Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e6bcf91875b6fc7638dea2cad1ee0ae8fd1926.cer
File:                     d3e6bcf91875b6fc7638dea2cad1ee0ae8fd1926.cer (raw, json)
Hash identifier:          8kZL51HiClaXB/vsU+wq1thRnpXsXWZK/WaLQWrhZ8w=
Subject key identifier:   AC:21:62:0F:75:7B:7D:D7:33:28:F1:88:4C:6D:5E:EF:64:FE:95:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5F09E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3384ff4a-2652-4850-a03a-9d18c8a16027/d3e6bcf91875b6fc7638dea2cad1ee0ae8fd1926.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3384ff4a-2652-4850-a03a-9d18c8a16027/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2019 15:10:58 +0000
Certificate not after:    Fri 20 Sep 2024 16:12:49 +0000
Subordinate resources:    AS: 269845
                          IP: 2801:1a2::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16117918 (0xf5f09e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 15:10:58 2019 GMT
            Not After : Sep 20 16:12:49 2024 GMT
        Subject: CN=d3e6bcf91875b6fc7638dea2cad1ee0ae8fd1926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:7e:67:71:07:91:8c:68:27:7c:08:05:f0:
                    78:41:13:d3:aa:a9:b9:f6:75:09:c6:ca:ee:bc:ff:
                    d5:29:8e:a0:ef:c6:06:d3:61:d1:ed:9d:f8:57:9c:
                    9c:5f:8e:4d:ef:94:7e:4b:7f:a6:a3:db:84:7e:f1:
                    e3:78:27:db:33:59:3f:1c:74:ee:c4:ce:bf:3d:e4:
                    4a:eb:92:30:9d:97:15:90:91:3b:63:5f:80:c5:d9:
                    00:47:47:2a:1b:5d:9c:e8:c2:83:3a:55:4a:74:41:
                    d2:e1:8d:6d:c7:9c:21:6a:ba:e7:90:ba:fa:94:a5:
                    b9:7d:ca:48:51:51:48:e3:49:7a:ff:c9:62:53:e2:
                    af:c8:1d:d5:9a:d6:32:be:1c:46:dd:7f:4e:f6:0a:
                    2a:fa:d7:dd:97:fd:db:50:00:79:c3:ce:b1:ea:cc:
                    c1:98:bd:fd:0a:19:26:7a:db:3e:cf:15:db:a8:f4:
                    d6:df:85:ca:c3:a7:bf:67:ae:2e:84:75:c6:7b:57:
                    3a:a0:28:c8:78:ae:f6:25:27:c9:7e:f4:d6:cd:58:
                    51:18:7d:fe:50:d2:9f:43:c7:a0:30:d1:d0:35:64:
                    5e:13:4f:3c:4f:25:68:e1:e6:c6:00:0d:0e:50:a3:
                    79:f2:ab:e3:e0:e8:74:7f:05:8e:c5:b5:12:bd:d7:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:62:0F:75:7B:7D:D7:33:28:F1:88:4C:6D:5E:EF:64:FE:95:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3384ff4a-2652-4850-a03a-9d18c8a16027/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3384ff4a-2652-4850-a03a-9d18c8a16027/d3e6bcf91875b6fc7638dea2cad1ee0ae8fd1926.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a2::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269845

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:60:92:67:2e:1b:f4:c3:69:4d:5b:47:74:3a:3b:e7:c0:
         ba:0c:c2:fe:9e:69:e1:6d:b2:36:03:35:c1:39:4f:48:e6:bb:
         bc:bf:84:be:b7:68:71:b0:09:09:3e:bd:57:91:22:f1:7b:61:
         2c:3a:2f:ef:db:41:52:2a:9e:1d:9e:5b:2d:08:d6:13:a1:ea:
         d9:08:73:55:cb:33:6d:52:43:13:de:d6:d5:01:24:b7:64:e1:
         1d:0a:dd:a5:61:e9:41:1b:e4:55:f5:34:a9:0c:17:0c:c2:07:
         c7:0a:6c:78:74:5a:04:0a:be:24:84:37:65:95:1d:da:6a:f4:
         28:f7:c9:d5:a0:9b:8d:76:c4:f0:b4:1e:60:02:32:9f:8c:91:
         9c:08:63:a8:de:1d:4f:f5:c9:da:65:2a:cd:f8:22:f2:17:b6:
         1d:19:f9:8a:b3:07:06:60:7f:3a:b6:cb:61:52:4b:fb:a6:a3:
         64:7e:8c:24:9d:b6:6b:f8:79:65:92:79:1f:06:5c:a4:e4:bc:
         05:a0:1c:e9:bc:e5:19:86:c9:00:54:c5:b9:51:57:48:15:fb:
         05:96:a7:f2:c0:c0:e4:9d:31:94:be:bc:ec:6f:5d:16:3c:d4:
         a7:c5:39:0c:f6:35:96:9f:b3:88:8d:0e:3a:f3:f6:a4:63:91:
         77:90:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----