Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28420f8200dcb670f177aab28b17c8fceb40aee7.cer
File:                     28420f8200dcb670f177aab28b17c8fceb40aee7.cer (raw, json)
Hash identifier:          ACFH7sefFKhfG6YckPI0YoOp240cQKAVv6Laq9EPrXY=
Subject key identifier:   B5:A1:93:00:83:69:61:BB:24:FA:2B:2D:37:7F:60:84:B5:80:69:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D71075
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/28420f8200dcb670f177aab28b17c8fceb40aee7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Apr 2020 17:08:40 +0000
Certificate not after:    Wed 13 Dec 2023 00:27:02 +0000
Subordinate resources:    AS: 265623
                          IP: 201.46.92.0/22
                          IP: 2806:3a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14094453 (0xd71075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 17:08:40 2020 GMT
            Not After : Dec 13 00:27:02 2023 GMT
        Subject: CN=28420f8200dcb670f177aab28b17c8fceb40aee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:32:a2:34:94:4e:10:8d:fa:50:eb:33:d6:
                    8a:d2:7e:3f:3b:61:ec:b6:eb:02:10:c3:63:83:21:
                    57:4a:7f:d4:93:d0:63:ed:74:16:1d:11:93:d7:54:
                    f2:04:db:f3:01:94:54:3f:cc:32:fb:6c:67:ac:0e:
                    aa:3e:6e:79:a2:ee:84:0d:3a:c5:18:ca:34:77:72:
                    f0:88:75:1c:46:77:90:34:24:82:79:0e:35:77:95:
                    51:c8:07:db:bf:9f:a7:88:e4:eb:12:a1:8e:a2:58:
                    65:02:ef:d9:2e:88:c9:85:05:59:01:62:40:cb:0f:
                    06:89:69:44:88:c8:99:f9:df:6b:5f:52:8a:9c:2d:
                    d1:6d:52:f0:31:cf:3d:be:bc:18:14:f5:3b:b7:84:
                    26:9d:15:a7:d4:00:c9:d4:92:a8:72:ae:6b:04:4f:
                    41:22:db:06:07:a7:50:54:2c:e5:04:c8:4d:3e:fb:
                    d1:35:77:04:05:6a:aa:1c:c7:ac:c2:1f:c1:dd:0c:
                    9d:27:d9:c4:f6:3f:a3:7f:1b:26:d0:c2:7b:03:fa:
                    c3:b0:21:b3:cc:ed:73:c7:f5:ac:85:eb:d4:0a:6c:
                    39:2c:2c:84:99:bc:16:0f:69:3c:80:76:88:17:80:
                    bd:f4:dd:32:24:e6:24:e5:5c:dd:43:24:ec:42:7e:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A1:93:00:83:69:61:BB:24:FA:2B:2D:37:7F:60:84:B5:80:69:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/28420f8200dcb670f177aab28b17c8fceb40aee7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.92.0/22
                IPv6:
                  2806:3a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265623

    Signature Algorithm: sha256WithRSAEncryption
         c5:72:28:54:4f:fb:9c:5c:bc:6f:75:33:d2:c2:6f:a1:39:77:
         e3:45:12:8d:4e:1b:4d:0b:8c:60:2c:55:c2:62:1f:ba:f0:d0:
         f9:84:0e:fd:d5:d3:9a:a1:3f:a6:a2:cd:c6:1c:1d:8b:38:a2:
         ee:e7:47:44:1b:d6:bb:60:94:e1:6e:a2:43:c0:d8:68:66:8d:
         fa:d8:a1:49:86:d1:f7:f3:9d:3c:14:52:7f:f3:ba:5d:9e:89:
         b0:7f:f4:5b:40:32:e4:98:8e:cd:1a:a6:26:ca:84:d9:0d:a0:
         fb:72:a8:75:50:02:8e:76:94:69:d2:43:b2:9f:e2:b1:ac:d9:
         ce:6c:58:ad:8a:e4:c8:2f:c0:8b:5e:a7:4b:30:88:27:31:cc:
         37:c0:e9:96:e7:d6:b1:07:b4:1c:6d:98:39:a2:14:f7:a2:a0:
         37:02:c5:a4:88:cd:ac:3e:5d:89:2d:1c:aa:5e:e2:41:ee:28:
         73:f1:1c:06:73:b6:84:27:e0:a8:63:db:79:8c:58:06:7f:fe:
         fa:26:1d:15:5f:3d:8f:bd:39:4d:2a:d3:8f:78:ee:3b:22:ed:
         33:96:e7:6e:a7:a8:4c:bf:ce:7c:e7:4c:87:83:d3:ec:e7:17:
         8a:e9:a8:d5:68:81:39:c1:1a:e2:73:a6:de:ff:7d:18:a7:69:
         e1:c8:0d:bc
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANcQdTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDQyMDE3MDg0MFoXDTIzMTIxMzAwMjcw
MlowMzExMC8GA1UEAxMoMjg0MjBmODIwMGRjYjY3MGYxNzdhYWIyOGIxN2M4ZmNl
YjQwYWVlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxjMqI0lE4Q
jfpQ6zPWitJ+Pzth7LbrAhDDY4MhV0p/1JPQY+10Fh0Rk9dU8gTb8wGUVD/MMvts
Z6wOqj5ueaLuhA06xRjKNHdy8Ih1HEZ3kDQkgnkONXeVUcgH27+fp4jk6xKhjqJY
ZQLv2S6IyYUFWQFiQMsPBolpRIjImfnfa19Sipwt0W1S8DHPPb68GBT1O7eEJp0V
p9QAydSSqHKuawRPQSLbBgenUFQs5QTITT770TV3BAVqqhzHrMIfwd0MnSfZxPY/
o38bJtDCewP6w7Ahs8ztc8f1rIXr1ApsOSwshJm8Fg9pPIB2iBeAvfTdMiTmJOVc
3UMk7EJ+qPECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS1oZMAg2lhuyT6Ky03f2CE
tYBpVzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81ZTY5NmVhYi01YmZh
LTQ3YWItOWVlZi04YmVjMzkzYzRlNjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWU2OTZlYWItNWJmYS00
N2FiLTllZWYtOGJlYzM5M2M0ZTYwLzI4NDIwZjgyMDBkY2I2NzBmMTc3YWFiMjhi
MTdjOGZjZWI0MGFlZTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAskuXDANBAIAAjAHAwUAKAYDpDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDZcwDQYJKoZIhvcNAQELBQADggEBAMVy
KFRP+5xcvG91M9LCb6E5d+NFEo1OG00LjGAsVcJiH7rw0PmEDv3V05qhP6aizcYc
HYs4ou7nR0Qb1rtglOFuokPA2GhmjfrYoUmG0ffznTwUUn/zul2eibB/9FtAMuSY
js0apibKhNkNoPtyqHVQAo52lGnSQ7Kf4rGs2c5sWK2K5MgvwItep0swiCcxzDfA
6Zbn1rEHtBxtmDmiFPeioDcCxaSIzaw+XYktHKpe4kHuKHPxHAZztoQn4Khj23mM
WAZ//vomHRVfPY+9OU0q04947jsi7TOW526nqEy/znznTIeD0+znF4rpqNVogTnB
GuJzpt7/fRinaeHIDbw=
-----END CERTIFICATE-----