Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
File:                     5436c9c8d57c3e3253e79ac263352d27de50cae3.cer (raw, json)
Hash identifier:          03ohfvCDL5mMu5YLgum1yqE2mrm8pZU/aNFIEPCLwZQ=
Subject key identifier:   5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDF7BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Jul 2020 22:20:46 +0000
Certificate not after:    Wed 17 Jul 2024 23:07:42 +0000
Subordinate resources:    AS: 267678
                          IP: 45.162.76.0/22
                          IP: 2803:aea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15595452 (0xedf7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 22:20:46 2020 GMT
            Not After : Jul 17 23:07:42 2024 GMT
        Subject: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:b2:eb:1b:a9:c1:38:26:c6:a9:e9:6f:56:
                    ea:a6:29:a8:d2:e9:e7:77:19:d0:12:00:99:fd:5c:
                    1a:1e:49:68:39:26:1f:2e:30:40:27:e9:d8:6b:eb:
                    e4:1b:cd:c4:a8:fd:bb:f8:93:85:c4:3b:37:ea:f5:
                    45:23:59:9e:8d:2e:04:23:01:8f:40:f0:95:9d:a5:
                    2d:7f:26:56:bf:bb:97:b5:67:04:d0:7f:8b:fb:8d:
                    dd:ed:0b:ad:f3:f8:99:f8:74:23:a5:72:4d:d6:d6:
                    35:2d:5d:5b:14:da:e4:79:59:d1:30:da:e2:af:4e:
                    08:eb:43:99:69:bf:d4:e3:07:ba:c4:22:d5:a1:c4:
                    5a:5f:7c:99:8c:4a:0e:97:a9:ab:cc:e4:09:ac:4a:
                    1f:e3:ad:e9:25:d7:16:4e:5e:b0:a3:b4:db:45:87:
                    2b:02:99:ff:58:44:b5:a4:f4:54:f2:05:cc:4e:bb:
                    95:f3:51:83:0a:15:29:87:54:0e:1b:59:ac:5c:c0:
                    47:44:00:17:30:36:d2:4e:9e:75:80:af:66:e9:4b:
                    bd:0f:93:fe:04:62:62:16:42:60:72:b0:06:0f:9d:
                    e0:46:5d:d1:73:19:3f:b0:e2:9e:5b:dd:d0:11:37:
                    83:79:f6:cc:c4:d7:fc:e1:fc:50:e0:b8:f9:71:f1:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22
                IPv6:
                  2803:aea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267678

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:f3:ec:a3:29:6f:77:01:0a:df:87:5d:69:6c:8a:53:65:
         fb:23:ee:f3:a4:d7:33:2c:a4:7b:ff:6c:68:4f:aa:3a:b6:02:
         1e:81:80:a1:f3:ae:81:05:07:3d:d0:28:7c:62:52:87:5d:dc:
         b1:d5:de:ac:e0:65:be:f9:1e:12:1f:d0:1c:65:90:2c:8b:3f:
         25:5e:65:5a:8c:92:45:67:72:41:a5:24:e1:56:5b:f5:0d:d7:
         23:7a:ef:31:8f:55:b9:f6:72:56:62:11:9a:ce:24:76:5e:b6:
         cd:66:3b:71:dd:e5:f2:31:12:63:22:b7:7c:71:7d:1d:33:ca:
         b7:41:f4:76:e5:32:4d:35:f4:e1:f3:e9:94:13:9c:17:ff:6e:
         e9:bd:9a:9c:5d:c9:09:6a:5c:23:43:02:29:5f:fe:c7:4e:8c:
         d5:f1:ae:e3:b6:af:dd:f6:c5:fa:fc:cb:bd:ed:57:f7:bd:ba:
         5f:40:f6:06:6f:a5:14:83:e9:6b:be:72:d3:d9:55:d9:ae:ad:
         6d:59:6b:c5:28:6d:6a:1d:fa:c7:32:f5:4f:45:02:0f:20:3f:
         78:12:47:37:34:1b:0a:c0:b4:e6:dd:31:ec:e1:24:8b:60:bd:
         db:b9:64:e8:83:1f:3e:70:ab:fe:c1:fb:dc:93:b9:31:15:22:
         31:04:d2:ba
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO33vDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDcxNDIyMjA0NloXDTI0MDcxNzIzMDc0
MlowMzExMC8GA1UEAxMoNTQzNmM5YzhkNTdjM2UzMjUzZTc5YWMyNjMzNTJkMjdk
ZTUwY2FlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANBlsusbqcE4
Jsap6W9W6qYpqNLp53cZ0BIAmf1cGh5JaDkmHy4wQCfp2Gvr5BvNxKj9u/iThcQ7
N+r1RSNZno0uBCMBj0DwlZ2lLX8mVr+7l7VnBNB/i/uN3e0LrfP4mfh0I6VyTdbW
NS1dWxTa5HlZ0TDa4q9OCOtDmWm/1OMHusQi1aHEWl98mYxKDpepq8zkCaxKH+Ot
6SXXFk5esKO020WHKwKZ/1hEtaT0VPIFzE67lfNRgwoVKYdUDhtZrFzAR0QAFzA2
0k6edYCvZulLvQ+T/gRiYhZCYHKwBg+d4EZd0XMZP7Dinlvd0BE3g3n2zMTX/OH8
UOC4+XHxdR0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRcEcqL9ZLxcuNwMNi1UCl6
01q5tTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MDY1ZjMxMS00MGE1
LTRiZGItYWI4ZC1iMGZhOWJmYzRhNjYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjA2NWYzMTEtNDBhNS00
YmRiLWFiOGQtYjBmYTliZmM0YTY2LzU0MzZjOWM4ZDU3YzNlMzI1M2U3OWFjMjYz
MzUyZDI3ZGU1MGNhZTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2iTDANBAIAAjAHAwUAKAOuoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFZ4wDQYJKoZIhvcNAQELBQADggEBAEtA
8+yjKW93AQrfh11pbIpTZfsj7vOk1zMspHv/bGhPqjq2Ah6BgKHzroEFBz3QKHxi
Uodd3LHV3qzgZb75HhIf0BxlkCyLPyVeZVqMkkVnckGlJOFWW/UN1yN67zGPVbn2
clZiEZrOJHZets1mO3Hd5fIxEmMit3xxfR0zyrdB9HblMk019OHz6ZQTnBf/bum9
mpxdyQlqXCNDAilf/sdOjNXxruO2r932xfr8y73tV/e9ul9A9gZvpRSD6Wu+ctPZ
VdmurW1Za8UobWod+scy9U9FAg8gP3gSRzc0GwrAtObdMezhJItgvdu5ZOiDHz5w
q/7B+9yTuTEVIjEE0ro=
-----END CERTIFICATE-----