Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1061ecf4dd478d85e837ae459fd3bb87b05f4e57.cer
File:                     1061ecf4dd478d85e837ae459fd3bb87b05f4e57.cer (raw, json)
Hash identifier:          EvjFd89bVmE6d44h10DIk+/QgInXM4X0UARf+GFI/7Y=
Subject key identifier:   54:6E:B6:03:2E:81:C7:34:D7:53:04:0F:1A:0A:85:D4:CB:FF:9A:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101127B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98de6021-2708-41e8-80b7-0c86df9ec945/1061ecf4dd478d85e837ae459fd3bb87b05f4e57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98de6021-2708-41e8-80b7-0c86df9ec945/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 29 Aug 2019 15:07:58 +0000
Certificate not after:    Fri 13 Dec 2024 20:07:59 +0000
Subordinate resources:    IP: 2801:19c::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16847483 (0x101127b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 15:07:58 2019 GMT
            Not After : Dec 13 20:07:59 2024 GMT
        Subject: CN=1061ecf4dd478d85e837ae459fd3bb87b05f4e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:da:e3:49:50:1a:c2:81:ea:46:ee:5b:35:
                    8f:c1:25:d0:0f:07:5a:f0:8f:31:7b:47:c0:4e:95:
                    1c:0c:88:c5:34:c8:bf:56:ee:4e:38:34:14:04:f4:
                    3c:bc:17:78:6e:04:d9:ca:9a:12:06:9e:d3:0a:5a:
                    57:57:2e:be:86:29:dd:6d:77:11:83:20:74:77:43:
                    27:a0:0c:00:d6:cf:41:31:da:83:ac:be:90:a2:7d:
                    08:1a:bd:a5:96:cd:24:da:03:38:a1:ad:e4:b6:a7:
                    28:a5:35:95:ba:cf:4f:54:51:e9:4c:b1:35:35:8f:
                    b5:24:c5:db:45:2a:4e:ba:6e:b5:b1:f3:ef:6c:81:
                    5d:71:ab:ef:7a:9a:44:ce:97:aa:30:2a:fe:57:29:
                    df:da:da:92:64:e4:3f:5a:35:b3:fe:f8:44:60:1e:
                    97:98:1b:a4:fb:17:43:ae:a7:20:99:38:a8:50:c3:
                    a5:43:76:1b:df:63:aa:27:02:8a:12:13:59:f7:93:
                    e8:91:8f:8b:5c:34:10:68:03:69:9a:73:59:db:ef:
                    5a:99:df:68:16:d2:5a:00:75:ae:ff:9a:43:b4:26:
                    57:93:62:1d:ab:ed:46:a1:22:46:2b:d4:cb:75:54:
                    f4:9f:98:f1:be:5e:f6:e8:53:ff:c0:58:1b:bc:b0:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:B6:03:2E:81:C7:34:D7:53:04:0F:1A:0A:85:D4:CB:FF:9A:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98de6021-2708-41e8-80b7-0c86df9ec945/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98de6021-2708-41e8-80b7-0c86df9ec945/1061ecf4dd478d85e837ae459fd3bb87b05f4e57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19c::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:fe:1d:b8:2c:94:92:3c:4f:d4:b9:a0:3d:1b:81:df:f5:49:
         22:a4:2f:e8:cf:0f:bc:d6:ca:e2:db:1a:17:4e:59:53:26:2b:
         04:31:5b:e7:ce:69:34:d4:be:87:f9:dc:b3:a3:af:6e:04:55:
         cf:48:b8:6e:da:8c:b0:59:d9:d6:4c:2e:b4:95:7a:30:44:01:
         c4:89:b5:92:16:11:90:b3:91:76:6d:38:cc:bb:44:76:51:41:
         43:45:e9:19:d9:d0:3a:cc:c0:5c:5a:3d:d4:97:1a:9a:19:ae:
         14:3b:82:42:cf:8e:39:38:46:f7:c3:08:2c:1f:79:df:97:81:
         87:98:56:f3:e0:0d:48:58:d1:2b:26:01:b3:1d:68:de:6c:ab:
         e4:e9:88:4d:82:bb:9c:0d:89:9f:37:5d:10:ed:1c:6d:0f:f1:
         a3:fe:c6:00:8c:9d:ce:70:31:cd:9e:ab:30:4b:a0:2a:30:6b:
         62:36:1a:e5:6d:7f:90:db:01:4c:ad:78:50:73:52:cd:60:e6:
         85:eb:bd:03:8e:c2:7c:29:d6:9a:8c:22:fa:13:12:06:56:b6:
         8c:9f:37:a8:46:49:13:55:17:bd:54:b8:e0:31:c2:43:e5:5a:
         56:c5:e4:9e:d8:51:7f:d9:30:7a:9a:2f:1b:28:f5:a0:4b:77:
         eb:0a:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----