Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer
File:                     1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer (raw, json)
Hash identifier:          MjmecYFBpd2DamqmbvQTOITQbySBtSvobYn0+uHFS3o=
Subject key identifier:   B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCEC21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Mar 2020 14:48:59 +0000
Certificate not after:    Fri 23 Feb 2024 21:05:06 +0000
Subordinate resources:    AS: 267834
                          IP: 45.175.139.0/24
                          IP: 2803:6460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14478369 (0xdcec21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  2 14:48:59 2020 GMT
            Not After : Feb 23 21:05:06 2024 GMT
        Subject: CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:14:42:30:2f:11:fd:19:42:54:2b:15:bd:
                    fd:fa:17:dd:ac:f9:11:ad:88:03:70:dd:82:e6:b3:
                    d7:ec:ce:3b:6b:64:f6:08:77:05:22:78:76:6e:a7:
                    d7:60:3d:da:36:45:4d:31:cd:2f:d9:f4:51:5d:29:
                    c9:45:54:f2:a7:67:df:06:6e:5d:71:ff:5b:85:ec:
                    a7:73:c4:12:33:e8:ea:8b:27:76:9f:13:8c:d7:9e:
                    2a:06:3e:a8:0a:a4:ec:b6:62:68:28:0c:86:3e:09:
                    7a:fb:29:d1:d2:3f:70:cc:18:e9:ea:3c:ab:03:d3:
                    41:c7:b3:17:d1:5a:53:42:c4:07:fe:0b:d4:73:71:
                    7d:01:22:e6:47:d2:f0:0d:c5:a3:a3:90:44:3c:8b:
                    97:01:0f:fc:a2:69:5d:ec:f9:16:9f:e6:77:0b:b8:
                    b7:e3:e7:8f:d7:9d:b3:54:67:7d:3e:7b:8e:b4:ec:
                    78:15:40:8a:85:6f:75:f4:8a:d2:eb:48:71:65:84:
                    1b:2a:4a:d2:59:13:4f:64:45:a8:6c:82:64:e9:a7:
                    75:39:cc:3c:02:77:c0:1c:a7:48:6f:e5:27:8a:4d:
                    30:d5:f8:c4:63:62:11:97:4f:77:88:70:8b:bd:d7:
                    bf:fc:d0:94:ce:da:71:a9:17:14:02:b0:a5:56:ad:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.139.0/24
                IPv6:
                  2803:6460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267834

    Signature Algorithm: sha256WithRSAEncryption
         c5:be:70:62:22:79:bd:6f:e8:a7:ae:51:a7:5b:89:04:b3:fb:
         05:72:3b:e1:5d:95:70:08:72:82:58:ca:c7:03:b7:aa:d0:37:
         de:2d:2d:78:a0:96:5a:31:c6:8b:e1:e1:39:32:e4:57:51:9d:
         b2:75:9c:9d:c8:8b:52:38:05:67:75:2e:62:a8:b5:48:d9:07:
         4f:5f:3a:8b:20:c9:90:79:4a:95:ae:35:b4:9b:cb:a3:c4:ce:
         86:9e:0e:69:e4:60:0a:a9:b5:8b:b3:ac:5c:1b:57:ff:bc:03:
         64:4b:00:f0:97:ce:bb:f9:cc:79:40:fb:fc:40:a7:0e:f7:49:
         7c:e0:fd:b2:17:c0:0d:31:d3:da:28:b4:33:1f:35:b7:d3:54:
         f1:a4:9c:38:c2:64:44:09:29:7b:43:d9:4c:b9:72:fa:94:4a:
         ad:21:2f:cb:53:b5:0e:aa:d3:f3:07:b5:17:d5:c4:f0:42:f6:
         c2:f5:e7:49:84:f7:6d:93:7a:68:86:89:f1:38:6e:b0:ec:e1:
         3e:65:fc:47:35:6c:99:58:3c:b1:c6:b2:19:fc:59:e1:7e:b1:
         9f:c5:4c:76:94:d6:c4:80:8a:1d:8d:91:e6:c7:e4:25:40:a6:
         98:7d:40:1c:6d:15:b5:1e:a3:ee:25:0f:0f:d3:78:a0:5f:ef:
         b2:d5:92:d2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANzsITANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMwMjE0NDg1OVoXDTI0MDIyMzIxMDUw
NlowMzExMC8GA1UEAxMoMWUzY2NhM2U2ZjYwYWFhZDFmMjMwYTUxOWEwZjMyOGMw
ODY5YzlkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5fFEIwLxH9
GUJUKxW9/foX3az5Ea2IA3Ddguaz1+zOO2tk9gh3BSJ4dm6n12A92jZFTTHNL9n0
UV0pyUVU8qdn3wZuXXH/W4Xsp3PEEjPo6osndp8TjNeeKgY+qAqk7LZiaCgMhj4J
evsp0dI/cMwY6eo8qwPTQcezF9FaU0LEB/4L1HNxfQEi5kfS8A3Fo6OQRDyLlwEP
/KJpXez5Fp/mdwu4t+Pnj9eds1RnfT57jrTseBVAioVvdfSK0utIcWWEGypK0lkT
T2RFqGyCZOmndTnMPAJ3wBynSG/lJ4pNMNX4xGNiEZdPd4hwi73Xv/zQlM7acakX
FAKwpVattJsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS1K3u51CzGb9zRFH32hLIX
U0H2JzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMTcyYjM4Zi0wZDdk
LTQ0ZWEtYmMzZS04MjRkZTQzZDdlM2IvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzE3MmIzOGYtMGQ3ZC00
NGVhLWJjM2UtODI0ZGU0M2Q3ZTNiLzFlM2NjYTNlNmY2MGFhYWQxZjIzMGE1MTlh
MGYzMjhjMDg2OWM5ZGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2vizANBAIAAjAHAwUAKANkYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFjowDQYJKoZIhvcNAQELBQADggEBAMW+
cGIieb1v6KeuUadbiQSz+wVyO+FdlXAIcoJYyscDt6rQN94tLXiglloxxovh4Tky
5FdRnbJ1nJ3Ii1I4BWd1LmKotUjZB09fOosgyZB5SpWuNbSby6PEzoaeDmnkYAqp
tYuzrFwbV/+8A2RLAPCXzrv5zHlA+/xApw73SXzg/bIXwA0x09ootDMfNbfTVPGk
nDjCZEQJKXtD2Uy5cvqUSq0hL8tTtQ6q0/MHtRfVxPBC9sL150mE922TemiGifE4
brDs4T5l/Ec1bJlYPLHGshn8WeF+sZ/FTHaU1sSAih2NkebH5CVApph9QBxtFbUe
o+4lDw/TeKBf77LVktI=
-----END CERTIFICATE-----