Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202cb3488506efb49dfb0ab983c08668843b1d3a.cer
File:                     202cb3488506efb49dfb0ab983c08668843b1d3a.cer (raw, json)
Hash identifier:          Rs1ber4pKn4FBtle/1wEiVHk4u+bxR6kSoVpLL6Ix+0=
Subject key identifier:   D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8EE17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/202cb3488506efb49dfb0ab983c08668843b1d3a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2020 15:24:52 +0000
Certificate not after:    Sat 06 Jan 2024 15:30:03 +0000
Subordinate resources:    AS: 269975
                          IP: 190.89.28.0/24
                          IP: 2803:16e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14216727 (0xd8ee17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 25 15:24:52 2020 GMT
            Not After : Jan  6 15:30:03 2024 GMT
        Subject: CN=202cb3488506efb49dfb0ab983c08668843b1d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:fa:52:0d:e0:b8:15:df:ac:d3:b7:a4:d7:
                    63:ba:bc:e9:a2:e8:65:af:af:5c:31:8f:19:c9:05:
                    a1:0b:10:f3:92:5f:ca:f1:ff:16:96:60:ee:fe:e7:
                    e9:5f:bb:35:e4:a2:85:1a:77:5b:5b:87:74:44:76:
                    26:fd:37:fc:48:c0:ad:83:b1:b5:b9:45:3c:43:1c:
                    2f:71:a4:23:d9:89:bb:e5:d8:29:76:df:b6:01:d3:
                    60:75:2c:ce:90:00:68:70:80:86:46:0f:af:22:5c:
                    d5:76:2e:7d:00:87:54:21:f0:b8:cd:7b:a0:80:31:
                    e8:e1:e8:69:70:eb:b0:cf:42:00:74:b1:68:52:55:
                    46:6d:e3:ec:a5:19:06:39:db:f0:09:63:29:0a:c9:
                    55:31:20:c2:d2:6a:2b:a8:13:82:6a:b0:b3:4a:47:
                    1f:a1:8f:42:44:f5:72:53:23:6c:6a:4b:8e:45:a6:
                    5c:f0:5f:c1:4e:90:f1:a4:c0:65:e4:a3:81:9b:3a:
                    f5:8b:ed:ef:73:4e:74:9b:71:5d:e5:d0:51:4b:1d:
                    77:57:48:87:b0:98:76:2c:7a:79:24:fd:f8:a2:67:
                    6e:3f:26:41:11:d1:22:06:e4:8b:89:7e:71:6c:be:
                    ee:76:d2:78:7c:ab:c4:9d:50:b2:99:14:58:f8:03:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/202cb3488506efb49dfb0ab983c08668843b1d3a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24
                IPv6:
                  2803:16e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269975

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:2f:3d:02:ed:2b:43:18:c8:01:ea:19:27:0a:56:8a:67:
         18:6d:38:b3:dd:2f:06:b4:b4:dc:79:3c:88:f3:e1:93:74:60:
         6e:22:ff:77:c5:52:1e:9c:b2:f6:47:4d:9c:f4:d9:4a:a8:5a:
         f9:1c:75:87:a5:6e:05:fc:4e:93:b6:8f:1e:7f:31:19:ed:7d:
         73:d5:e8:fc:da:19:e2:64:5f:de:62:24:22:87:1f:4a:1c:c5:
         14:51:45:f9:39:0a:00:59:1d:d5:4d:9e:47:20:90:0c:71:d5:
         e5:ad:6e:4b:34:b6:3b:9c:6a:ae:a8:59:73:b1:d4:46:55:1a:
         8d:5f:2f:9e:3c:cf:60:7b:f2:13:d3:7b:4e:52:5e:b2:ed:ce:
         d0:f3:bb:4c:bc:6a:a0:4f:26:ca:c9:19:7e:87:f6:42:e0:81:
         13:93:a0:c7:75:7c:be:8f:27:6f:75:53:7b:7e:06:c1:a4:a6:
         de:69:47:6b:32:7a:39:a1:be:c5:a2:3d:e5:52:74:32:3c:77:
         96:10:7e:37:c8:44:e8:29:67:b8:5f:e0:62:fb:06:bb:58:58:
         41:23:fc:5c:e1:fc:dd:97:52:80:48:69:8e:72:ff:9e:3d:d5:
         65:25:ea:05:03:39:58:5e:2a:29:3c:0a:02:a7:86:78:cb:c8:
         db:c2:21:68
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANjuFzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMyNTE1MjQ1MloXDTI0MDEwNjE1MzAw
M1owMzExMC8GA1UEAxMoMjAyY2IzNDg4NTA2ZWZiNDlkZmIwYWI5ODNjMDg2Njg4
NDNiMWQzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKou+lIN4LgV
36zTt6TXY7q86aLoZa+vXDGPGckFoQsQ85JfyvH/FpZg7v7n6V+7NeSihRp3W1uH
dER2Jv03/EjArYOxtblFPEMcL3GkI9mJu+XYKXbftgHTYHUszpAAaHCAhkYPryJc
1XYufQCHVCHwuM17oIAx6OHoaXDrsM9CAHSxaFJVRm3j7KUZBjnb8AljKQrJVTEg
wtJqK6gTgmqws0pHH6GPQkT1clMjbGpLjkWmXPBfwU6Q8aTAZeSjgZs69Yvt73NO
dJtxXeXQUUsdd1dIh7CYdix6eST9+KJnbj8mQRHRIgbki4l+cWy+7nbSeHyrxJ1Q
spkUWPgD6WkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTRRRUmgU0GsHGIeBFvSDZ8
1xqNOTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYTQ5NTkxMi03ZTAw
LTQ5ZjgtOGUzZS03ZTNmOTkyMzU0NzkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWE0OTU5MTItN2UwMC00
OWY4LThlM2UtN2UzZjk5MjM1NDc5LzIwMmNiMzQ4ODUwNmVmYjQ5ZGZiMGFiOTgz
YzA4NjY4ODQzYjFkM2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAL5ZHDANBAIAAjAHAwUAKAMW4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHpcwDQYJKoZIhvcNAQELBQADggEBAKqa
Lz0C7StDGMgB6hknClaKZxhtOLPdLwa0tNx5PIjz4ZN0YG4i/3fFUh6csvZHTZz0
2UqoWvkcdYelbgX8TpO2jx5/MRntfXPV6PzaGeJkX95iJCKHH0ocxRRRRfk5CgBZ
HdVNnkcgkAxx1eWtbks0tjucaq6oWXOx1EZVGo1fL548z2B78hPTe05SXrLtztDz
u0y8aqBPJsrJGX6H9kLggROToMd1fL6PJ291U3t+BsGkpt5pR2syejmhvsWiPeVS
dDI8d5YQfjfIROgpZ7hf4GL7BrtYWEEj/Fzh/N2XUoBIaY5y/5491WUl6gUDOVhe
Kik8CgKnhnjLyNvCIWg=
-----END CERTIFICATE-----