Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fd13bb6c152df2de42e94dc89624f31b656962e.cer
File:                     2fd13bb6c152df2de42e94dc89624f31b656962e.cer (raw, json)
Hash identifier:          0kK9gmMHI+D9L4mmTgaYgq0ADxeuyXRAxNbl6BUZDsw=
Subject key identifier:   9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01025062
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/2fd13bb6c152df2de42e94dc89624f31b656962e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2019 21:38:05 +0000
Certificate not after:    Fri 27 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 269876
                          IP: 45.168.174.0/23
                          IP: 2803:77a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16928866 (0x1025062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 19 21:38:05 2019 GMT
            Not After : Dec 27 05:00:00 2024 GMT
        Subject: CN=2fd13bb6c152df2de42e94dc89624f31b656962e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:6c:0e:11:94:57:fd:90:b1:11:4e:7f:6c:
                    5a:15:20:de:02:0d:eb:58:e9:25:d7:15:cf:08:85:
                    7b:2d:36:b8:87:8c:1e:d8:13:94:4f:94:d8:b4:5f:
                    eb:51:32:46:47:b0:04:d7:11:64:fc:e1:97:6f:91:
                    43:58:db:fc:e0:68:70:48:50:67:6b:92:72:5c:01:
                    d4:5b:85:c2:c9:33:bb:46:08:86:b1:0b:1b:af:80:
                    73:5f:a9:8d:be:ca:14:03:11:85:68:3b:c6:fd:f2:
                    10:8d:ef:9f:5c:5f:ff:15:0f:d1:93:a0:8c:ad:40:
                    c1:ef:73:77:bb:a1:1c:4c:86:cf:b4:38:8b:45:39:
                    e9:7b:4b:a3:65:b7:99:62:d6:4d:a3:aa:64:d4:d9:
                    e1:03:c4:e6:a8:1a:6d:f1:74:52:91:18:2b:1a:a2:
                    36:4f:1f:b5:f9:14:76:27:c9:c7:80:f5:4e:84:2c:
                    69:ec:c6:9f:e7:ef:d1:42:cc:f1:07:99:8f:d3:24:
                    72:32:7a:6e:b6:95:be:54:d3:dd:f6:df:1a:ee:30:
                    fe:bc:bc:58:3c:4d:13:47:48:d5:59:cc:87:36:e6:
                    6e:5a:e2:fc:66:84:58:64:6d:2e:79:41:bf:a3:b6:
                    0b:6d:7e:ae:d2:ef:ba:69:cc:e4:96:6a:9a:c3:76:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/2fd13bb6c152df2de42e94dc89624f31b656962e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.174.0/23
                IPv6:
                  2803:77a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269876

    Signature Algorithm: sha256WithRSAEncryption
         b2:a7:92:81:0a:aa:ce:e5:88:9e:de:2d:9b:af:72:b9:d7:bc:
         33:9c:31:de:b2:1a:ca:a0:f8:e8:6c:59:03:8b:22:5e:59:de:
         bb:fd:d1:c1:91:6d:67:29:14:ce:31:26:5e:bf:2d:5d:a4:de:
         f8:8c:6c:93:96:8e:dd:96:d6:7b:4e:fd:5a:f3:fa:06:0f:00:
         b2:55:ae:e3:8e:3d:4e:2a:f3:6e:02:39:78:a0:7f:cc:37:b9:
         6d:0e:9b:91:46:f1:36:c1:20:3f:5d:e0:e0:23:41:18:b0:ad:
         9a:74:e1:92:f0:37:16:f7:3c:b3:cf:1a:a2:bc:41:12:70:14:
         6d:35:ea:a8:60:fc:d0:62:4d:60:03:61:1b:04:75:18:dc:80:
         80:1a:a4:cf:13:3c:4c:00:bd:bb:b6:21:53:e2:78:63:85:84:
         1b:44:98:14:f4:46:3a:f6:64:1f:87:cb:4d:ea:c6:a5:03:d6:
         a7:f3:86:fa:06:d8:90:64:04:30:94:4b:87:d5:2c:e2:1f:3b:
         b1:fc:9e:e2:e1:2a:97:24:9d:bd:db:31:c4:7b:b5:ec:e9:e3:
         d9:19:a7:ea:14:d6:a5:7f:f1:fc:45:e9:7b:bd:5f:e9:6e:9c:
         52:05:b7:b3:49:37:9d:ad:42:c3:4c:07:56:15:2c:d4:54:96:
         68:36:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----