Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.cer
File:                     2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.cer (raw, json)
Hash identifier:          3JVhG7ZqkAy861OyajDOGV+DJlS8fZWRGPV8VptrTr0=
Subject key identifier:   7B:C4:F2:0D:80:38:D4:E5:A2:EE:C8:CE:0C:C6:B5:35:6A:7A:5D:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E59A67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 Jul 2020 23:11:13 +0000
Certificate not after:    Wed 15 May 2024 15:14:16 +0000
Subordinate resources:    AS: 270056
                          IP: 187.103.20.0/22
                          IP: 2803:bde0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15047271 (0xe59a67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 16 23:11:13 2020 GMT
            Not After : May 15 15:14:16 2024 GMT
        Subject: CN=2f1b97ea096d1f9c82e02b4b2462c0ce0d244058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:b2:63:12:47:65:86:59:36:2c:e5:94:34:
                    11:bc:a2:c6:b5:39:d8:2f:5e:5d:41:4b:f5:50:c1:
                    bb:d1:40:f3:bb:be:a2:f0:f7:f4:99:f4:dd:6c:f3:
                    d8:ae:88:04:9b:de:85:56:a4:b2:6b:22:52:b7:56:
                    22:47:d7:4f:b1:57:0d:bd:94:56:2a:f2:ff:d2:55:
                    28:50:52:0c:16:4a:77:50:ca:a9:e2:03:02:d3:b3:
                    9a:36:28:af:f0:6f:a5:dc:d2:28:13:6d:a8:a6:d2:
                    0d:00:4c:6b:d8:63:5d:6f:bc:c1:00:f7:d0:4e:49:
                    8e:b0:6f:2f:b5:d0:1b:be:bc:6b:36:8d:65:5f:d9:
                    fa:a4:11:bd:8c:68:63:b8:db:33:f9:0c:29:4f:dd:
                    ad:86:44:b0:71:24:02:16:9c:fd:19:2f:08:af:0e:
                    85:99:1f:b7:c0:ea:ff:7a:c8:9b:8e:f9:6b:6f:3f:
                    25:47:fc:35:4d:62:74:eb:0b:b2:9a:a5:81:97:c1:
                    d3:46:51:28:fc:98:20:83:b7:77:50:23:8c:80:70:
                    01:cd:43:b5:be:51:77:de:f8:3b:b0:b4:de:f2:df:
                    0f:78:59:aa:ec:c8:e7:22:c5:49:f9:6d:bc:ed:5c:
                    51:c0:6c:cd:6f:ef:d0:94:54:ff:44:a8:da:ed:6e:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:F2:0D:80:38:D4:E5:A2:EE:C8:CE:0C:C6:B5:35:6A:7A:5D:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.20.0/22
                IPv6:
                  2803:bde0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270056

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:c5:cd:d0:d8:68:71:84:8e:21:a8:0c:bf:da:2e:c8:7d:
         26:31:b7:0d:de:77:4a:06:9d:8a:f5:e1:02:97:19:39:0e:70:
         90:52:2e:eb:2a:18:1c:c7:ef:11:89:70:bd:c3:f1:7a:5e:c1:
         27:ee:02:cd:e3:2a:78:1f:fe:ac:d8:b6:3e:94:f9:d2:1f:5b:
         29:d4:cf:71:e4:c8:8c:02:49:9c:55:90:39:42:41:1d:18:da:
         a6:76:1c:a0:a0:d7:87:de:40:9b:98:9a:c4:d2:54:8a:a2:ff:
         e9:6e:8a:25:f1:5b:88:49:0c:a6:fc:cd:33:8b:aa:52:c2:e0:
         ba:45:15:60:6a:cb:e2:db:02:37:48:07:69:30:54:b5:5a:3a:
         f7:eb:1c:4d:f0:98:3d:55:20:fe:a3:b6:1f:15:89:48:df:29:
         a6:7f:07:d1:17:4a:41:c6:46:01:f2:bc:b8:20:fa:94:06:ab:
         27:d6:ea:13:51:7c:6f:e1:3d:5a:a4:7d:75:12:73:e5:80:93:
         e6:6e:76:f7:5c:37:a6:7b:4a:7b:63:dc:02:d0:35:b0:57:74:
         27:26:b2:45:19:8a:97:05:2d:fb:70:07:7e:c6:5b:05:a3:e8:
         7b:ce:37:cd:e0:54:12:bf:fe:9e:af:28:e4:e3:d1:69:02:f6:
         8f:f3:fb:76
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOWaZzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDcxNjIzMTExM1oXDTI0MDUxNTE1MTQx
NlowMzExMC8GA1UEAxMoMmYxYjk3ZWEwOTZkMWY5YzgyZTAyYjRiMjQ2MmMwY2Uw
ZDI0NDA1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJe0smMSR2WG
WTYs5ZQ0EbyixrU52C9eXUFL9VDBu9FA87u+ovD39Jn03Wzz2K6IBJvehVaksmsi
UrdWIkfXT7FXDb2UViry/9JVKFBSDBZKd1DKqeIDAtOzmjYor/BvpdzSKBNtqKbS
DQBMa9hjXW+8wQD30E5JjrBvL7XQG768azaNZV/Z+qQRvYxoY7jbM/kMKU/drYZE
sHEkAhac/RkvCK8OhZkft8Dq/3rIm475a28/JUf8NU1idOsLspqlgZfB00ZRKPyY
IIO3d1AjjIBwAc1Dtb5Rd974O7C03vLfD3hZquzI5yLFSfltvO1cUcBszW/v0JRU
/0So2u1uRrUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBR7xPINgDjU5aLuyM4MxrU1
anpdGDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NDJhMzUwYy02MGY3
LTQ1N2ItYjQzNi0wYjE3NmIwNWFiMDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjQyYTM1MGMtNjBmNy00
NTdiLWI0MzYtMGIxNzZiMDVhYjAxLzJmMWI5N2VhMDk2ZDFmOWM4MmUwMmI0YjI0
NjJjMGNlMGQyNDQwNTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArtnFDANBAIAAjAHAwUAKAO94DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHugwDQYJKoZIhvcNAQELBQADggEBAJ4p
xc3Q2GhxhI4hqAy/2i7IfSYxtw3ed0oGnYr14QKXGTkOcJBSLusqGBzH7xGJcL3D
8XpewSfuAs3jKngf/qzYtj6U+dIfWynUz3HkyIwCSZxVkDlCQR0Y2qZ2HKCg14fe
QJuYmsTSVIqi/+luiiXxW4hJDKb8zTOLqlLC4LpFFWBqy+LbAjdIB2kwVLVaOvfr
HE3wmD1VIP6jth8ViUjfKaZ/B9EXSkHGRgHyvLgg+pQGqyfW6hNRfG/hPVqkfXUS
c+WAk+ZudvdcN6Z7Sntj3ALQNbBXdCcmskUZipcFLftwB37GWwWj6HvON83gVBK/
/p6vKOTj0WkC9o/z+3Y=
-----END CERTIFICATE-----