Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3933b09c439c7ac19e0f598db501b6e0cd05248.cer
File:                     e3933b09c439c7ac19e0f598db501b6e0cd05248.cer (raw, json)
Hash identifier:          jbFcm/ANWkmwmure2X+lU+JNIGd6zmbmQHOrAja+jMY=
Subject key identifier:   32:E1:BF:DD:56:88:55:C4:8F:E5:38:CA:C3:F5:B5:AB:99:7A:A3:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDFF1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/e3933b09c439c7ac19e0f598db501b6e0cd05248.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Oct 2019 21:14:21 +0000
Certificate not after:    Thu 18 Jul 2024 16:04:11 +0000
Subordinate resources:    IP: 2801:14:4800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15597341 (0xedff1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 22 21:14:21 2019 GMT
            Not After : Jul 18 16:04:11 2024 GMT
        Subject: CN=e3933b09c439c7ac19e0f598db501b6e0cd05248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:30:4b:d3:68:0e:cb:c1:1d:7f:da:4c:a2:
                    20:ee:da:85:1d:e2:7e:8a:d5:a6:5b:0a:05:24:e7:
                    fb:8d:11:6c:27:ff:36:99:cf:de:2c:bc:99:ad:31:
                    b6:83:dd:4b:88:ff:d7:5c:ba:e3:4f:52:e2:b9:9f:
                    df:6e:1e:28:9a:87:97:2b:01:a4:ba:58:92:37:69:
                    3f:ac:5e:44:6b:f9:1b:31:ed:7a:9e:ce:d7:28:4b:
                    54:b3:ab:6b:34:aa:aa:5d:7f:a6:af:d5:16:d9:42:
                    02:d5:ed:b5:23:ed:54:4d:1d:ce:3c:80:19:d5:a5:
                    f3:fb:35:d4:d1:f4:6a:93:18:b4:4e:bf:20:28:9a:
                    a5:2a:1f:4d:62:dd:e8:68:8e:5b:5a:12:18:46:0b:
                    d1:76:1a:dc:89:73:24:1f:55:18:39:9f:02:fe:87:
                    75:4e:69:5b:4b:17:f0:a3:a6:75:92:19:5f:d0:17:
                    b6:96:0c:43:7b:34:46:86:81:58:bd:88:7e:7d:0e:
                    7d:2e:f1:bf:8a:09:fa:e3:e2:d6:db:6c:d1:d4:bf:
                    77:45:84:56:76:db:68:ff:f9:f9:cf:be:b9:5d:28:
                    1a:86:f4:76:fd:8d:ca:c5:8c:7b:4c:f9:9c:72:77:
                    3c:9b:37:a3:5b:0f:14:06:de:cf:81:d3:59:5a:8e:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:BF:DD:56:88:55:C4:8F:E5:38:CA:C3:F5:B5:AB:99:7A:A3:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/e3933b09c439c7ac19e0f598db501b6e0cd05248.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:63:da:1f:8c:35:59:a4:3a:cd:5d:ca:c4:0a:28:7c:cc:06:
         97:d1:05:97:6a:47:64:69:04:28:79:38:ef:68:a4:6c:6d:92:
         ba:4d:b9:d7:c6:0d:58:2d:b8:5d:0d:f7:a5:58:3d:55:9b:13:
         4d:31:4f:b2:31:a5:50:9a:dd:59:41:3b:35:1e:8b:87:ac:0f:
         64:cb:5b:32:75:e3:ff:90:80:d0:04:8a:1d:0b:04:57:cf:8b:
         6a:c7:3e:4f:03:49:af:18:39:15:05:6b:95:d2:b4:a5:7a:83:
         29:ed:be:b0:41:71:82:83:f6:4d:50:d3:1a:16:bc:84:5e:b1:
         9a:23:53:76:48:e8:a1:03:66:ca:09:4c:a9:97:e0:d4:6a:5e:
         fe:0c:2b:cf:6a:5c:8d:fa:fb:5b:b4:87:e6:b5:d1:ee:ba:72:
         70:d2:7d:19:86:25:32:8c:03:aa:5d:17:a8:61:d2:b5:41:32:
         69:ee:ee:27:80:2b:cb:b1:4e:56:68:71:79:7b:0d:34:d8:8e:
         d1:25:20:ad:59:69:9e:9d:29:7e:1c:f7:30:e3:ce:5d:37:15:
         ef:bf:56:3d:0e:09:bf:be:75:84:6a:f2:11:52:fd:0e:5b:16:
         06:fe:ce:e9:8f:e3:c2:2f:9d:3c:87:37:52:01:5d:19:17:e7:
         d1:81:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----