Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
File:                     2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer (raw, json)
Hash identifier:          K4UvhroTU8KGL7v3X62bdeY4W56NkHfFpSjMRSIt3SQ=
Subject key identifier:   E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F51E00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Sep 2019 18:07:13 +0000
Certificate not after:    Sat 14 Sep 2024 20:41:31 +0000
Subordinate resources:    AS: 263684
                          IP: 170.244.56.0/22
                          IP: 200.115.24.0/21
                          IP: 2803:e900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16064000 (0xf51e00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 18:07:13 2019 GMT
            Not After : Sep 14 20:41:31 2024 GMT
        Subject: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:c6:98:0c:f8:b4:7d:80:ac:9e:d3:48:e9:
                    3f:09:87:0c:67:22:20:d7:e3:5b:3c:69:bd:c7:29:
                    88:f0:5f:c1:98:eb:61:bf:e3:0d:d1:91:38:7e:c5:
                    aa:27:75:e5:c6:42:d6:5a:3c:23:52:56:a3:1a:b3:
                    48:32:89:c7:5b:1f:11:85:c4:66:ea:e2:59:2d:55:
                    6a:a9:d2:7a:81:b7:c2:e5:ef:bf:4f:a1:97:44:72:
                    e5:b1:07:ae:08:f7:25:36:6d:ea:5c:a9:e4:a4:ba:
                    be:b9:7d:c2:06:3b:ec:6f:71:41:14:42:c8:87:fa:
                    5e:55:d6:9a:9b:27:77:7a:f8:e0:1e:86:b3:a0:18:
                    ca:4a:71:3d:2e:bd:60:3c:53:29:c9:25:6d:6e:63:
                    d4:fc:c3:d2:ef:c8:5a:b8:82:fa:9b:83:16:38:38:
                    ff:be:ce:77:0d:5f:c1:7c:a9:5d:34:63:26:59:33:
                    ff:03:40:0f:fc:09:7c:cb:ac:33:0d:89:a6:de:92:
                    16:6d:6c:bc:e9:57:a8:31:60:59:0f:35:45:66:4c:
                    c3:2f:7a:d1:e0:67:3f:e4:46:39:31:9c:d5:cc:db:
                    bc:9b:c0:f4:59:cc:2f:a4:72:b0:52:df:10:ab:93:
                    bb:b6:fe:cc:f0:f1:9c:75:5f:70:8e:2b:8c:0f:5e:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.56.0/22
                  200.115.24.0/21
                IPv6:
                  2803:e900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263684

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:14:f8:22:2d:fc:2e:4b:8d:8d:3a:c1:71:77:e2:43:eb:
         94:4a:2d:a4:e7:b0:13:28:90:1d:dc:ab:b4:6f:d9:79:e5:22:
         48:06:b1:ec:e5:a3:99:63:87:dd:4f:17:c7:89:62:0c:e0:6b:
         f4:a8:d5:4e:49:4c:5a:2c:1f:cb:07:5b:a9:7e:c3:e9:7d:bb:
         9b:5c:e0:b1:ae:f8:ad:5b:fc:3f:45:80:ce:4b:33:a5:49:2a:
         8f:fc:bb:17:20:d2:e4:95:59:93:8d:04:4c:05:54:ef:b1:1c:
         8a:1b:77:bb:ee:e4:86:bd:c4:e6:47:5e:3b:5a:22:a8:17:92:
         54:37:d1:20:f0:ff:fc:ec:27:51:fa:d4:b6:ed:5b:5e:76:8d:
         e0:3b:c9:53:b8:23:24:d1:38:86:ba:db:6b:bc:66:4f:6c:ea:
         10:53:51:d6:b5:cf:c3:78:3c:83:0d:50:50:fe:5f:0f:cb:81:
         f6:c1:fb:68:cc:a4:59:1b:db:88:f7:b8:99:3c:ba:99:32:89:
         06:39:ba:61:02:81:52:99:a2:47:b2:d9:f0:c9:18:bd:78:19:
         c7:c7:df:08:9a:aa:31:99:37:52:b6:ff:9d:c4:ba:7c:fb:20:
         2c:09:b2:5d:85:bb:fb:83:69:47:dd:27:34:5b:a8:43:dd:02:
         30:68:b0:26
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAPUeADANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDkxOTE4MDcxM1oXDTI0MDkxNDIwNDEz
MVowMzExMC8GA1UEAxMoMmZmZmMxZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3
MmQ0Yzg4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbDxpgM+LR9
gKye00jpPwmHDGciINfjWzxpvccpiPBfwZjrYb/jDdGROH7Fqid15cZC1lo8I1JW
oxqzSDKJx1sfEYXEZuriWS1VaqnSeoG3wuXvv0+hl0Ry5bEHrgj3JTZt6lyp5KS6
vrl9wgY77G9xQRRCyIf6XlXWmpsnd3r44B6Gs6AYykpxPS69YDxTKcklbW5j1PzD
0u/IWriC+puDFjg4/77Odw1fwXypXTRjJlkz/wNAD/wJfMusMw2Jpt6SFm1svOlX
qDFgWQ81RWZMwy960eBnP+RGOTGc1czbvJvA9FnML6RysFLfEKuTu7b+zPDxnHVf
cI4rjA9eDikCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTisYCMfHr/wIwx8+dDlMWs
iQSmqDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iMjQ3NmE0OC0zZGM5
LTQ3MzYtYmY5Zi1kNzYxYmFmNDM3YzIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjI0NzZhNDgtM2RjOS00
NzM2LWJmOWYtZDc2MWJhZjQzN2MyLzJmZmZjMWUwYmI2ZDVmZWE4NTI5YzRmZTY1
YmRhNzZmNzJkNGM4OGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqr0OAMEA8hzGDANBAIAAjAHAwUA
KAPpADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBgQwDQYJKoZIhvcNAQELBQAD
ggEBAE+NFPgiLfwuS42NOsFxd+JD65RKLaTnsBMokB3cq7Rv2XnlIkgGsezlo5lj
h91PF8eJYgzga/So1U5JTFosH8sHW6l+w+l9u5tc4LGu+K1b/D9FgM5LM6VJKo/8
uxcg0uSVWZONBEwFVO+xHIobd7vu5Ia9xOZHXjtaIqgXklQ30SDw//zsJ1H61Lbt
W152jeA7yVO4IyTROIa622u8Zk9s6hBTUda1z8N4PIMNUFD+Xw/LgfbB+2jMpFkb
24j3uJk8upkyiQY5umECgVKZokey2fDJGL14GcfH3wiaqjGZN1K2/53Eunz7ICwJ
sl2Fu/uDaUfdJzRbqEPdAjBosCY=
-----END CERTIFICATE-----