Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd2f9307f01ba2e3cf422dd2c296db1290348332.cer
File:                     dd2f9307f01ba2e3cf422dd2c296db1290348332.cer (raw, json)
Hash identifier:          aruhDX+V/OoIikFWVTqM1p03Rd9tKc5kdptDdxbopo8=
Subject key identifier:   AD:CE:FB:E2:BD:4F:7A:79:91:3B:15:E8:EF:3C:9F:AE:93:0C:1E:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5029F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2019 17:56:16 +0000
Certificate not after:    Sun 12 May 2024 22:18:35 +0000
Subordinate resources:    IP: 2801:13c::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15008415 (0xe5029f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  3 17:56:16 2019 GMT
            Not After : May 12 22:18:35 2024 GMT
        Subject: CN=dd2f9307f01ba2e3cf422dd2c296db1290348332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:36:31:27:54:81:6b:ba:25:02:2e:4c:12:
                    de:da:83:cc:e2:59:92:c1:e8:72:b8:66:7d:9a:4a:
                    6e:fe:c0:80:48:49:8c:0c:0c:d9:34:38:ef:dc:a4:
                    a9:63:2a:ed:a1:3c:62:c4:75:26:9f:44:60:67:98:
                    6d:5e:0c:7a:c8:6e:a5:e1:f0:42:1d:dc:f4:55:d2:
                    1c:0c:98:b5:b2:3b:ef:6a:db:95:10:4a:5d:0c:86:
                    05:88:08:81:2a:b7:33:6d:16:d9:d6:5f:68:d6:61:
                    d5:47:f8:c0:1c:7a:3d:26:cd:13:47:4e:c4:79:e3:
                    9e:dc:d4:74:17:42:16:e4:c0:66:09:61:2e:1c:35:
                    c2:48:16:3d:aa:35:ba:9e:ab:8e:3a:26:1f:35:fd:
                    4c:62:d3:41:4d:13:c6:6c:96:36:43:0b:bd:46:b9:
                    23:7b:0f:2d:38:db:8f:51:9b:ba:43:4e:28:eb:c7:
                    80:95:15:7a:6f:9e:29:05:0c:5b:ef:27:45:b4:5f:
                    19:d8:61:f3:c7:8c:42:ba:f0:aa:38:6f:f7:e2:cd:
                    4e:59:79:7a:d4:e6:82:c0:6a:85:ef:41:03:fa:94:
                    af:ab:a1:61:88:11:dd:52:64:d7:85:12:db:22:7a:
                    cf:51:4c:13:8e:9d:cc:e7:48:84:01:d0:27:65:8b:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:FB:E2:BD:4F:7A:79:91:3B:15:E8:EF:3C:9F:AE:93:0C:1E:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13c::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:25:52:e5:81:78:dc:d8:d4:2d:f3:8f:72:f8:cb:49:f3:
         82:dd:a3:e7:1b:df:15:e2:7e:5c:c9:53:00:a3:7d:4d:c6:92:
         e5:cf:1f:c3:8c:e6:5f:80:04:5b:b7:65:70:72:2a:11:75:e2:
         33:c9:4a:48:3a:a2:ca:bd:a0:ba:5b:e3:d4:87:f3:a0:fa:f2:
         e3:ed:0d:96:dd:f2:c7:dc:3d:a1:83:56:50:a9:bd:80:ce:d8:
         57:c5:d8:81:bc:10:2e:9b:69:2e:4a:d4:f9:2b:9e:41:6e:eb:
         70:b2:b5:71:c7:7c:9f:19:40:06:63:4f:1d:00:74:0a:b8:b2:
         93:07:dd:4d:99:16:3c:ad:00:5b:e6:2a:22:0e:ba:0c:9a:ec:
         4c:af:e0:07:e9:30:9f:d3:2b:5c:0d:cb:a6:2a:36:ab:e1:8f:
         09:79:c6:5f:0a:f8:fa:68:13:ff:6c:ab:23:96:b3:60:82:4b:
         0f:95:c4:81:42:00:54:c0:64:d1:a9:52:3c:61:1c:ab:ff:ff:
         ea:22:ef:9b:db:a7:9b:ae:fd:11:64:fd:66:e8:c6:d5:3f:8e:
         d3:73:c0:38:71:ab:b6:79:1f:f4:57:17:81:1d:f6:96:18:7b:
         c9:f7:43:3b:6e:d3:7f:47:47:10:1e:1d:c8:fb:93:b5:26:1f:
         73:9d:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----