Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f7d74d475eefc0c2d8d1e75a65da85c4426bded.cer
File:                     6f7d74d475eefc0c2d8d1e75a65da85c4426bded.cer (raw, json)
Hash identifier:          tdr3ciksR8sOCjHRddwwoLH1nehYgKHo+HMLffQlEUg=
Subject key identifier:   DB:64:68:BF:EC:72:AF:56:3C:3C:A2:DB:82:22:0B:40:74:C8:F2:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0695F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f7603540-4b05-493c-9aac-2d8634ce7f72/6f7d74d475eefc0c2d8d1e75a65da85c4426bded.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f7603540-4b05-493c-9aac-2d8634ce7f72/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Jun 2020 11:42:50 +0000
Certificate not after:    Wed 03 Apr 2024 18:48:54 +0000
Subordinate resources:    AS: 270020
                          IP: 177.74.204.0/22
                          IP: 2803:99e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14707039 (0xe0695f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  5 11:42:50 2020 GMT
            Not After : Apr  3 18:48:54 2024 GMT
        Subject: CN=6f7d74d475eefc0c2d8d1e75a65da85c4426bded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:42:10:e0:a1:25:86:95:b2:2f:31:fa:76:
                    3a:da:9b:eb:79:19:4a:5b:51:2f:f3:c0:b0:32:ef:
                    6d:b9:fe:48:7c:8f:d3:4f:44:64:12:88:4f:84:8e:
                    24:fd:6b:fe:3c:0c:a5:7e:96:c1:28:5e:32:e0:37:
                    2b:1f:a1:d1:5b:5c:c8:d0:c0:62:6c:14:0d:7e:3f:
                    2f:8f:00:1c:cf:90:ae:1e:2a:a5:53:51:6b:8e:0f:
                    66:da:1b:b7:ac:6b:a0:8e:35:12:13:35:d1:0c:a8:
                    d8:e9:b2:c7:0e:b2:8b:5d:60:fb:67:86:0e:48:51:
                    5f:cf:f3:47:b9:78:b7:08:fe:38:b3:2d:87:c2:0b:
                    6e:f9:32:51:c7:5e:a2:87:52:d6:2e:86:c9:6b:77:
                    33:3b:61:d1:40:12:b0:7e:81:a7:8d:3f:0a:aa:18:
                    f4:ec:c0:7e:cd:c9:91:be:87:fe:25:4a:ce:4c:a2:
                    c6:ab:62:d4:9d:7b:af:5e:73:e2:84:e4:2a:9d:61:
                    28:88:ed:fd:df:4f:19:86:e5:f4:ba:75:b8:33:74:
                    af:c7:28:b1:79:ab:38:d2:db:38:9e:b3:0c:4a:2c:
                    ff:aa:8c:8a:41:7a:0e:26:3d:7a:02:2b:bb:19:6d:
                    98:96:e5:55:da:cc:da:17:6d:a1:8f:f6:3b:8c:01:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:68:BF:EC:72:AF:56:3C:3C:A2:DB:82:22:0B:40:74:C8:F2:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f7603540-4b05-493c-9aac-2d8634ce7f72/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f7603540-4b05-493c-9aac-2d8634ce7f72/6f7d74d475eefc0c2d8d1e75a65da85c4426bded.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.204.0/22
                IPv6:
                  2803:99e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270020

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:d1:66:34:40:c8:27:bc:0d:e6:19:41:ab:85:4e:86:f3:
         8a:cf:1a:81:66:83:44:c4:48:2b:62:e4:12:56:c2:87:59:db:
         5d:c6:01:52:c0:95:33:58:ef:fe:65:26:e7:6f:05:e0:85:0c:
         08:da:e0:73:fb:c1:38:8c:14:43:f4:14:e1:fe:45:2b:92:e5:
         65:0f:99:41:17:07:41:9a:bc:0f:1c:b7:df:f8:a3:00:3d:0c:
         9c:c4:0b:f9:bd:cd:3c:a2:f9:b2:6d:da:7d:f0:6f:10:b9:fe:
         e5:35:b0:d6:61:75:aa:a3:c2:22:86:5c:22:75:9e:d5:e5:fe:
         72:99:d1:fe:27:40:e1:bd:63:09:32:b2:33:59:fa:9d:b1:fb:
         cf:2a:c3:b7:d5:8e:8d:c8:c9:ea:a3:ff:7c:13:30:6b:52:6d:
         e3:0e:d4:c6:f4:d8:be:d8:32:bb:23:0c:7d:75:0a:7e:37:04:
         7b:9c:ff:c5:53:e1:b0:21:27:87:5f:b8:b8:9c:63:b1:5f:3d:
         81:7d:0d:f4:19:89:df:34:98:94:2d:ca:9b:cf:8d:1a:aa:d9:
         be:3b:81:bd:b0:4a:e2:c2:af:8e:8c:c7:9c:56:c3:9e:9e:3d:
         c7:7b:f5:64:f9:8e:e6:51:48:29:d9:ce:33:e2:07:0b:63:18:
         43:51:3d:4e
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOBpXzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDYwNTExNDI1MFoXDTI0MDQwMzE4NDg1
NFowMzExMC8GA1UEAxMoNmY3ZDc0ZDQ3NWVlZmMwYzJkOGQxZTc1YTY1ZGE4NWM0
NDI2YmRlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMyvQhDgoSWG
lbIvMfp2Otqb63kZSltRL/PAsDLvbbn+SHyP009EZBKIT4SOJP1r/jwMpX6WwShe
MuA3Kx+h0VtcyNDAYmwUDX4/L48AHM+Qrh4qpVNRa44PZtobt6xroI41EhM10Qyo
2Omyxw6yi11g+2eGDkhRX8/zR7l4twj+OLMth8ILbvkyUcdeoodS1i6GyWt3Mzth
0UASsH6Bp40/CqoY9OzAfs3Jkb6H/iVKzkyixqti1J17r15z4oTkKp1hKIjt/d9P
GYbl9Lp1uDN0r8cosXmrONLbOJ6zDEos/6qMikF6DiY9egIruxltmJblVdrM2hdt
oY/2O4wBOtsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTbZGi/7HKvVjw8otuCIgtA
dMjyGzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mNzYwMzU0MC00YjA1
LTQ5M2MtOWFhYy0yZDg2MzRjZTdmNzIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjc2MDM1NDAtNGIwNS00
OTNjLTlhYWMtMmQ4NjM0Y2U3ZjcyLzZmN2Q3NGQ0NzVlZWZjMGMyZDhkMWU3NWE2
NWRhODVjNDQyNmJkZWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArFKzDANBAIAAjAHAwUAKAOZ4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHsQwDQYJKoZIhvcNAQELBQADggEBAD9F
0WY0QMgnvA3mGUGrhU6G84rPGoFmg0TESCti5BJWwodZ213GAVLAlTNY7/5lJudv
BeCFDAja4HP7wTiMFEP0FOH+RSuS5WUPmUEXB0GavA8ct9/4owA9DJzEC/m9zTyi
+bJt2n3wbxC5/uU1sNZhdaqjwiKGXCJ1ntXl/nKZ0f4nQOG9YwkysjNZ+p2x+88q
w7fVjo3Iyeqj/3wTMGtSbeMO1Mb02L7YMrsjDH11Cn43BHuc/8VT4bAhJ4dfuLic
Y7FfPYF9DfQZid80mJQtypvPjRqq2b47gb2wSuLCr46Mx5xWw56ePcd79WT5juZR
SCnZzjPiBwtjGENRPU4=
-----END CERTIFICATE-----