Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
File:                     444e0076eea4611dce8c3e39bffef12743fb4711.cer (raw, json)
Hash identifier:          2Y3jL+gUYe17fy7Mm/+AxnBV83f2Pq2dH7atXpL39Xk=
Subject key identifier:   EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDDC5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 16 Aug 2020 19:58:48 +0000
Certificate not after:    Thu 07 Mar 2024 15:18:12 +0000
Subordinate resources:    AS: 270055
                          IP: 189.90.228.0/22
                          IP: 2803:81e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14539869 (0xdddc5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 16 19:58:48 2020 GMT
            Not After : Mar  7 15:18:12 2024 GMT
        Subject: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:7f:09:c4:be:7e:df:95:52:a2:7d:7d:5c:
                    b7:a1:1f:58:e2:34:b7:c1:77:00:e9:52:cf:50:89:
                    a5:fd:6e:e6:fe:e0:9c:2b:b6:b2:fd:64:5a:98:21:
                    65:d0:f1:b3:60:b6:a4:3a:6f:79:fb:fe:21:ee:f2:
                    d0:fa:85:f2:ee:31:d5:00:7b:de:f8:51:a3:66:5c:
                    41:02:6c:bc:02:f2:07:22:28:76:8c:73:da:f2:37:
                    50:d9:98:ba:0c:e3:95:ca:01:4b:7a:95:59:85:44:
                    4d:2f:6a:6e:e1:41:6c:93:da:60:70:51:9e:98:1c:
                    90:3b:3d:d4:13:2e:85:77:1b:36:ed:18:c5:40:70:
                    2a:f4:1c:f0:8b:5c:f1:32:e3:60:e8:6b:71:f1:27:
                    90:11:11:36:c7:24:aa:d1:3e:6e:f9:18:69:9d:7e:
                    fb:95:b6:80:f9:a5:75:ef:e3:86:d5:a8:5d:ad:83:
                    e7:59:13:b9:8d:fa:01:e8:1c:41:b8:80:24:5c:5e:
                    0f:f0:54:6f:4c:a1:7d:54:fa:a3:32:47:03:1d:b2:
                    cf:08:d6:9e:3a:84:94:75:d1:51:03:06:5e:12:39:
                    80:e6:f5:91:5c:07:40:81:4e:de:e2:ee:fb:ec:47:
                    ee:d1:d0:f9:46:2a:c2:0d:10:c1:98:1a:89:6e:eb:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.228.0/22
                IPv6:
                  2803:81e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270055

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:cc:67:36:0d:a4:19:49:72:53:af:0a:b6:d6:1a:93:91:
         77:34:9e:f2:16:b1:58:49:4e:34:f9:77:47:c4:dc:2a:0d:30:
         fb:2e:cb:c0:f0:53:65:fa:34:e5:4a:54:d5:dc:57:36:66:4c:
         e3:bd:3c:9e:e8:cc:ef:5d:b6:19:ca:58:5e:c0:5c:3f:48:8e:
         d4:7c:59:5c:a5:d9:ec:73:27:ff:0d:32:b1:d0:90:47:8c:0f:
         ac:c8:90:75:9d:16:c7:bb:a2:66:67:75:91:40:19:2c:2d:a6:
         69:4e:ca:12:ad:31:80:23:79:8c:ec:cd:cb:0e:04:ed:bb:e0:
         fb:7f:81:c9:5e:8b:fd:9e:5c:0f:01:5e:85:67:cd:73:48:66:
         ee:f2:72:8e:08:03:1d:72:94:19:85:b5:0e:70:92:a0:33:d2:
         58:24:49:7a:39:95:bc:44:d7:01:fe:6c:5b:3d:0f:88:d6:48:
         61:b7:97:34:40:37:44:28:b3:1a:d2:ff:9b:4a:cc:77:4a:e1:
         9d:8a:c6:5b:8e:99:e8:6f:c6:bd:d1:e4:b4:2f:9e:cf:07:85:
         8b:17:8a:35:c1:2e:23:34:4c:23:2a:b4:1d:5e:35:46:74:d2:
         55:04:69:a6:4d:fd:4a:7b:17:78:89:65:41:61:47:fa:fd:df:
         03:8a:fd:d5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN3cXTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgxNjE5NTg0OFoXDTI0MDMwNzE1MTgx
MlowMzExMC8GA1UEAxMoNDQ0ZTAwNzZlZWE0NjExZGNlOGMzZTM5YmZmZWYxMjc0
M2ZiNDcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKnBfwnEvn7f
lVKifX1ct6EfWOI0t8F3AOlSz1CJpf1u5v7gnCu2sv1kWpghZdDxs2C2pDpvefv+
Ie7y0PqF8u4x1QB73vhRo2ZcQQJsvALyByIodoxz2vI3UNmYugzjlcoBS3qVWYVE
TS9qbuFBbJPaYHBRnpgckDs91BMuhXcbNu0YxUBwKvQc8Itc8TLjYOhrcfEnkBER
NsckqtE+bvkYaZ1++5W2gPmlde/jhtWoXa2D51kTuY36AegcQbiAJFxeD/BUb0yh
fVT6ozJHAx2yzwjWnjqElHXRUQMGXhI5gOb1kVwHQIFO3uLu++xH7tHQ+UYqwg0Q
wZgaiW7rvE0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTuJoKlzhv+hyP0BLJIeSBI
exiaoTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYTU0MWJlZC0zNWMz
LTQ2MzQtOGIzZS00YWFkYTkyMmFhY2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2E1NDFiZWQtMzVjMy00
NjM0LThiM2UtNGFhZGE5MjJhYWNlLzQ0NGUwMDc2ZWVhNDYxMWRjZThjM2UzOWJm
ZmVmMTI3NDNmYjQ3MTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr1a5DANBAIAAjAHAwUAKAOB4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHucwDQYJKoZIhvcNAQELBQADggEBACXr
zGc2DaQZSXJTrwq21hqTkXc0nvIWsVhJTjT5d0fE3CoNMPsuy8DwU2X6NOVKVNXc
VzZmTOO9PJ7ozO9dthnKWF7AXD9IjtR8WVyl2exzJ/8NMrHQkEeMD6zIkHWdFse7
omZndZFAGSwtpmlOyhKtMYAjeYzszcsOBO274Pt/gclei/2eXA8BXoVnzXNIZu7y
co4IAx1ylBmFtQ5wkqAz0lgkSXo5lbxE1wH+bFs9D4jWSGG3lzRAN0QosxrS/5tK
zHdK4Z2KxluOmehvxr3R5LQvns8HhYsXijXBLiM0TCMqtB1eNUZ00lUEaaZN/Up7
F3iJZUFhR/r93wOK/dU=
-----END CERTIFICATE-----