Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da10b4373c1a02f19caaedb2e493b9129c63e1c8.cer
File:                     da10b4373c1a02f19caaedb2e493b9129c63e1c8.cer (raw, json)
Hash identifier:          ZnHRyghZ+iflT7ksWMkD1QVjudZXttqqlmFI+8d2REk=
Subject key identifier:   1A:A9:09:8A:9D:E7:C6:24:14:0D:29:5D:76:2C:64:A5:F7:2A:FF:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB0AAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/da10b4373c1a02f19caaedb2e493b9129c63e1c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 May 2019 00:45:27 +0000
Certificate not after:    Thu 01 Feb 2024 20:52:20 +0000
Subordinate resources:    IP: 161.0.72.0/21
                          IP: 2803:8680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14355114 (0xdb0aaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 00:45:27 2019 GMT
            Not After : Feb  1 20:52:20 2024 GMT
        Subject: CN=da10b4373c1a02f19caaedb2e493b9129c63e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:e2:92:84:eb:20:94:b9:9c:7d:b3:d6:c9:
                    ce:41:ba:f4:0b:63:fb:e2:06:55:ec:d9:ea:31:25:
                    71:20:1c:bf:0f:2f:22:65:8e:b0:a2:d2:5b:60:24:
                    fc:7e:97:6f:71:0e:aa:1b:eb:bd:fc:87:c0:83:03:
                    9d:49:cd:db:27:a1:a3:16:c5:73:a8:2f:2b:64:5c:
                    d4:d7:9e:e0:d5:27:0b:bc:c1:27:87:08:d6:fb:90:
                    1f:61:f1:05:e9:27:88:2c:dd:5f:6c:bf:18:31:79:
                    c8:ff:81:47:b8:74:d9:e7:1a:c3:e2:58:13:32:96:
                    d6:3b:a2:a6:08:3b:66:03:fe:b7:88:e9:f8:d2:99:
                    dc:60:5d:4f:79:f0:dc:80:d8:0a:d3:6f:09:6d:57:
                    2a:39:e5:75:58:52:f0:80:bc:ef:4d:5b:d1:35:ea:
                    54:3b:09:2f:e8:73:b5:55:6d:19:e1:45:ac:42:d0:
                    98:b8:46:29:b2:ac:61:8e:0a:5a:91:b9:5e:6f:ef:
                    0d:2d:b7:b4:c8:07:0c:c1:88:5c:7b:50:fc:f3:6c:
                    43:61:8a:2f:26:d8:7e:c4:4e:09:ba:d1:df:6a:db:
                    f5:2e:8f:85:51:26:41:79:63:ef:64:27:58:2f:27:
                    40:0c:ef:9f:51:79:66:12:fb:c4:78:ef:40:13:42:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A9:09:8A:9D:E7:C6:24:14:0D:29:5D:76:2C:64:A5:F7:2A:FF:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/da10b4373c1a02f19caaedb2e493b9129c63e1c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.72.0/21
                IPv6:
                  2803:8680::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:42:0e:9a:eb:55:42:37:24:d8:48:2c:ae:26:29:23:61:
         2c:40:a5:3e:b1:ae:df:24:40:2d:01:e4:bd:37:21:74:9b:c7:
         14:d7:30:43:59:8c:82:eb:e1:09:4a:49:9e:6a:d0:c2:9e:a9:
         2a:7f:0f:0a:f0:df:6e:fa:8f:c1:fc:44:bc:90:50:1b:5c:5e:
         21:74:5d:cf:68:e7:a2:1f:7d:c0:ef:b4:d0:da:66:a7:cf:ed:
         6f:99:39:5d:e5:84:a5:3d:16:b5:d3:98:c1:fa:96:7f:26:23:
         af:75:4c:46:1c:35:e6:24:ab:d5:7d:ea:51:ea:8c:3b:19:dd:
         5a:73:7b:b6:7b:57:c2:53:4a:e8:08:e7:9f:e8:17:6b:6b:09:
         1a:3b:a3:d4:53:78:16:5f:52:7b:ce:99:5a:9a:52:ac:4d:3b:
         8c:97:23:d4:b3:5f:8f:be:95:40:cb:6b:d2:9c:75:cb:78:44:
         ed:8b:0a:3b:05:d4:d5:e9:01:ed:61:ee:d0:83:b7:b6:ec:b0:
         80:17:b8:a1:ad:3b:29:21:86:9c:fc:72:a9:c2:33:14:22:6e:
         d4:44:11:7c:f7:64:bf:0d:ba:7f:57:f3:ed:c6:b9:05:64:83:
         4c:24:65:b1:41:c4:19:0c:d6:11:59:e5:12:5c:71:76:a9:bc:
         5b:90:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----