Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.cer
File:                     7ea7bd7ef6f4501f774846280928efc8eb14dfe7.cer (raw, json)
Hash identifier:          kyktAmIXpkZAkp4zyMgJgNIUnxXB3owsH3q4jMH2vTc=
Subject key identifier:   79:7F:74:C5:E9:50:E2:65:C0:6B:25:5F:B8:B4:C0:8A:D8:B0:3B:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA6E93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Sep 2020 12:11:53 +0000
Certificate not after:    Tue 22 Oct 2024 18:19:27 +0000
Subordinate resources:    AS: 266683
                          IP: 45.227.196.0/22
                          IP: 2803:c520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16412307 (0xfa6e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 12:11:53 2020 GMT
            Not After : Oct 22 18:19:27 2024 GMT
        Subject: CN=7ea7bd7ef6f4501f774846280928efc8eb14dfe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:3d:a3:42:ed:f8:90:ff:e2:d5:57:cf:64:
                    0c:93:55:18:88:e2:c1:f2:51:b2:3d:80:82:a1:27:
                    47:45:86:de:a0:7b:dc:84:7d:ff:63:e5:44:8e:d9:
                    0e:b3:31:aa:f9:4f:67:af:02:89:ff:4b:64:67:d5:
                    b6:f1:c7:87:b8:f3:90:15:a8:bd:29:d7:7d:3b:12:
                    d3:c4:67:65:3a:1d:a9:ba:ce:ca:0c:0e:6f:60:ce:
                    d0:c6:b0:14:93:c0:c3:02:83:57:80:5b:50:02:da:
                    bb:f3:0d:23:b0:89:c1:49:b5:3f:c1:7d:73:3d:15:
                    5e:ce:e8:10:12:28:f2:f7:89:00:7f:18:6a:6b:46:
                    ba:df:86:15:4c:3a:19:38:83:da:4d:72:1c:41:f8:
                    53:49:ae:29:e0:86:ef:40:2f:68:db:fa:10:87:0b:
                    d8:b9:47:96:37:8a:90:f4:46:57:e7:44:f3:52:33:
                    63:40:b7:f9:ce:87:e1:47:75:64:58:5f:ea:e2:30:
                    d7:0c:5f:95:7e:ec:6a:f9:12:fc:f2:f9:d1:76:5b:
                    e2:1d:cd:cb:a8:99:4c:b9:98:e4:dc:03:7a:34:73:
                    30:aa:24:1f:db:eb:db:f6:0a:94:eb:4e:82:6d:5c:
                    f7:44:e1:39:49:70:b5:b8:1d:eb:33:d7:9b:6c:4e:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:74:C5:E9:50:E2:65:C0:6B:25:5F:B8:B4:C0:8A:D8:B0:3B:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.196.0/22
                IPv6:
                  2803:c520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266683

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:b7:d8:74:cf:ea:7b:c0:04:f0:25:80:bb:9f:9b:b9:f8:
         5d:8a:ca:19:8e:6b:42:f1:8e:55:ab:4d:e9:1d:99:7b:65:6f:
         b6:28:1d:28:76:f4:52:89:9f:c3:28:30:a8:a9:9d:a2:c3:c4:
         ad:95:04:36:0d:cd:c2:be:98:f5:3e:f4:b9:5d:3b:9f:4b:4a:
         4a:b9:5f:d9:b5:af:90:15:09:e7:fc:f7:d7:ae:0a:64:28:7b:
         63:3f:7c:29:6e:87:6a:f4:fa:cf:e0:37:8f:97:b7:05:98:f2:
         10:7b:30:60:83:6a:37:fd:f9:65:ca:f0:08:e3:bd:e9:14:0f:
         91:53:23:0f:50:fa:f5:8a:a9:18:bb:50:b6:d7:0b:33:3e:06:
         c1:1b:5c:be:a5:28:7b:cd:ec:52:60:8f:96:2a:c9:89:92:b4:
         aa:94:08:d7:db:b4:ab:60:5d:1b:bc:cf:3c:a3:47:ae:91:2a:
         11:e3:75:da:87:0c:40:04:ad:e1:20:89:01:44:70:d5:6e:b5:
         18:b5:08:12:32:60:fb:20:f0:13:d6:bb:71:4e:2d:3e:df:b8:
         50:85:d1:89:7c:29:08:9f:de:b4:a1:fa:46:cc:d8:fd:84:9e:
         99:c5:53:01:3c:ce:ff:b4:ce:1a:e9:6c:9c:04:43:0d:4c:62:
         71:6f:5b:2f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPpukzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDkyMjEyMTE1M1oXDTI0MTAyMjE4MTky
N1owMzExMC8GA1UEAxMoN2VhN2JkN2VmNmY0NTAxZjc3NDg0NjI4MDkyOGVmYzhl
YjE0ZGZlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxUPaNC7fiQ
/+LVV89kDJNVGIjiwfJRsj2AgqEnR0WG3qB73IR9/2PlRI7ZDrMxqvlPZ68Cif9L
ZGfVtvHHh7jzkBWovSnXfTsS08RnZTodqbrOygwOb2DO0MawFJPAwwKDV4BbUALa
u/MNI7CJwUm1P8F9cz0VXs7oEBIo8veJAH8YamtGut+GFUw6GTiD2k1yHEH4U0mu
KeCG70AvaNv6EIcL2LlHljeKkPRGV+dE81IzY0C3+c6H4Ud1ZFhf6uIw1wxflX7s
avkS/PL50XZb4h3Ny6iZTLmY5NwDejRzMKokH9vr2/YKlOtOgm1c90ThOUlwtbgd
6zPXm2xOaMkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBR5f3TF6VDiZcBrJV+4tMCK
2LA7uzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85YzQ1ODZkZS05ZDRl
LTQ0NDYtOTJiMS01ZjY0YzcxN2RjNGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWM0NTg2ZGUtOWQ0ZS00
NDQ2LTkyYjEtNWY2NGM3MTdkYzRlLzdlYTdiZDdlZjZmNDUwMWY3NzQ4NDYyODA5
MjhlZmM4ZWIxNGRmZTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3jxDANBAIAAjAHAwUAKAPFIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEbswDQYJKoZIhvcNAQELBQADggEBALi5
t9h0z+p7wATwJYC7n5u5+F2KyhmOa0LxjlWrTekdmXtlb7YoHSh29FKJn8MoMKip
naLDxK2VBDYNzcK+mPU+9LldO59LSkq5X9m1r5AVCef899euCmQoe2M/fCluh2r0
+s/gN4+XtwWY8hB7MGCDajf9+WXK8AjjvekUD5FTIw9Q+vWKqRi7ULbXCzM+BsEb
XL6lKHvN7FJgj5YqyYmStKqUCNfbtKtgXRu8zzyjR66RKhHjddqHDEAEreEgiQFE
cNVutRi1CBIyYPsg8BPWu3FOLT7fuFCF0Yl8KQif3rSh+kbM2P2EnpnFUwE8zv+0
zhrpbJwEQw1MYnFvWy8=
-----END CERTIFICATE-----