Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
File:                     1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer (raw, json)
Hash identifier:          DYHL0UcFWl28uQqJ06QRVZE890ZM3dAwyTjjtEiLC14=
Subject key identifier:   2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE1BAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2019 11:09:21 +0000
Certificate not after:    Mon 25 Nov 2024 13:54:42 +0000
Subordinate resources:    IP: 45.170.132.0/22
                          IP: 2803:aba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16653229 (0xfe1bad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 11:09:21 2019 GMT
            Not After : Nov 25 13:54:42 2024 GMT
        Subject: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:5c:9e:b1:da:05:45:45:d9:bf:7b:68:88:
                    41:11:91:0b:3e:bf:b9:c5:1f:4f:07:36:23:25:60:
                    c5:56:c3:f0:b8:80:64:ab:93:07:a8:15:28:d4:26:
                    55:bf:42:e3:f5:e7:d7:25:7f:80:c3:5a:68:e7:e8:
                    36:d4:65:e7:4a:34:88:b9:d2:5e:80:60:e7:d7:e2:
                    42:b4:6d:7a:7a:db:ea:3c:b2:6a:0c:4b:11:fb:20:
                    f2:7f:28:36:72:13:b9:14:ac:98:e0:e7:66:23:d7:
                    19:a3:7c:4b:33:37:ab:71:18:98:31:41:15:79:e2:
                    09:9f:8c:24:1f:4f:f6:09:e0:5a:eb:eb:71:df:7f:
                    d7:2e:4d:bc:b6:e6:cd:6b:ad:4d:42:58:3c:fb:a9:
                    85:c5:7e:b5:81:d2:cb:51:2e:e0:f6:a4:f9:84:85:
                    d6:0c:c7:f0:90:0a:a6:17:ec:48:16:71:79:5b:56:
                    a4:16:8e:da:d9:03:91:55:e6:a9:7d:84:3d:0c:54:
                    80:d8:22:f6:fe:ef:e1:3b:25:8d:dc:3a:fa:b9:78:
                    ed:4a:7a:f0:76:66:0c:77:ac:ef:b4:2d:e3:fd:b2:
                    96:e2:ce:1d:af:aa:70:24:57:76:f4:fc:5f:3b:5e:
                    65:92:54:6f:bb:3f:b7:2a:6e:fa:bd:9c:14:90:04:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.132.0/22
                IPv6:
                  2803:aba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:73:be:10:08:e6:b7:ad:eb:4b:93:18:7c:eb:26:be:76:d3:
         30:8a:26:c5:8a:78:99:05:bd:07:e2:67:53:5e:5a:0a:a9:fb:
         3e:86:d4:b3:2f:97:a4:a7:65:5e:a7:34:bb:a0:56:b6:70:2b:
         20:93:56:57:d8:a8:3c:72:4b:c1:a5:66:2a:28:38:23:41:5d:
         e4:e2:bf:3a:4f:4e:d7:ef:8f:b7:ff:f1:6a:01:ee:89:38:bb:
         8a:a8:79:12:82:dc:bf:09:7b:8c:a0:45:a5:7f:0f:d3:0e:67:
         9c:8f:c5:1b:d8:61:e5:9a:fb:f5:31:c9:1e:27:a9:52:68:3d:
         bc:14:9c:40:d1:45:67:0d:8a:9d:16:1c:33:a8:a2:0d:52:9c:
         cc:7f:06:70:6b:1c:2c:4f:92:b3:16:0c:c5:cf:0e:04:6e:d5:
         ff:35:1e:59:6a:86:52:27:6a:3c:ab:dc:9e:6e:05:9b:bd:c2:
         15:d0:95:85:83:b1:86:41:9a:b0:8c:95:f8:9f:21:30:93:ac:
         6b:41:61:75:38:30:df:8d:be:e5:d4:e6:5d:62:75:93:91:92:
         f2:b7:09:9b:30:5e:cb:37:0b:e1:a9:3b:ae:11:e1:bc:0a:e2:
         3f:93:43:f7:01:7e:b8:df:15:45:1a:8a:5a:ea:34:74:57:74:
         e4:5d:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----