Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
File:                     3df0f837110e45a0ac8477d5992bac317ed138f1.cer (raw, json)
Hash identifier:          WTfXHu+UmSC8TZ1F0NdarUgKx84qavbX31hefR6RNdk=
Subject key identifier:   59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0D1AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/3df0f837110e45a0ac8477d5992bac317ed138f1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2019 20:49:01 +0000
Certificate not after:    Sun 07 Apr 2024 16:28:25 +0000
Subordinate resources:    AS: 262240
                          IP: 190.110.96.0/20
                          IP: 2803:1200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14733741 (0xe0d1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 20:49:01 2019 GMT
            Not After : Apr  7 16:28:25 2024 GMT
        Subject: CN=3df0f837110e45a0ac8477d5992bac317ed138f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:90:56:62:5a:f0:ea:8c:69:00:31:db:a6:
                    be:de:9b:d7:2f:de:77:d9:8f:1f:25:f2:03:d1:54:
                    36:50:d7:b6:c9:33:3c:fb:88:ed:17:47:47:ac:01:
                    a1:7d:90:c8:33:0d:16:f7:d4:49:8b:3f:45:bf:9e:
                    1c:ff:75:86:94:38:76:9d:0e:58:37:4b:5a:dd:f5:
                    bc:45:b6:0c:06:a0:b3:4b:7c:6f:29:d1:85:5a:0b:
                    bc:26:83:f3:55:b2:0d:f8:25:af:13:6f:31:b1:ce:
                    fd:10:10:9a:05:9b:c0:77:d3:60:6d:f5:c3:5b:65:
                    48:b2:51:ea:01:ab:cb:fb:9e:62:f7:59:0c:9f:5f:
                    4d:c7:1b:f4:ee:b9:61:c9:1f:6f:9c:65:d4:c8:54:
                    55:0e:41:72:86:98:5b:9a:8f:46:92:22:12:04:3d:
                    77:53:48:33:8a:e7:66:38:e2:57:55:6e:93:f1:9a:
                    a2:4e:86:e2:18:bc:e8:ee:b9:29:82:6b:fc:44:75:
                    43:11:4b:68:c3:30:c2:2b:fb:03:c5:cc:d6:81:e1:
                    e7:d7:8f:04:c8:ca:8f:93:b5:bf:0c:95:cb:73:83:
                    18:d1:27:b1:e9:69:4b:8d:8a:4d:e5:c4:c0:1d:51:
                    66:eb:8f:1c:fc:60:66:58:e2:e7:5b:4d:e1:51:32:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/3df0f837110e45a0ac8477d5992bac317ed138f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.96.0/20
                IPv6:
                  2803:1200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262240

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:ee:58:d0:bf:64:79:27:fa:ca:f3:81:b5:e5:a5:55:13:
         b2:b7:59:a0:cc:0f:f1:63:89:fd:6c:2c:f7:72:57:0b:3b:21:
         74:cf:c0:0c:a6:22:46:aa:ee:2b:95:1f:34:6a:34:48:00:fc:
         19:fc:41:d4:14:d8:59:d4:f9:9c:f3:90:f5:18:18:65:0a:0b:
         77:a3:1b:7c:37:68:8d:c0:1e:49:93:54:5c:af:92:34:4c:e1:
         ab:61:c0:ed:6a:f4:4c:77:dc:dc:50:e8:dc:b0:68:8e:f8:92:
         c5:5c:0a:7e:ee:8d:e6:1c:f3:5d:8e:02:28:ad:a2:86:5f:57:
         9f:3f:d2:43:2f:c8:c3:ac:60:be:23:91:0f:73:31:dd:3f:1d:
         e5:8c:c4:d2:a5:b5:39:37:3e:b5:07:de:0b:4a:44:3f:06:6c:
         19:4e:fb:32:f8:74:94:e3:97:2b:4c:69:b3:c9:f5:49:58:89:
         57:8a:be:85:f6:b9:4e:5d:40:03:12:ad:0e:84:07:52:f3:ef:
         b4:56:f2:16:6f:97:f4:01:1a:37:57:14:9e:e4:3b:76:01:a9:
         26:03:85:6e:51:ed:36:ba:71:57:f4:33:5a:2a:96:9d:da:99:
         1d:ff:14:83:f3:95:13:93:6f:f6:0a:dd:c8:45:13:00:c3:26:
         a4:ea:89:16
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAODRrTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTEyOTIwNDkwMVoXDTI0MDQwNzE2Mjgy
NVowMzExMC8GA1UEAxMoM2RmMGY4MzcxMTBlNDVhMGFjODQ3N2Q1OTkyYmFjMzE3
ZWQxMzhmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCwkFZiWvDq
jGkAMdumvt6b1y/ed9mPHyXyA9FUNlDXtskzPPuI7RdHR6wBoX2QyDMNFvfUSYs/
Rb+eHP91hpQ4dp0OWDdLWt31vEW2DAags0t8bynRhVoLvCaD81WyDfglrxNvMbHO
/RAQmgWbwHfTYG31w1tlSLJR6gGry/ueYvdZDJ9fTccb9O65Yckfb5xl1MhUVQ5B
coaYW5qPRpIiEgQ9d1NIM4rnZjjiV1Vuk/Gaok6G4hi86O65KYJr/ER1QxFLaMMw
wiv7A8XM1oHh59ePBMjKj5O1vwyVy3ODGNEnselpS42KTeXEwB1RZuuPHPxgZlji
51tN4VEykHECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRZFHV8Ud/h/flbhmv7Z7MW
92eH3DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NDgxYjA1OC0zMTFj
LTQyOTQtODYxOS04ZGRlZWZjNWU2MGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTQ4MWIwNTgtMzExYy00
Mjk0LTg2MTktOGRkZWVmYzVlNjBkLzNkZjBmODM3MTEwZTQ1YTBhYzg0NzdkNTk5
MmJhYzMxN2VkMTM4ZjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL5uYDANBAIAAjAHAwUAKAMSADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAGAwDQYJKoZIhvcNAQELBQADggEBAEb2
7ljQv2R5J/rK84G15aVVE7K3WaDMD/Fjif1sLPdyVws7IXTPwAymIkaq7iuVHzRq
NEgA/Bn8QdQU2FnU+ZzzkPUYGGUKC3ejG3w3aI3AHkmTVFyvkjRM4athwO1q9Ex3
3NxQ6NywaI74ksVcCn7ujeYc812OAiitooZfV58/0kMvyMOsYL4jkQ9zMd0/HeWM
xNKltTk3PrUH3gtKRD8GbBlO+zL4dJTjlytMabPJ9UlYiVeKvoX2uU5dQAMSrQ6E
B1Lz77RW8hZvl/QBGjdXFJ7kO3YBqSYDhW5R7Ta6cVf0M1oqlp3amR3/FIPzlROT
b/YK3chFEwDDJqTqiRY=
-----END CERTIFICATE-----