Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/348e4be7878a9fdd1d422e44bc7ce5502f14ee61.cer
File:                     348e4be7878a9fdd1d422e44bc7ce5502f14ee61.cer (raw, json)
Hash identifier:          wS4FZ7fp19YEPbtoJN9SYxY+cQTgXl4NHc4laG26P0k=
Subject key identifier:   5E:B8:96:D1:B9:D4:1F:A0:87:37:5A:FB:2D:E6:96:48:C4:45:F9:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCCBE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/348e4be7878a9fdd1d422e44bc7ce5502f14ee61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Jan 2020 16:51:35 +0000
Certificate not after:    Wed 13 Nov 2024 17:12:52 +0000
Subordinate resources:    AS: 269904
                          IP: 2801:172::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16567268 (0xfccbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 20 16:51:35 2020 GMT
            Not After : Nov 13 17:12:52 2024 GMT
        Subject: CN=348e4be7878a9fdd1d422e44bc7ce5502f14ee61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:98:75:92:88:0c:48:ce:ef:bf:d9:4c:ae:
                    49:3f:98:2d:43:35:28:51:64:6d:ca:d8:b7:56:7c:
                    fd:8f:1f:dd:30:aa:f2:b2:e7:e9:a3:23:fc:75:92:
                    ad:2b:7a:06:83:77:22:96:6a:fe:51:69:f0:68:ea:
                    3f:91:a4:17:5b:14:0a:90:31:7a:bc:5d:28:4d:bf:
                    f0:2f:a7:6c:19:24:c6:20:d2:a1:e5:01:60:64:59:
                    81:27:43:4f:f6:15:4c:09:42:6c:dd:bb:9f:bf:12:
                    ee:76:41:bf:b6:4b:b2:0b:e2:7c:c9:12:7e:c6:9c:
                    f4:47:ab:68:9f:45:fd:1a:50:53:ba:7c:99:fa:35:
                    70:99:40:3e:92:be:0d:31:a4:ff:94:fb:f8:96:0e:
                    0d:6f:d6:a9:25:39:a0:c5:79:71:03:41:e7:f7:f3:
                    0b:6b:24:a8:42:f1:54:c9:0d:69:45:84:ee:61:13:
                    3a:4c:20:7e:20:0b:dc:ed:3a:b3:95:9c:7a:ab:c9:
                    cf:91:65:1e:02:e6:d3:9c:d2:d3:31:4a:11:78:c5:
                    42:fe:1a:85:32:ec:b7:a7:7d:ae:c9:dd:c8:8b:02:
                    cc:d6:b5:20:50:3d:c7:6b:bb:9a:e6:40:d0:ae:b0:
                    87:b4:8e:97:32:ec:6c:17:c6:78:94:7c:13:4c:5f:
                    b2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B8:96:D1:B9:D4:1F:A0:87:37:5A:FB:2D:E6:96:48:C4:45:F9:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/348e4be7878a9fdd1d422e44bc7ce5502f14ee61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:172::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269904

    Signature Algorithm: sha256WithRSAEncryption
         53:35:49:11:f4:1f:92:8b:e4:7e:50:e8:89:10:51:bc:89:6e:
         0a:fc:1a:47:5b:8a:7c:51:3a:6c:97:d1:7f:fa:8e:ec:57:63:
         a1:0c:b8:0f:51:83:43:27:0a:bb:28:81:23:8d:80:e7:fb:3c:
         78:5d:37:f7:61:c4:cc:93:dc:28:fa:65:d9:91:90:86:9f:37:
         77:ed:d6:74:db:b0:6f:53:a0:e8:53:97:30:6f:d7:90:ea:67:
         85:10:3d:a7:d3:04:4f:2e:f3:21:a3:0a:cc:99:25:e3:0b:9b:
         af:a6:4d:76:ef:19:97:b0:a4:93:9c:02:cb:f0:08:ba:7f:d4:
         2b:cb:41:18:ef:bf:cc:fb:17:69:63:af:02:d5:8e:57:93:43:
         3e:a3:1d:21:bb:ad:37:ba:f5:f8:ea:6f:cc:ef:17:c8:dd:58:
         59:96:f2:7f:f1:75:bf:fa:bf:c8:ac:68:0e:0d:76:4c:d0:46:
         2f:fa:2b:82:5a:f7:29:c6:25:c0:6c:f9:40:02:d5:fd:1e:fb:
         49:17:83:12:49:ad:83:6d:75:30:6a:bf:98:a5:18:b3:90:59:
         a1:a3:3c:35:bc:c9:7c:d0:7b:a6:14:07:83:04:ae:db:7d:5b:
         8c:ec:31:80:34:c1:91:96:5e:47:4a:15:29:2a:98:a8:c1:ea:
         44:c1:30:d3
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAPzL5DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDEyMDE2NTEzNVoXDTI0MTExMzE3MTI1
MlowMzExMC8GA1UEAxMoMzQ4ZTRiZTc4NzhhOWZkZDFkNDIyZTQ0YmM3Y2U1NTAy
ZjE0ZWU2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeFmHWSiAxI
zu+/2UyuST+YLUM1KFFkbcrYt1Z8/Y8f3TCq8rLn6aMj/HWSrSt6BoN3IpZq/lFp
8GjqP5GkF1sUCpAxerxdKE2/8C+nbBkkxiDSoeUBYGRZgSdDT/YVTAlCbN27n78S
7nZBv7ZLsgvifMkSfsac9EeraJ9F/RpQU7p8mfo1cJlAPpK+DTGk/5T7+JYODW/W
qSU5oMV5cQNB5/fzC2skqELxVMkNaUWE7mETOkwgfiAL3O06s5WceqvJz5FlHgLm
05zS0zFKEXjFQv4ahTLst6d9rsndyIsCzNa1IFA9x2u7muZA0K6wh7SOlzLsbBfG
eJR8E0xfsg0CAwEAAaOCAv0wggL5MB0GA1UdDgQWBBReuJbRudQfoIc3Wvst5pZI
xEX5RjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNjZhMjFmNS0wMDg2
LTQ1ZGUtYTkzMy0xYjhhODBlZGExMTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzY2YTIxZjUtMDA4Ni00
NWRlLWE5MzMtMWI4YTgwZWRhMTE5LzM0OGU0YmU3ODc4YTlmZGQxZDQyMmU0NGJj
N2NlNTUwMmYxNGVlNjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAXIAADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEHlAwDQYJKoZIhvcNAQELBQADggEBAFM1SRH0H5KL5H5Q6IkQ
UbyJbgr8GkdbinxROmyX0X/6juxXY6EMuA9Rg0MnCrsogSONgOf7PHhdN/dhxMyT
3Cj6ZdmRkIafN3ft1nTbsG9ToOhTlzBv15DqZ4UQPafTBE8u8yGjCsyZJeMLm6+m
TXbvGZewpJOcAsvwCLp/1CvLQRjvv8z7F2ljrwLVjleTQz6jHSG7rTe69fjqb8zv
F8jdWFmW8n/xdb/6v8isaA4NdkzQRi/6K4Ja9ynGJcBs+UAC1f0e+0kXgxJJrYNt
dTBqv5ilGLOQWaGjPDW8yXzQe6YUB4MErtt9W4zsMYA0wZGWXkdKFSkqmKjB6kTB
MNM=
-----END CERTIFICATE-----