Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
File:                     4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer (raw, json)
Hash identifier:          ZK9xVuPGv9/a1489JUA/R94RmB9sNy+H4FTR6eGwSaw=
Subject key identifier:   49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E274A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Jan 2021 19:09:26 +0000
Certificate not after:    Wed 24 Apr 2024 15:07:40 +0000
Subordinate resources:    AS: 270044
                          IP: 179.0.180.0/22
                          IP: 2803:55e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14840992 (0xe274a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 19:09:26 2021 GMT
            Not After : Apr 24 15:07:40 2024 GMT
        Subject: CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:8b:e2:a3:20:77:ea:c6:30:c2:b9:04:88:
                    59:b8:ee:e6:fc:58:f7:bf:81:bd:a0:19:59:83:a1:
                    4f:87:75:2e:c4:3f:9f:73:80:16:f6:7b:14:15:e9:
                    2f:24:b2:da:4a:a2:43:ce:76:46:e3:45:21:8e:62:
                    ba:b0:7a:d2:61:35:ba:1b:27:63:b2:c1:6c:b0:15:
                    b5:cd:ba:05:2b:26:2d:1c:74:c4:e3:f6:cc:75:95:
                    64:ab:5a:a9:7a:43:9e:d1:cd:76:b2:71:59:6f:0c:
                    6a:06:94:24:4a:43:dd:ef:fd:41:9e:20:6e:2b:33:
                    e1:26:7f:19:4d:39:04:80:bf:a3:dc:20:ad:ee:92:
                    cd:7d:8b:42:b9:ea:ae:43:2e:ba:a6:14:81:00:8f:
                    1d:de:28:e0:85:05:96:ea:45:f9:f4:9a:af:41:25:
                    3f:dc:d9:3b:c1:90:2b:59:73:41:a4:e0:58:2b:13:
                    2e:8d:a3:e5:9e:da:4f:43:a7:ea:5a:58:02:4d:5b:
                    62:29:cb:10:a0:18:b1:62:52:55:6a:e7:04:44:56:
                    b1:dd:85:bc:f5:e5:ea:92:5e:00:00:81:40:16:2b:
                    84:4b:80:c1:d1:c0:9d:c3:6c:27:45:66:ac:3c:26:
                    bc:29:e6:7b:93:f8:e1:24:98:a9:80:34:67:20:46:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.180.0/22
                IPv6:
                  2803:55e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270044

    Signature Algorithm: sha256WithRSAEncryption
         2c:57:15:93:21:84:04:8c:0c:9c:f1:fc:55:72:7a:96:8e:70:
         72:03:d8:2a:df:ec:cb:ac:87:d7:52:9d:e5:3c:2c:ff:67:28:
         0e:2f:65:4e:2c:2f:ad:da:70:84:73:be:13:7b:52:6d:ad:26:
         b8:b5:fe:c1:35:cf:df:e0:7e:b1:d7:d5:d7:23:0f:78:e4:a3:
         bb:b4:59:4e:68:ec:c9:a8:fe:c3:00:56:76:c6:20:9c:5d:34:
         8f:8e:18:2b:d2:69:3c:2c:03:03:19:6a:38:f8:2e:36:22:8c:
         7d:2e:14:21:af:4e:46:7f:45:cb:a6:d0:af:8d:24:f5:07:45:
         17:64:a2:14:41:98:b1:b8:bb:a4:79:7c:f9:dd:64:0b:a0:fb:
         7a:8f:83:c4:ad:aa:b1:b0:96:5a:df:26:ef:80:77:3e:e7:6d:
         42:ec:e4:8c:24:29:c2:4e:a6:20:f2:45:9c:37:b6:53:cf:0d:
         d9:47:08:a6:70:01:ba:18:f7:28:eb:6b:ed:19:88:3f:08:35:
         4f:23:0f:63:ed:87:e9:1d:61:5a:e5:5d:05:68:cc:0a:a3:0d:
         c9:e0:06:30:97:33:b6:89:f3:33:ba:f9:54:8b:a2:fd:e9:8b:
         dd:06:d1:b3:9d:28:60:ae:41:8a:4a:4c:e6:32:26:1d:cd:8a:
         8e:35:fc:87
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOJ0oDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDExNDE5MDkyNloXDTI0MDQyNDE1MDc0
MFowMzExMC8GA1UEAxMoNGZmMWYwNGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMx
MjAwMWVmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjui+KjIHfq
xjDCuQSIWbju5vxY97+BvaAZWYOhT4d1LsQ/n3OAFvZ7FBXpLySy2kqiQ852RuNF
IY5iurB60mE1uhsnY7LBbLAVtc26BSsmLRx0xOP2zHWVZKtaqXpDntHNdrJxWW8M
agaUJEpD3e/9QZ4gbisz4SZ/GU05BIC/o9wgre6SzX2LQrnqrkMuuqYUgQCPHd4o
4IUFlupF+fSar0ElP9zZO8GQK1lzQaTgWCsTLo2j5Z7aT0On6lpYAk1bYinLEKAY
sWJSVWrnBERWsd2FvPXl6pJeAACBQBYrhEuAwdHAncNsJ0VmrDwmvCnme5P44SSY
qYA0ZyBGGxcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRJC1vUOzRSvV/XgRU0pLGb
MdsYgDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMTVmOTM3NC1iNzE5
LTQ5MGEtODdjZC0wZmIwYTQ3ZGYxZTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzE1ZjkzNzQtYjcxOS00
OTBhLTg3Y2QtMGZiMGE0N2RmMWU5LzRmZjFmMDRkNWI1MDgyODU0YjFlZGJmYjFl
OWNmNGVjMTIwMDFlZjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArMAtDANBAIAAjAHAwUAKANV4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHtwwDQYJKoZIhvcNAQELBQADggEBACxX
FZMhhASMDJzx/FVyepaOcHID2Crf7Mush9dSneU8LP9nKA4vZU4sL63acIRzvhN7
Um2tJri1/sE1z9/gfrHX1dcjD3jko7u0WU5o7Mmo/sMAVnbGIJxdNI+OGCvSaTws
AwMZajj4LjYijH0uFCGvTkZ/Rcum0K+NJPUHRRdkohRBmLG4u6R5fPndZAug+3qP
g8StqrGwllrfJu+Adz7nbULs5IwkKcJOpiDyRZw3tlPPDdlHCKZwAboY9yjra+0Z
iD8INU8jD2Pth+kdYVrlXQVozAqjDcngBjCXM7aJ8zO6+VSLov3pi90G0bOdKGCu
QYpKTOYyJh3Nio41/Ic=
-----END CERTIFICATE-----