Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cfb828a825cd1b6db6744a167b0e0d24fc12bd0.cer
File:                     4cfb828a825cd1b6db6744a167b0e0d24fc12bd0.cer (raw, json)
Hash identifier:          BKiCXe6dy/SBaGnwxdqv16qsda7i6+17SqeIbXMnV8s=
Subject key identifier:   B3:C4:0F:79:C3:CD:9B:08:3D:AE:45:4B:A4:AC:D7:49:DB:31:31:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C278BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/4cfb828a825cd1b6db6744a167b0e0d24fc12bd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Aug 2020 22:39:16 +0000
Certificate not after:    Fri 24 Feb 2023 17:20:14 +0000
Subordinate resources:    IP: 2803:40a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12744891 (0xc278bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 22:39:16 2020 GMT
            Not After : Feb 24 17:20:14 2023 GMT
        Subject: CN=4cfb828a825cd1b6db6744a167b0e0d24fc12bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:c7:63:0e:ee:a1:24:5d:97:6a:97:d1:00:
                    e9:80:aa:14:9a:59:05:e1:4a:fb:bd:cc:09:e8:77:
                    8a:d1:40:a9:0a:32:3b:30:4f:c6:c9:39:21:8e:93:
                    5c:2a:82:a0:ac:13:7f:cd:e1:57:84:ab:75:12:59:
                    aa:b4:50:ce:e8:41:84:e6:50:0d:70:cb:48:5f:e9:
                    a4:ad:4a:96:de:71:9f:b4:73:05:a7:30:93:90:51:
                    e0:0d:9c:18:69:23:65:02:f4:99:79:f8:73:0f:3c:
                    1a:cb:45:92:91:d0:fb:c5:72:43:79:fb:2b:56:43:
                    2a:37:3c:bd:bb:0e:06:2c:f2:37:76:d6:e3:7d:c2:
                    0b:24:7d:55:38:3b:3e:71:dc:5c:7f:d7:85:ef:60:
                    6f:1f:6d:1b:e0:e6:72:9a:69:98:69:67:1d:c1:87:
                    88:db:5a:95:a9:ff:72:4e:19:94:a6:1d:e9:73:4e:
                    1a:60:fa:d2:d8:cb:32:9e:b6:4b:e8:eb:03:c9:b8:
                    15:8c:ad:78:87:64:35:36:3d:77:8c:2b:7e:b3:4f:
                    30:2a:1e:c0:76:70:2f:9f:f5:0a:34:96:39:90:4f:
                    7c:48:4f:f2:ad:a7:dc:92:02:0e:97:d1:54:dd:8a:
                    fc:2c:19:3a:7f:f4:75:51:93:97:1d:9b:b8:d2:54:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:0F:79:C3:CD:9B:08:3D:AE:45:4B:A4:AC:D7:49:DB:31:31:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/4cfb828a825cd1b6db6744a167b0e0d24fc12bd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:40a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:2e:15:d4:46:0f:d8:8b:1a:f1:aa:79:79:85:69:73:cc:f4:
         9b:95:3f:4e:30:92:61:42:8d:2f:7d:ba:d3:34:00:1c:72:f9:
         c7:bf:3c:a2:88:56:79:1a:08:00:79:1b:b9:ce:b4:9e:a8:ac:
         40:07:8a:fe:c0:63:2a:ff:78:a5:bd:64:66:bc:20:47:55:3c:
         a9:42:d5:e6:29:53:1e:ef:5c:e0:b0:e0:89:e7:54:9c:e8:46:
         0d:98:6b:1b:58:97:35:56:e9:c7:cd:8b:b1:4f:0e:38:04:69:
         a5:3b:1b:8b:dc:51:a6:ac:e1:b2:e0:a9:ab:18:52:cb:ad:92:
         0d:5f:10:b0:45:9f:b4:68:a2:48:9e:14:c0:0e:f6:2a:5a:82:
         64:47:f2:02:55:ae:ef:c3:ed:e4:f0:d0:bd:2a:8a:99:1b:ad:
         ea:4b:9d:fe:c5:97:03:dc:1a:a6:8a:cd:69:2f:dc:83:59:a0:
         8a:b9:08:43:c2:ed:87:39:80:fc:5b:af:69:ff:75:09:fc:a0:
         e2:9b:67:11:c6:01:5a:09:eb:64:41:d7:dc:2c:d6:95:8f:92:
         f8:db:a6:5f:51:0f:7b:92:51:74:db:6b:c3:11:f3:7b:2e:6a:
         75:19:71:36:28:b6:17:4a:8b:5b:ec:a1:09:f4:7f:54:9d:5f:
         a4:a0:98:be
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIEAMJ4uzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgyNDIyMzkxNloXDTIzMDIyNDE3MjAx
NFowMzExMC8GA1UEAxMoNGNmYjgyOGE4MjVjZDFiNmRiNjc0NGExNjdiMGUwZDI0
ZmMxMmJkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM/Jx2MO7qEk
XZdql9EA6YCqFJpZBeFK+73MCeh3itFAqQoyOzBPxsk5IY6TXCqCoKwTf83hV4Sr
dRJZqrRQzuhBhOZQDXDLSF/ppK1Klt5xn7RzBacwk5BR4A2cGGkjZQL0mXn4cw88
GstFkpHQ+8VyQ3n7K1ZDKjc8vbsOBizyN3bW433CCyR9VTg7PnHcXH/Xhe9gbx9t
G+DmcpppmGlnHcGHiNtalan/ck4ZlKYd6XNOGmD60tjLMp62S+jrA8m4FYyteIdk
NTY9d4wrfrNPMCoewHZwL5/1CjSWOZBPfEhP8q2n3JICDpfRVN2K/CwZOn/0dVGT
lx2buNJUdxECAwEAAaOCAt8wggLbMB0GA1UdDgQWBBSzxA95w82bCD2uRUukrNdJ
2zExBDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNDQ3ZTc5Ni0wN2Rl
LTQyYjYtYTkxNy02MzYzZDc1YzRiMTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDQ0N2U3OTYtMDdkZS00
MmI2LWE5MTctNjM2M2Q3NWM0YjE1LzRjZmI4MjhhODI1Y2QxYjZkYjY3NDRhMTY3
YjBlMGQyNGZjMTJiZDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDQKAwDQYJKoZIhvcNAQELBQAD
ggEBAG4uFdRGD9iLGvGqeXmFaXPM9JuVP04wkmFCjS99utM0ABxy+ce/PKKIVnka
CAB5G7nOtJ6orEAHiv7AYyr/eKW9ZGa8IEdVPKlC1eYpUx7vXOCw4InnVJzoRg2Y
axtYlzVW6cfNi7FPDjgEaaU7G4vcUaas4bLgqasYUsutkg1fELBFn7RookieFMAO
9ipagmRH8gJVru/D7eTw0L0qipkbrepLnf7FlwPcGqaKzWkv3INZoIq5CEPC7Yc5
gPxbr2n/dQn8oOKbZxHGAVoJ62RB19ws1pWPkvjbpl9RD3uSUXTba8MR83suanUZ
cTYothdKi1vsoQn0f1SdX6SgmL4=
-----END CERTIFICATE-----