Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer
File:                     99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer (raw, json)
Hash identifier:          zFizbYC5XEOV1BhVd0zQxjMSkWvdaw6IhW3/N1OI0IM=
Subject key identifier:   52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED51C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2020 13:52:57 +0000
Certificate not after:    Wed 10 Jul 2024 23:01:53 +0000
Subordinate resources:    AS: 271840
                          IP: 45.183.136.0/22
                          IP: 2803:fd60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15552960 (0xed51c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  6 13:52:57 2020 GMT
            Not After : Jul 10 23:01:53 2024 GMT
        Subject: CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:9d:ec:d3:5e:95:10:2b:45:26:7f:42:e3:
                    42:1a:80:c2:66:1a:00:e7:17:1b:c0:95:4c:44:10:
                    b0:70:20:e2:4b:5c:fa:1c:fc:68:29:63:c1:88:69:
                    62:4d:61:99:b6:4c:cf:5d:82:2d:00:50:d1:f8:c9:
                    70:31:b3:95:68:1c:0b:48:b3:10:5e:c7:e2:7d:36:
                    10:cb:0a:10:9b:d8:c2:93:5d:8a:66:57:f5:91:af:
                    a6:10:d4:90:c4:29:c2:8f:f0:d2:d9:33:e9:70:5d:
                    c0:88:36:2d:64:0c:0b:82:c3:fa:5f:57:6b:ae:ce:
                    a9:66:dd:08:b7:86:09:7a:4c:6b:17:3f:89:bc:99:
                    06:da:27:ce:96:78:3b:b2:a9:98:80:8c:52:15:ea:
                    0c:4c:ff:6d:fd:b8:5c:bf:dd:42:67:e1:c5:f0:60:
                    a7:70:18:f5:da:43:78:2a:5e:c1:d6:a3:3b:76:8e:
                    92:12:3a:f2:34:fc:fa:f3:27:ed:62:dd:0b:43:77:
                    fb:0e:31:d5:e6:d6:06:24:24:de:9c:4f:78:a8:09:
                    1b:cc:f0:c4:52:20:c2:98:a0:cc:c8:2e:e8:74:f6:
                    ea:b9:1d:7b:f8:13:61:eb:dc:ea:85:54:14:cf:3a:
                    64:0b:3d:e0:45:b4:3a:75:a6:fb:aa:0b:e3:53:b8:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.136.0/22
                IPv6:
                  2803:fd60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271840

    Signature Algorithm: sha256WithRSAEncryption
         75:98:da:c2:2f:05:de:d4:6c:88:fe:83:66:fc:85:f2:b8:be:
         93:72:ef:64:27:d2:f2:2d:4a:84:50:d8:5b:79:01:ee:05:22:
         ca:96:e6:10:28:9b:db:ad:bf:fd:a2:cc:e8:d3:08:c2:d1:47:
         dd:d4:55:18:66:69:92:b6:d9:9f:ee:96:19:49:80:23:88:4c:
         bc:8e:9b:fc:75:47:fa:f0:38:0e:f1:9f:e1:5e:1e:c4:c6:8f:
         e2:53:d1:e1:e7:7b:f2:ce:0c:9b:10:c7:58:aa:b0:d3:90:b7:
         07:09:6c:00:ab:49:90:69:e9:88:47:bc:be:41:ed:28:eb:ab:
         d9:fa:3d:28:07:ea:ed:b3:02:ad:3d:e9:25:eb:26:84:31:c1:
         24:90:84:79:57:7a:a0:ed:d5:62:bb:55:3a:ae:dc:6f:82:c4:
         2c:10:f8:9e:e0:6d:91:b9:3a:10:a7:6b:6e:4a:66:6e:9b:55:
         1d:9c:59:7e:e8:f8:93:95:a3:e2:4f:e4:d4:f1:5d:17:eb:9e:
         c9:bb:8b:89:3c:4b:9e:08:06:60:2a:e3:67:5b:b7:00:0b:fe:
         04:29:7e:1f:63:49:d7:c7:7d:18:df:33:8c:7e:a6:79:58:a9:
         5d:f1:b9:2d:97:44:30:ac:56:45:0d:13:be:e1:c4:95:ad:c0:
         64:cd:9d:65
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO1RwDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDEwNjEzNTI1N1oXDTI0MDcxMDIzMDE1
M1owMzExMC8GA1UEAxMoOTk0ODk0NzBhN2M0MWI3Yjk5NTk3MWZmYjJmNmUyZDdk
MjI1MmExYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIK9nezTXpUQ
K0Umf0LjQhqAwmYaAOcXG8CVTEQQsHAg4ktc+hz8aCljwYhpYk1hmbZMz12CLQBQ
0fjJcDGzlWgcC0izEF7H4n02EMsKEJvYwpNdimZX9ZGvphDUkMQpwo/w0tkz6XBd
wIg2LWQMC4LD+l9Xa67OqWbdCLeGCXpMaxc/ibyZBtonzpZ4O7KpmICMUhXqDEz/
bf24XL/dQmfhxfBgp3AY9dpDeCpewdajO3aOkhI68jT8+vMn7WLdC0N3+w4x1ebW
BiQk3pxPeKgJG8zwxFIgwpigzMgu6HT26rkde/gTYevc6oVUFM86ZAs94EW0OnWm
+6oL41O4/WMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRShchuNjHwSZiW9PWsRV0+
DFeOhzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMDM3YTBlOC0wNjA3
LTQyODgtODcyMi1lODhiNGMwZmI0NDcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzAzN2EwZTgtMDYwNy00
Mjg4LTg3MjItZTg4YjRjMGZiNDQ3Lzk5NDg5NDcwYTdjNDFiN2I5OTU5NzFmZmIy
ZjZlMmQ3ZDIyNTJhMWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi23iDANBAIAAjAHAwUAKAP9YDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJeAwDQYJKoZIhvcNAQELBQADggEBAHWY
2sIvBd7UbIj+g2b8hfK4vpNy72Qn0vItSoRQ2Ft5Ae4FIsqW5hAom9utv/2izOjT
CMLRR93UVRhmaZK22Z/ulhlJgCOITLyOm/x1R/rwOA7xn+FeHsTGj+JT0eHne/LO
DJsQx1iqsNOQtwcJbACrSZBp6YhHvL5B7Sjrq9n6PSgH6u2zAq096SXrJoQxwSSQ
hHlXeqDt1WK7VTqu3G+CxCwQ+J7gbZG5OhCna25KZm6bVR2cWX7o+JOVo+JP5NTx
XRfrnsm7i4k8S54IBmAq42dbtwAL/gQpfh9jSdfHfRjfM4x+pnlYqV3xuS2XRDCs
VkUNE77hxJWtwGTNnWU=
-----END CERTIFICATE-----