:8a:3a:fb:
         3c:45:78:3b:49:a5:d1:7c:a4:c1:b6:92:6b:17:a8:65:e2:4a:
         24:7f:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----