Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/685e9df950810f9f2b2a89ea33716d7329b670c6.cer
File:                     685e9df950810f9f2b2a89ea33716d7329b670c6.cer (raw, json)
Hash identifier:          7QFz0bLqEcY+ZCkfiSfhsGCWeUAP4E74o+r1k1/lz1c=
Subject key identifier:   45:17:34:D4:44:6B:EC:BA:4C:A5:90:43:1C:57:95:A2:27:CD:4F:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E69707
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/685e9df950810f9f2b2a89ea33716d7329b670c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 Jul 2020 21:29:11 +0000
Certificate not after:    Tue 21 May 2024 15:48:52 +0000
Subordinate resources:    AS: 264737
                          IP: 170.233.124.0/22
                          IP: 2803:3740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15111943 (0xe69707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 27 21:29:11 2020 GMT
            Not After : May 21 15:48:52 2024 GMT
        Subject: CN=685e9df950810f9f2b2a89ea33716d7329b670c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5c:74:77:0c:ac:7a:05:72:c6:c9:5b:1a:fb:
                    af:9f:e5:39:f6:e1:61:5c:7f:fd:cb:33:cf:f6:61:
                    76:09:49:c7:c1:21:53:13:46:9a:a5:03:f9:fc:05:
                    e9:92:1e:58:95:ac:23:d9:e0:89:7f:4c:f5:69:34:
                    b8:39:c7:00:47:fb:4d:9f:b1:46:c3:d9:97:70:d2:
                    35:45:27:79:9a:ea:b5:6a:4a:89:e7:68:8c:11:69:
                    a2:5a:a1:ff:b8:b8:81:16:95:72:f9:5e:06:7a:71:
                    6a:8c:f9:5f:ed:e3:83:16:6d:83:36:75:5c:ae:c8:
                    9c:5c:5b:63:b6:61:78:90:a5:d3:fd:c4:cf:4f:70:
                    4c:50:d0:ea:db:f8:06:36:6a:38:55:a6:0e:2d:88:
                    f9:10:f2:9e:c3:51:1f:fa:53:ea:74:af:34:37:56:
                    5d:04:3b:73:81:dd:65:aa:31:3c:3b:1f:12:38:a0:
                    55:72:c7:54:c7:be:9e:fa:86:f7:f9:67:ed:1e:9d:
                    a7:ad:1a:5d:70:9d:59:ff:7d:3a:6b:a5:55:24:ec:
                    62:70:29:8b:f1:9d:47:df:23:8f:56:7e:8d:fc:91:
                    76:bf:a6:83:e2:96:87:1a:14:23:f3:88:1b:42:be:
                    50:6e:75:00:f3:ea:53:8f:43:a8:6f:dc:ef:38:f8:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:34:D4:44:6B:EC:BA:4C:A5:90:43:1C:57:95:A2:27:CD:4F:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/685e9df950810f9f2b2a89ea33716d7329b670c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.124.0/22
                IPv6:
                  2803:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264737

    Signature Algorithm: sha256WithRSAEncryption
         c1:98:03:97:3e:cb:99:1e:05:a4:87:02:ae:3c:ce:b7:76:bc:
         f8:4e:69:14:db:4b:a8:68:82:cc:01:57:85:ac:14:62:07:e7:
         2a:4c:b2:cc:5c:02:a8:82:c2:58:10:77:c2:df:11:3a:26:d6:
         26:4a:8e:35:f2:a2:f7:dd:b1:50:b6:78:22:01:48:04:b1:47:
         53:d9:f8:f0:8a:d9:2f:36:cb:10:6a:81:c4:17:67:b8:e1:2c:
         a4:da:07:15:0c:15:da:e6:30:dc:18:c1:28:0d:cd:53:e1:70:
         b2:45:97:77:5a:23:5e:71:66:28:0d:14:15:bc:4f:c1:f3:1a:
         d6:0a:b5:2c:f8:16:09:8c:35:f4:08:80:8c:e1:64:29:80:72:
         52:0a:27:e0:5b:d0:92:c0:23:3f:0c:5b:7b:39:c2:17:2e:66:
         47:90:ab:60:0f:ef:cd:92:3f:74:18:15:19:13:f0:b9:3a:61:
         89:f2:bb:95:7e:b8:9b:09:39:5d:77:1b:46:df:1a:98:2e:4e:
         d6:5e:a0:a5:1f:43:66:37:52:5e:39:ef:d6:d9:b8:4c:8c:a3:
         c0:77:e5:2a:48:92:f4:4b:13:79:e8:d2:3d:80:b5:1b:21:5a:
         9a:50:5c:ec:8e:4e:f7:38:f9:71:e8:18:70:d0:7e:b3:f7:c4:
         88:9a:5c:2e
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOaXBzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDcyNzIxMjkxMVoXDTI0MDUyMTE1NDg1
MlowMzExMC8GA1UEAxMoNjg1ZTlkZjk1MDgxMGY5ZjJiMmE4OWVhMzM3MTZkNzMy
OWI2NzBjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIJcdHcMrHoF
csbJWxr7r5/lOfbhYVx//cszz/ZhdglJx8EhUxNGmqUD+fwF6ZIeWJWsI9ngiX9M
9Wk0uDnHAEf7TZ+xRsPZl3DSNUUneZrqtWpKiedojBFpolqh/7i4gRaVcvleBnpx
aoz5X+3jgxZtgzZ1XK7InFxbY7ZheJCl0/3Ez09wTFDQ6tv4BjZqOFWmDi2I+RDy
nsNRH/pT6nSvNDdWXQQ7c4HdZaoxPDsfEjigVXLHVMe+nvqG9/ln7R6dp60aXXCd
Wf99OmulVSTsYnApi/GdR98jj1Z+jfyRdr+mg+KWhxoUI/OIG0K+UG51APPqU49D
qG/c7zj4m7ECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRFFzTURGvsukylkEMcV5Wi
J81PMjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YmQ4OTAxOC01Mjhj
LTRiOTYtOTI3MS1jYmY4YzI0NWVlYTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGJkODkwMTgtNTI4Yy00
Yjk2LTkyNzEtY2JmOGMyNDVlZWE2LzY4NWU5ZGY5NTA4MTBmOWYyYjJhODllYTMz
NzE2ZDczMjliNjcwYzYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrpfDANBAIAAjAHAwUAKAM3QDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECiEwDQYJKoZIhvcNAQELBQADggEBAMGY
A5c+y5keBaSHAq48zrd2vPhOaRTbS6hogswBV4WsFGIH5ypMssxcAqiCwlgQd8Lf
ETom1iZKjjXyovfdsVC2eCIBSASxR1PZ+PCK2S82yxBqgcQXZ7jhLKTaBxUMFdrm
MNwYwSgNzVPhcLJFl3daI15xZigNFBW8T8HzGtYKtSz4FgmMNfQIgIzhZCmAclIK
J+Bb0JLAIz8MW3s5whcuZkeQq2AP782SP3QYFRkT8Lk6YYnyu5V+uJsJOV13G0bf
GpguTtZeoKUfQ2Y3Ul4579bZuEyMo8B35SpIkvRLE3no0j2AtRshWppQXOyOTvc4
+XHoGHDQfrP3xIiaXC4=
-----END CERTIFICATE-----