Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/212eef6d5c813481abd4b75f30b9ef564ed111ab.cer
File:                     212eef6d5c813481abd4b75f30b9ef564ed111ab.cer (raw, json)
Hash identifier:          Qrb+RSZX3XKX2q5Vj23BubCIf0wU0FzAN9qq5pST8P8=
Subject key identifier:   FD:16:D8:3D:62:76:52:53:86:79:18:4D:B9:46:E5:DB:A9:CD:D4:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED2AE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Oct 2020 16:53:00 +0000
Certificate not after:    Tue 09 Jul 2024 07:46:45 +0000
Subordinate resources:    AS: 270127
                          IP: 190.12.144.0/22
                          IP: 2801:c4:2a::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15543017 (0xed2ae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 20 16:53:00 2020 GMT
            Not After : Jul  9 07:46:45 2024 GMT
        Subject: CN=212eef6d5c813481abd4b75f30b9ef564ed111ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:95:4b:11:17:42:7e:0f:f2:24:2e:eb:f5:
                    70:74:0b:b7:db:a4:59:bc:c1:f4:a0:57:3b:23:ea:
                    ee:aa:12:00:ff:59:9b:4a:8e:b6:cb:4e:5b:7b:6a:
                    c1:de:2b:16:83:49:88:01:7a:89:7a:8b:cc:c8:2c:
                    fa:c3:fe:d0:2a:1c:cf:c9:76:bd:ab:ef:33:e6:80:
                    f9:7d:91:97:5f:73:be:6d:bb:12:c3:34:91:fb:fb:
                    d2:cf:65:2a:be:45:74:0e:55:2e:a2:7b:0e:53:cf:
                    81:5b:7a:f0:6b:cc:71:50:d4:fe:4f:a4:ba:5e:2e:
                    df:8f:de:17:8e:06:c4:9b:ba:8b:8c:7f:ba:47:09:
                    36:8d:e1:20:1a:67:53:85:6b:7f:b8:75:e5:c3:82:
                    ee:71:5a:4f:c8:63:20:33:e0:33:f5:99:11:db:2e:
                    9f:75:17:fc:da:9f:20:0f:43:3c:c4:71:d7:7b:e5:
                    e5:b0:47:32:f7:a1:4d:7c:4c:50:35:87:b0:77:26:
                    a0:76:58:82:ba:d2:05:33:e1:96:7f:8d:3f:2e:a6:
                    1d:25:88:8d:c7:07:ac:0d:a1:d7:c1:cb:88:93:aa:
                    89:9f:e1:98:03:94:e2:9c:63:42:33:73:b0:4d:3d:
                    c5:ac:64:b0:71:6b:f6:f1:ed:7a:94:0d:f2:40:9a:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:16:D8:3D:62:76:52:53:86:79:18:4D:B9:46:E5:DB:A9:CD:D4:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.144.0/22
                IPv6:
                  2801:c4:2a::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270127

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:8d:f6:67:a1:a2:92:b0:d2:46:1e:97:f5:59:72:75:e8:
         67:8d:2d:99:68:cd:4e:cc:d0:88:f5:be:a3:9b:42:36:80:54:
         b4:a5:52:36:9b:dd:8f:38:7e:cf:d4:f2:d4:13:a8:4c:81:81:
         d3:ad:b7:c0:23:13:ac:7b:3c:5b:f5:ba:f8:e2:48:82:0b:4a:
         39:21:e4:ab:93:92:1d:52:16:e2:0d:d2:7b:0f:6c:d9:c3:a3:
         48:90:80:54:e5:ae:58:a0:e5:07:24:94:15:4d:0e:e0:8c:aa:
         33:08:9d:56:f5:b4:65:39:eb:71:87:de:22:72:d7:bf:4f:a2:
         6c:de:98:c7:f2:2b:41:83:19:6e:46:d6:b5:6b:70:29:08:de:
         42:91:d8:6c:a7:9d:57:c2:f3:9f:73:15:bf:7d:39:cc:47:ca:
         5b:ca:e8:17:fe:92:fe:73:ae:46:b0:2b:cb:d1:83:a6:57:45:
         81:fb:04:95:3f:af:85:0f:08:d9:4d:68:27:af:b6:dd:28:63:
         b8:3d:bf:89:68:51:85:c4:42:de:ec:f4:dc:20:5d:33:3d:22:
         df:ca:d1:6e:30:ec:74:97:2d:d8:ea:33:41:bf:fb:e3:72:b8:
         ac:78:ad:cf:5e:0c:a0:52:1a:24:38:3d:e4:cc:c5:ab:0b:ce:
         db:f5:fe:3c
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAO0q6TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTAyMDE2NTMwMFoXDTI0MDcwOTA3NDY0
NVowMzExMC8GA1UEAxMoMjEyZWVmNmQ1YzgxMzQ4MWFiZDRiNzVmMzBiOWVmNTY0
ZWQxMTFhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6flUsRF0J+
D/IkLuv1cHQLt9ukWbzB9KBXOyPq7qoSAP9Zm0qOtstOW3tqwd4rFoNJiAF6iXqL
zMgs+sP+0Cocz8l2vavvM+aA+X2Rl19zvm27EsM0kfv70s9lKr5FdA5VLqJ7DlPP
gVt68GvMcVDU/k+kul4u34/eF44GxJu6i4x/ukcJNo3hIBpnU4Vrf7h15cOC7nFa
T8hjIDPgM/WZEdsun3UX/NqfIA9DPMRx13vl5bBHMvehTXxMUDWHsHcmoHZYgrrS
BTPhln+NPy6mHSWIjccHrA2h18HLiJOqiZ/hmAOU4pxjQjNzsE09xaxksHFr9vHt
epQN8kCawOMCAwEAAaOCAwswggMHMB0GA1UdDgQWBBT9Ftg9YnZSU4Z5GE25RuXb
qc3UozAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNGY2NTE3NS1lNWM0
LTQ3M2UtOWU3Zi0xMzUwODE3YTJiNjEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjRmNjUxNzUtZTVjNC00
NzNlLTllN2YtMTM1MDgxN2EyYjYxLzIxMmVlZjZkNWM4MTM0ODFhYmQ0Yjc1ZjMw
YjllZjU2NGVkMTExYWIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAr4MkDAPBAIAAjAJAwcAKAEAxAAq
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfLzANBgkqhkiG9w0BAQsFAAOCAQEA
kFuN9mehopKw0kYel/VZcnXoZ40tmWjNTszQiPW+o5tCNoBUtKVSNpvdjzh+z9Ty
1BOoTIGB0623wCMTrHs8W/W6+OJIggtKOSHkq5OSHVIW4g3Sew9s2cOjSJCAVOWu
WKDlBySUFU0O4IyqMwidVvW0ZTnrcYfeInLXv0+ibN6Yx/IrQYMZbkbWtWtwKQje
QpHYbKedV8Lzn3MVv305zEfKW8roF/6S/nOuRrAry9GDpldFgfsElT+vhQ8I2U1o
J6+23ShjuD2/iWhRhcRC3uz03CBdMz0i38rRbjDsdJct2OozQb/743K4rHitz14M
oFIaJDg95MzFqwvO2/X+PA==
-----END CERTIFICATE-----