Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/811ec91611079aa974294c3db5fa3ab9e67a61af.cer
File:                     811ec91611079aa974294c3db5fa3ab9e67a61af.cer (raw, json)
Hash identifier:          EK6a9OSwsV3H9wCHDOhQYOhIDJFxrHRqrPO9YQsq3z4=
Subject key identifier:   6A:FA:C0:35:0F:0E:79:12:40:0A:B8:E3:B8:55:3A:33:8E:40:54:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0F9E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4460b283-322a-4719-b76f-eed9423a4dcb/811ec91611079aa974294c3db5fa3ab9e67a61af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4460b283-322a-4719-b76f-eed9423a4dcb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Jun 2020 17:53:38 +0000
Certificate not after:    Mon 08 Apr 2024 18:44:55 +0000
Subordinate resources:    AS: 270028
                          IP: 200.11.33.0/24
                          IP: 2801:13a::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14744038 (0xe0f9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 17:53:38 2020 GMT
            Not After : Apr  8 18:44:55 2024 GMT
        Subject: CN=811ec91611079aa974294c3db5fa3ab9e67a61af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:66:3b:3c:77:54:be:6e:cb:33:9a:01:96:
                    f7:ae:61:db:6d:66:69:61:63:b8:63:df:64:5f:98:
                    b2:d8:dd:37:dc:54:39:43:2d:89:97:49:be:29:e6:
                    88:36:e1:7c:04:75:23:06:fc:9a:62:0e:f9:4d:3c:
                    eb:82:6d:8c:96:ea:60:f3:db:82:b5:8a:c7:b3:8b:
                    83:79:56:33:e5:c9:fe:07:28:fa:5c:15:58:89:2b:
                    65:69:ba:4c:43:50:04:9c:4b:b2:27:d9:2a:1c:c1:
                    95:98:14:af:91:af:5b:56:da:ef:3b:82:d1:1a:41:
                    26:bd:60:94:63:0b:65:27:5e:ce:8a:a4:ad:ce:0e:
                    f8:c9:05:b2:d2:1d:0c:20:13:d3:2f:52:d3:89:e5:
                    97:74:1a:f0:86:44:2f:64:92:9a:e6:ba:1f:a5:66:
                    c0:2b:3d:93:f8:8d:49:0d:b2:4e:05:f8:3d:78:49:
                    71:43:ce:76:a2:5d:5b:a5:93:92:da:d4:18:d7:7f:
                    cc:c1:15:71:74:e7:75:eb:04:ac:af:92:e7:4b:dd:
                    44:fd:2e:f2:5c:e7:5c:35:35:48:f3:a9:de:d2:57:
                    2e:de:4d:b4:8f:f4:0f:9f:20:e0:d8:10:16:b9:d7:
                    1a:b8:7d:d1:ef:92:f8:fb:8a:df:b3:b6:a6:da:0f:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FA:C0:35:0F:0E:79:12:40:0A:B8:E3:B8:55:3A:33:8E:40:54:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4460b283-322a-4719-b76f-eed9423a4dcb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4460b283-322a-4719-b76f-eed9423a4dcb/811ec91611079aa974294c3db5fa3ab9e67a61af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.33.0/24
                IPv6:
                  2801:13a::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270028

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:c8:eb:b1:7a:4c:78:62:7d:23:65:2e:a7:6f:44:cf:b2:
         dc:58:e7:11:ed:35:a2:8d:26:7f:e4:e3:71:a8:a1:63:ca:77:
         36:a6:fe:32:61:9f:b2:cb:dd:97:70:f0:a4:b6:ca:a2:99:e0:
         06:b4:48:31:97:6d:5c:6a:aa:e2:ad:d0:4f:79:bd:4e:f2:1c:
         82:b0:14:bd:06:28:48:e4:e1:4f:bd:6e:b1:9e:80:4b:fc:02:
         9a:c4:72:04:15:6a:7f:fb:1a:b3:14:60:36:4d:05:b8:2c:09:
         dc:24:64:af:79:54:e7:4f:4c:53:fd:81:90:21:90:f1:7b:db:
         f2:47:ed:6d:7e:50:5e:c8:6e:b8:de:3d:f4:3c:7a:5f:e7:ed:
         44:be:1d:80:68:a2:be:43:6f:b5:2c:39:a5:1d:81:23:af:87:
         f1:fb:8c:5b:0f:2f:da:d4:3c:02:f7:78:01:34:8e:55:a1:83:
         3c:da:17:8c:00:8a:42:aa:a5:06:30:9c:33:45:63:ce:b2:c8:
         fa:94:23:15:c4:de:c5:ca:a8:1e:b3:24:4f:54:dc:0f:e9:d0:
         a6:15:76:e4:b7:9b:f8:10:08:6b:2f:1a:2b:15:6c:a3:31:e4:
         02:8a:1e:62:6b:65:d0:90:53:50:36:13:b6:cf:bd:94:cb:01:
         a3:78:b3:d4
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOD55jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDYzMDE3NTMzOFoXDTI0MDQwODE4NDQ1
NVowMzExMC8GA1UEAxMoODExZWM5MTYxMTA3OWFhOTc0Mjk0YzNkYjVmYTNhYjll
NjdhNjFhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAICTZjs8d1S+
bsszmgGW965h221maWFjuGPfZF+YstjdN9xUOUMtiZdJvinmiDbhfAR1Iwb8mmIO
+U0864JtjJbqYPPbgrWKx7OLg3lWM+XJ/gco+lwVWIkrZWm6TENQBJxLsifZKhzB
lZgUr5GvW1ba7zuC0RpBJr1glGMLZSdezoqkrc4O+MkFstIdDCAT0y9S04nll3Qa
8IZEL2SSmua6H6VmwCs9k/iNSQ2yTgX4PXhJcUPOdqJdW6WTktrUGNd/zMEVcXTn
desErK+S50vdRP0u8lznXDU1SPOp3tJXLt5NtI/0D58g4NgQFrnXGrh90e+S+PuK
37O2ptoPnN8CAwEAAaOCAwswggMHMB0GA1UdDgQWBBRq+sA1Dw55EkAKuOO4VToz
jkBUWDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80NDYwYjI4My0zMjJh
LTQ3MTktYjc2Zi1lZWQ5NDIzYTRkY2IvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDQ2MGIyODMtMzIyYS00
NzE5LWI3NmYtZWVkOTQyM2E0ZGNiLzgxMWVjOTE2MTEwNzlhYTk3NDI5NGMzZGI1
ZmEzYWI5ZTY3YTYxYWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgLITAPBAIAAjAJAwcEKAEBOgAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQezDANBgkqhkiG9w0BAQsFAAOCAQEA
rOfI67F6THhifSNlLqdvRM+y3FjnEe01oo0mf+TjcaihY8p3Nqb+MmGfssvdl3Dw
pLbKopngBrRIMZdtXGqq4q3QT3m9TvIcgrAUvQYoSOThT71usZ6AS/wCmsRyBBVq
f/sasxRgNk0FuCwJ3CRkr3lU509MU/2BkCGQ8Xvb8kftbX5QXshuuN499Dx6X+ft
RL4dgGiivkNvtSw5pR2BI6+H8fuMWw8v2tQ8Avd4ATSOVaGDPNoXjACKQqqlBjCc
M0VjzrLI+pQjFcTexcqoHrMkT1TcD+nQphV25Leb+BAIay8aKxVsozHkAooeYmtl
0JBTUDYTts+9lMsBo3iz1A==
-----END CERTIFICATE-----