Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec634c3b7ff325c64b35994950d9a3b1c155ee0.cer
File:                     4ec634c3b7ff325c64b35994950d9a3b1c155ee0.cer (raw, json)
Hash identifier:          DYT14bXrGw9FkGdGZ2eS3FhcrJr1GFUDfBCRt3M5RKI=
Subject key identifier:   35:83:75:D6:C9:4C:48:68:57:3C:D8:D0:AA:1C:DD:2D:9C:7D:5F:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F378BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/4ec634c3b7ff325c64b35994950d9a3b1c155ee0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2019 14:35:06 +0000
Certificate not after:    Sat 31 Aug 2024 15:56:23 +0000
Subordinate resources:    IP: 2801:122::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15956154 (0xf378ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 14:35:06 2019 GMT
            Not After : Aug 31 15:56:23 2024 GMT
        Subject: CN=4ec634c3b7ff325c64b35994950d9a3b1c155ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:1b:b7:65:2f:01:cb:5e:26:26:48:c9:f4:
                    71:49:97:07:41:9c:5e:ab:f0:a5:53:1e:e8:9e:a4:
                    19:5a:66:47:1e:d9:7a:9b:48:ab:48:bc:d7:db:73:
                    44:ed:d7:78:33:bf:e6:e7:92:ee:48:38:34:df:6c:
                    a6:e4:1a:8a:de:cd:74:43:17:ee:11:e1:4f:4c:0e:
                    ac:ce:eb:2c:d0:72:80:44:3a:b9:11:55:eb:d0:57:
                    13:74:49:4a:38:93:a2:f0:73:88:30:80:2c:12:45:
                    ed:5c:bd:f6:fc:a8:34:e8:4a:77:5d:58:cd:b7:8b:
                    77:db:0a:76:a4:b3:94:2a:ab:40:31:a5:6b:b5:c7:
                    d5:0c:0c:db:d7:7a:9e:82:49:17:e6:a1:63:da:fc:
                    7a:e4:47:8f:a3:03:d6:96:ec:63:6e:f6:05:e7:16:
                    fe:ed:fb:fb:dc:a9:94:b7:bc:85:d3:ec:c9:a0:b0:
                    e1:e0:d9:48:3d:86:26:8d:58:f6:e6:9a:93:7d:8a:
                    75:d2:c3:7f:c6:28:6a:f2:8d:1a:71:71:08:c5:3e:
                    a9:ae:c6:f4:4c:18:7c:04:df:b7:30:22:65:c7:52:
                    de:a4:fb:d4:7f:2f:b0:19:46:a5:66:d2:19:5b:64:
                    8e:39:80:83:7c:51:27:d7:3e:5f:31:2c:59:07:b2:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:83:75:D6:C9:4C:48:68:57:3C:D8:D0:AA:1C:DD:2D:9C:7D:5F:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/4ec634c3b7ff325c64b35994950d9a3b1c155ee0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:122::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:fd:28:67:fb:ce:93:50:9b:e2:b2:f4:ad:69:61:67:be:
         c9:cc:90:2b:3e:8f:47:86:cc:8a:5e:0a:8c:5b:36:73:9f:e3:
         75:d4:b2:b3:cb:af:4f:0b:f6:2f:4a:29:d6:8b:cb:2d:44:ec:
         93:b3:8a:8f:5d:e9:10:aa:62:02:fc:1b:12:20:4e:20:95:50:
         2b:1e:f5:ea:e2:8e:e1:68:bd:63:b2:ca:0f:7a:82:30:15:f6:
         32:19:9c:a4:e7:b9:cf:5a:b9:8b:9e:e0:46:6c:a5:fc:ed:b3:
         4c:e6:8b:df:3e:4f:4b:de:52:7f:1b:1f:ac:2d:53:40:d9:8c:
         89:7d:83:f0:5a:df:8f:c2:51:6a:b4:08:e6:35:dc:ed:39:78:
         fe:52:75:b6:96:12:51:08:a8:1f:3d:19:16:bf:05:75:02:2f:
         67:3a:f1:d0:a6:d9:96:c4:54:8f:18:33:5b:24:3d:52:71:9b:
         87:e8:72:c1:73:a1:33:b2:41:e3:e3:1c:c0:6f:ce:ae:5d:db:
         96:8b:a4:db:dc:84:e4:a0:6c:3e:e7:15:63:98:6d:6e:60:ae:
         79:0e:d3:b6:f3:66:73:b4:cf:d5:37:21:33:0e:2b:17:dc:d9:
         4d:a5:f5:4e:dd:52:91:c8:8f:78:93:53:cb:85:3e:ff:ba:67:
         42:e2:89:e3
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIEAPN4ujANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTEwNzE0MzUwNloXDTI0MDgzMTE1NTYy
M1owMzExMC8GA1UEAxMoNGVjNjM0YzNiN2ZmMzI1YzY0YjM1OTk0OTUwZDlhM2Ix
YzE1NWVlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI4xG7dlLwHL
XiYmSMn0cUmXB0GcXqvwpVMe6J6kGVpmRx7ZeptIq0i819tzRO3XeDO/5ueS7kg4
NN9spuQait7NdEMX7hHhT0wOrM7rLNBygEQ6uRFV69BXE3RJSjiTovBziDCALBJF
7Vy99vyoNOhKd11YzbeLd9sKdqSzlCqrQDGla7XH1QwM29d6noJJF+ahY9r8euRH
j6MD1pbsY272BecW/u37+9yplLe8hdPsyaCw4eDZSD2GJo1Y9uaak32KddLDf8Yo
avKNGnFxCMU+qa7G9EwYfATftzAiZcdS3qT71H8vsBlGpWbSGVtkjjmAg3xRJ9c+
XzEsWQeyzbkCAwEAAaOCAuAwggLcMB0GA1UdDgQWBBQ1g3XWyUxIaFc82NCqHN0t
nH1fLzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMmY2OWQwYy0yZjYw
LTQzYTAtOTJiZC05ZGNlZTcxYjQxZTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjJmNjlkMGMtMmY2MC00
M2EwLTkyYmQtOWRjZWU3MWI0MWU2LzRlYzYzNGMzYjdmZjMyNWM2NGIzNTk5NDk1
MGQ5YTNiMWMxNTVlZTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgBASIAMA0GCSqGSIb3DQEBCwUA
A4IBAQAAbv0oZ/vOk1Cb4rL0rWlhZ77JzJArPo9HhsyKXgqMWzZzn+N11LKzy69P
C/YvSinWi8stROyTs4qPXekQqmIC/BsSIE4glVArHvXq4o7haL1jssoPeoIwFfYy
GZyk57nPWrmLnuBGbKX87bNM5ovfPk9L3lJ/Gx+sLVNA2YyJfYPwWt+PwlFqtAjm
NdztOXj+UnW2lhJRCKgfPRkWvwV1Ai9nOvHQptmWxFSPGDNbJD1ScZuH6HLBc6Ez
skHj4xzAb86uXduWi6Tb3ITkoGw+5xVjmG1uYK55DtO282ZztM/VNyEzDisX3NlN
pfVO3VKRyI94k1PLhT7/umdC4onj
-----END CERTIFICATE-----