Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
File:                     694b3d580e07f84edc87befe8b29d4e23ac87258.cer (raw, json)
Hash identifier:          INXubQEHiz76OZm4bWoT2WcZXetrn/UZs0BIaDm5PGM=
Subject key identifier:   18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01004DC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2019 19:51:59 +0000
Certificate not after:    Sun 08 Dec 2024 00:07:02 +0000
Subordinate resources:    IP: 45.170.244.0/22
                          IP: 2806:321::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16797125 (0x1004dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 19:51:59 2019 GMT
            Not After : Dec  8 00:07:02 2024 GMT
        Subject: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:45:4a:60:cd:75:d7:64:c7:e0:59:8b:c7:
                    01:ca:e7:38:56:4f:e4:48:fc:5d:c7:84:20:68:77:
                    a3:f8:a6:e4:26:bd:20:49:8a:2b:6c:e9:df:bd:ad:
                    a8:b2:49:95:f3:3c:db:3c:89:83:38:96:68:1a:5a:
                    66:22:e4:3d:a0:9d:8e:27:93:aa:c1:a2:e4:d4:5c:
                    e7:b6:bb:21:66:c8:67:a2:4c:10:16:2e:24:1a:67:
                    33:45:75:13:53:52:12:12:e3:45:ba:50:e5:78:ac:
                    0f:07:0d:2d:d9:7c:08:c5:b2:f7:65:d9:13:40:56:
                    eb:cf:6b:7f:37:36:57:0b:99:3e:b1:3d:36:5d:ea:
                    5c:c3:ab:28:7c:66:fe:d6:2f:d7:0b:33:67:bc:1d:
                    3f:e8:4d:fb:6f:24:0d:83:d1:23:5b:3a:50:a4:f7:
                    69:e8:7e:d6:64:ee:ff:67:84:13:ab:f4:97:4e:f9:
                    cc:58:24:e8:0c:e3:48:2f:9d:16:7a:2d:e5:9e:72:
                    fe:6b:4a:ee:fa:26:56:d3:e5:66:96:d0:67:48:8b:
                    89:29:00:48:5d:f5:0e:3b:1d:57:cb:ef:e8:98:2f:
                    ea:93:c1:dd:6a:13:c3:eb:86:72:f9:22:ac:67:85:
                    98:6e:7d:6b:9f:45:e4:c5:e8:cf:31:5a:c7:05:3b:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.244.0/22
                IPv6:
                  2806:321::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:bf:ff:1c:51:3f:b8:13:12:ba:70:d4:c8:d0:e0:01:6c:
         c3:ab:06:f1:84:f3:b7:5a:3a:e3:01:a9:e4:15:35:12:e7:22:
         11:0c:88:ad:58:3f:71:55:1e:80:e4:26:f7:a6:d7:cd:42:7f:
         d7:75:57:03:fc:b1:5a:a7:22:26:11:97:da:1d:fd:03:d1:ac:
         e0:17:45:bc:40:15:2e:3d:bf:c4:db:20:16:32:b8:06:e6:9a:
         c9:f9:5d:60:d2:6a:b7:0f:25:19:a2:17:db:41:12:13:93:de:
         95:92:af:c4:47:df:d9:a4:93:27:df:df:3c:e1:6f:97:ab:72:
         c4:13:f0:33:f5:27:07:76:5f:0f:40:da:66:be:a9:49:00:d7:
         91:4e:0a:d7:ac:27:ef:24:3d:1c:67:24:e6:41:27:d2:3f:80:
         dd:be:ac:26:b6:37:dc:fe:91:ae:e3:65:02:9d:14:89:6b:68:
         ac:78:62:2c:2f:00:f9:ac:1f:41:4d:0c:0f:41:f9:f4:48:61:
         0a:28:bb:25:39:43:7f:6b:bd:ee:15:6c:38:fb:e7:35:2c:7d:
         7c:98:be:99:6d:4e:52:b2:8b:6d:2b:33:bb:bb:12:94:15:87:
         26:c1:a0:cd:cb:40:14:66:18:51:ea:55:62:42:95:10:94:c9:
         6f:b2:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----