Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer
File:                     14dd9710595884a6cdc2418a4de21b5c2b40042b.cer (raw, json)
Hash identifier:          yt3YKx1pxRKCIcBrdB3lu+FcZNh6c8/vOm8KTE4HkyQ=
Subject key identifier:   82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFC1F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2019 19:43:44 +0000
Certificate not after:    Sun 01 Dec 2024 00:06:01 +0000
Subordinate resources:    IP: 45.170.248.0/22
                          IP: 2806:31f::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16761328 (0xffc1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 19:43:44 2019 GMT
            Not After : Dec  1 00:06:01 2024 GMT
        Subject: CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:fd:2f:8f:d0:83:38:5f:49:f5:92:ac:5c:
                    2d:4c:32:1d:d5:d7:b8:03:41:8c:01:7e:a6:f3:d9:
                    a0:9b:09:b5:9f:2b:c9:ef:3d:2b:74:26:12:c9:e3:
                    ff:03:3a:fb:02:ec:9a:99:54:8a:62:7c:23:de:a7:
                    10:db:5a:fd:44:2e:d6:58:74:76:19:0a:d4:a0:ac:
                    96:7d:e4:63:58:7f:e9:fa:ee:b7:a9:4f:74:af:5a:
                    94:19:c6:74:b2:f7:0d:76:15:3a:c8:51:93:0c:ca:
                    d0:f4:6b:8b:35:21:6f:f3:48:1c:43:82:7f:dc:98:
                    cc:da:54:b7:58:c1:10:87:33:cb:e3:e2:c4:1d:e9:
                    03:1c:6e:40:36:ee:f4:51:17:9b:54:3f:aa:05:82:
                    9a:da:cb:6e:60:5f:fa:66:bc:32:a1:e2:78:48:41:
                    dd:36:b9:91:ad:e1:fe:7a:2d:65:f3:3c:59:d8:2e:
                    6f:9d:be:59:24:02:c8:60:93:03:5d:7b:f1:e1:f8:
                    e9:d5:4a:78:06:15:ab:90:21:c6:6a:f6:16:e6:6b:
                    8f:da:28:4b:d9:a6:9f:72:74:29:62:19:fa:8e:4e:
                    88:4a:6b:92:8d:b9:eb:90:90:98:5e:5b:a1:75:d1:
                    c6:86:a6:93:44:c5:f0:66:68:19:c9:bf:92:15:b0:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.248.0/22
                IPv6:
                  2806:31f::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:16:7c:45:46:9d:81:85:fc:53:a4:b7:4c:5b:3e:99:c5:0f:
         d3:a0:12:0b:f1:0a:7a:a9:27:23:6f:68:a7:7f:32:c4:21:6e:
         b1:b9:a8:a1:d7:c9:20:b1:07:73:0a:2c:77:43:fb:ea:4a:16:
         35:02:f7:07:57:c4:4b:68:a7:ca:a3:88:b7:52:50:71:57:c7:
         bc:31:6c:4e:0e:c8:82:82:a7:bd:ad:5b:79:96:0d:64:cc:b2:
         9f:6c:c9:a7:05:29:bc:b3:48:64:14:55:16:49:84:39:7a:98:
         c1:da:4c:c8:cb:ff:1a:af:c1:36:d9:5e:0c:73:62:44:e5:3e:
         9b:b7:ca:c4:f0:db:0e:30:f1:8c:19:ce:74:64:ae:82:a5:a5:
         58:ee:aa:77:2b:a6:6c:7c:12:da:98:83:7f:37:c7:b5:bd:35:
         3e:55:86:0d:02:ad:8b:69:25:00:99:2f:2b:30:2a:a1:ef:fb:
         4c:ec:c6:ee:71:9e:2b:c8:a0:f3:1c:f5:cc:64:af:cc:d8:cd:
         ac:f4:7c:5e:7a:97:fa:57:68:26:bc:db:33:4f:6e:1b:df:6a:
         73:bc:ba:df:84:26:a3:0b:32:e7:a0:ee:51:d3:26:c0:e1:16:
         c7:2c:94:ca:45:e0:7b:86:1a:e8:3f:c8:35:f5:57:21:e4:fa:
         1c:55:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----