Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
File:                     2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer (raw, json)
Hash identifier:          q+B+4WaKdYE97ADi41tKDZPSx0MJS8I1M4dXyAEhmOw=
Subject key identifier:   54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7F08A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Apr 2020 15:40:31 +0000
Certificate not after:    Thu 03 Oct 2024 21:19:52 +0000
Subordinate resources:    AS: 262253
                          IP: 181.224.224.0/19
                          IP: 2803:2500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16248970 (0xf7f08a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 15:40:31 2020 GMT
            Not After : Oct  3 21:19:52 2024 GMT
        Subject: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:92:67:2f:2f:58:0e:1e:f8:6e:27:98:70:
                    c1:2d:1c:db:c5:55:e7:b8:fa:37:a4:ca:61:0a:d4:
                    e5:76:11:e5:18:e9:0c:fc:27:ef:39:d4:c9:b1:75:
                    fa:3b:3e:d1:75:dd:87:b7:6f:6b:a6:cd:c5:60:91:
                    c2:5e:10:ea:0e:d5:0e:08:b3:8a:90:1d:79:ea:97:
                    35:d6:d1:ac:d7:fd:11:e6:92:a2:2e:c3:35:2b:e2:
                    04:3f:ed:75:94:22:6a:ea:d6:70:94:01:9c:54:45:
                    23:d4:f3:a2:14:a2:6e:48:38:4a:68:e6:79:a5:9d:
                    5d:d0:8b:15:f4:c9:29:37:7b:22:6c:97:b3:3a:c9:
                    b8:51:35:63:0e:9a:46:ce:9c:13:76:36:33:73:80:
                    fd:aa:ec:e0:f0:17:ae:c7:e5:58:71:a7:70:d4:09:
                    fa:0e:04:df:71:ec:a9:dc:f1:0f:de:29:aa:fa:65:
                    b8:70:9e:45:f8:75:a6:cc:ed:b7:19:99:52:4a:62:
                    a9:45:9e:6d:74:d2:91:a7:b5:19:9b:9a:a3:e4:26:
                    7e:5f:c4:2b:96:25:bf:b4:c7:75:27:da:cd:d4:21:
                    50:84:a5:2e:7e:c4:fc:22:27:30:b3:94:6c:d6:df:
                    54:16:08:3e:04:20:9d:02:09:1d:d3:dd:4e:bc:81:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.224.0/19
                IPv6:
                  2803:2500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262253

    Signature Algorithm: sha256WithRSAEncryption
         ae:05:88:ca:3f:c9:0a:66:02:83:47:02:16:87:be:6a:f5:28:
         b7:a1:a5:d9:d3:1d:e8:21:de:7a:57:17:c3:82:0a:e1:d5:50:
         7e:d2:a8:ee:c0:78:0b:3e:ba:de:9e:c0:73:2f:b3:a6:6e:2d:
         3b:94:8b:c5:51:c2:6a:2e:ee:da:bb:cd:0f:17:31:73:49:7b:
         9d:c5:1a:30:77:94:56:58:ce:ac:2a:30:10:ee:5e:af:3a:16:
         5d:16:8b:5d:f8:42:17:a5:3f:68:f5:24:b5:98:8f:f6:40:2a:
         4d:b2:12:20:83:2f:57:cf:b6:1d:b2:b8:19:a4:54:b6:92:5f:
         33:d4:ab:b4:7e:08:2f:2c:23:a4:fc:77:f0:4b:6b:9f:1f:81:
         fa:9e:50:92:1f:c9:1b:5e:52:3c:e3:29:0d:62:40:e2:84:9c:
         d3:22:df:e9:4c:a9:79:32:d7:76:a1:bc:b9:72:77:03:c0:a6:
         5a:1a:d5:f3:a6:a9:84:47:59:bd:55:97:12:d5:11:ee:d5:35:
         af:e6:1a:2c:73:f9:1d:8a:a8:83:0e:f1:15:ad:d6:17:e1:33:
         e3:99:4d:55:dc:f8:29:3a:6b:7e:0d:93:12:7c:82:07:96:49:
         1c:88:e4:cc:47:75:59:5b:b5:14:a2:38:50:5a:38:af:f2:08:
         8f:6d:49:10
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPfwijANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDQxMDE1NDAzMVoXDTI0MTAwMzIxMTk1
MlowMzExMC8GA1UEAxMoMmY1M2Y4YmQ3YjNiYmVlOWU0OTQwMGQ5MTNlMzdjMmY2
ZWIxMGJkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIBtkmcvL1gO
HvhuJ5hwwS0c28VV57j6N6TKYQrU5XYR5RjpDPwn7znUybF1+js+0XXdh7dva6bN
xWCRwl4Q6g7VDgizipAdeeqXNdbRrNf9EeaSoi7DNSviBD/tdZQiaurWcJQBnFRF
I9TzohSibkg4SmjmeaWdXdCLFfTJKTd7ImyXszrJuFE1Yw6aRs6cE3Y2M3OA/ars
4PAXrsflWHGncNQJ+g4E33HsqdzxD94pqvpluHCeRfh1pszttxmZUkpiqUWebXTS
kae1GZuao+Qmfl/EK5Ylv7THdSfazdQhUISlLn7E/CInMLOUbNbfVBYIPgQgnQIJ
HdPdTryBbRUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRUhqBwiuqPg95h5ctBx4L/
Hm6qMjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kMGZjNmNkYS1lNTVl
LTQ3NTMtOWMxYi0zZDY1ZmExMmMwMDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDBmYzZjZGEtZTU1ZS00
NzUzLTljMWItM2Q2NWZhMTJjMDA5LzJmNTNmOGJkN2IzYmJlZTllNDk0MDBkOTEz
ZTM3YzJmNmViMTBiZGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBbXg4DANBAIAAjAHAwUAKAMlADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAG0wDQYJKoZIhvcNAQELBQADggEBAK4F
iMo/yQpmAoNHAhaHvmr1KLehpdnTHegh3npXF8OCCuHVUH7SqO7AeAs+ut6ewHMv
s6ZuLTuUi8VRwmou7tq7zQ8XMXNJe53FGjB3lFZYzqwqMBDuXq86Fl0Wi134Qhel
P2j1JLWYj/ZAKk2yEiCDL1fPth2yuBmkVLaSXzPUq7R+CC8sI6T8d/BLa58fgfqe
UJIfyRteUjzjKQ1iQOKEnNMi3+lMqXky13ahvLlydwPAploa1fOmqYRHWb1VlxLV
Ee7VNa/mGixz+R2KqIMO8RWt1hfhM+OZTVXc+Ck6a34NkxJ8ggeWSRyI5MxHdVlb
tRSiOFBaOK/yCI9tSRA=
-----END CERTIFICATE-----