Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cbedb1b7c3c0e1bec94840ec455fd53eb66f40f.cer
File:                     9cbedb1b7c3c0e1bec94840ec455fd53eb66f40f.cer (raw, json)
Hash identifier:          CqFlhY3i2PNKwUwfYc93dFymFPgvWuJRQOJFZNm7JX4=
Subject key identifier:   17:33:D2:FF:E4:0B:FC:0F:CB:66:62:96:D4:5A:55:67:2F:32:D7:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F27A14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/75574f13-9619-4a4a-a9a5-4f2ca7f9969e/9cbedb1b7c3c0e1bec94840ec455fd53eb66f40f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/75574f13-9619-4a4a-a9a5-4f2ca7f9969e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Nov 2020 14:57:47 +0000
Certificate not after:    Wed 21 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 262156
                          IP: 200.3.120.0/21
                          IP: 2801:0:220::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15890964 (0xf27a14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 14:57:47 2020 GMT
            Not After : Aug 21 05:00:00 2024 GMT
        Subject: CN=9cbedb1b7c3c0e1bec94840ec455fd53eb66f40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:2e:1d:a7:0f:2d:9a:fd:ce:ac:d9:b9:1e:
                    3f:d0:4a:c1:58:0c:f5:32:12:c6:fa:5f:6c:70:b5:
                    9f:ee:8d:9b:4c:ee:f6:d9:df:d5:cb:fe:c1:73:6c:
                    cf:b7:d5:2d:22:41:ec:1f:75:90:f7:29:28:0a:da:
                    8d:6c:43:a3:3f:80:b1:88:2e:06:55:d0:33:f6:d5:
                    22:8b:39:3e:b7:a7:f3:83:c1:d9:c8:a5:0a:b6:19:
                    31:22:68:83:6c:2f:6c:bf:6c:98:25:a8:93:c5:02:
                    6e:cc:5c:2d:fe:0d:72:dc:0a:b5:4f:1d:98:85:8d:
                    ae:23:3c:84:3d:72:dd:d4:36:a0:46:b8:a0:e2:7f:
                    8e:78:42:fc:f5:37:c0:5a:b5:4d:78:f7:4c:ff:2b:
                    0d:ca:83:38:a6:ab:bf:9f:5f:5f:6e:89:e7:33:d2:
                    47:56:06:d2:90:85:af:59:cb:1c:16:06:9d:93:40:
                    ba:a5:19:d9:09:e3:5a:1e:bc:5d:45:02:37:f7:49:
                    3e:37:87:1e:26:ef:fd:b7:16:87:b6:4a:83:95:ce:
                    d3:ca:10:62:3a:70:bb:fd:3d:d7:f0:2b:f7:b9:71:
                    c5:09:61:ed:a4:de:53:b1:a4:09:56:46:ab:b2:00:
                    8d:ca:54:b2:b5:eb:99:38:b9:ae:19:80:6a:82:ef:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:D2:FF:E4:0B:FC:0F:CB:66:62:96:D4:5A:55:67:2F:32:D7:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/75574f13-9619-4a4a-a9a5-4f2ca7f9969e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/75574f13-9619-4a4a-a9a5-4f2ca7f9969e/9cbedb1b7c3c0e1bec94840ec455fd53eb66f40f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.120.0/21
                IPv6:
                  2801:0:220::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262156

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:9b:2b:8d:4c:a7:8e:19:fc:62:a8:81:16:22:84:4e:23:
         95:8d:24:d1:cf:ff:67:35:17:1b:6f:cf:fd:da:cd:78:d8:dc:
         37:d4:31:46:80:7b:c3:0b:c4:b6:0b:19:af:80:93:3a:90:3c:
         3e:88:22:e8:8f:5e:6d:3a:d2:96:c1:73:f9:22:63:43:b3:d9:
         83:2e:52:8f:79:66:14:97:64:31:4c:93:94:e2:5d:0d:d3:c8:
         85:48:4d:5a:a4:c6:28:7f:a5:5c:7e:a3:47:3b:3d:e6:12:33:
         1e:ad:17:4c:f6:f3:85:ff:74:ae:b8:9a:0a:59:9a:aa:9a:35:
         70:a8:4d:70:c1:e1:3d:ab:0a:28:9c:6d:34:ba:66:aa:3f:fc:
         96:68:97:03:cb:65:80:fe:60:e6:14:d3:df:34:8a:72:c2:c4:
         a5:41:7a:25:75:43:61:f2:4b:58:af:a6:0e:a6:5b:e6:19:a1:
         38:68:ec:27:3d:70:af:92:61:d2:43:75:8f:db:8c:ca:57:a5:
         30:e0:02:ed:90:f7:24:57:83:a2:12:6c:30:74:68:e8:6f:d3:
         36:cf:5d:77:96:77:6f:3f:fd:44:33:1d:cb:e3:50:d3:52:c7:
         2d:3b:b9:bb:51:3b:62:73:6f:bf:2b:97:50:bc:ff:c8:54:a8:
         94:40:c5:e2
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAPJ6FDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTExMDE0NTc0N1oXDTI0MDgyMTA1MDAw
MFowMzExMC8GA1UEAxMoOWNiZWRiMWI3YzNjMGUxYmVjOTQ4NDBlYzQ1NWZkNTNl
YjY2ZjQwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7gLh2nDy2a
/c6s2bkeP9BKwVgM9TISxvpfbHC1n+6Nm0zu9tnf1cv+wXNsz7fVLSJB7B91kPcp
KArajWxDoz+AsYguBlXQM/bVIos5Pren84PB2cilCrYZMSJog2wvbL9smCWok8UC
bsxcLf4NctwKtU8dmIWNriM8hD1y3dQ2oEa4oOJ/jnhC/PU3wFq1TXj3TP8rDcqD
OKarv59fX26J5zPSR1YG0pCFr1nLHBYGnZNAuqUZ2QnjWh68XUUCN/dJPjeHHibv
/bcWh7ZKg5XO08oQYjpwu/091/Ar97lxxQlh7aTeU7GkCVZGq7IAjcpUsrXrmTi5
rhmAaoLvrtECAwEAAaOCAwswggMHMB0GA1UdDgQWBBQXM9L/5Av8D8tmYpbUWlVn
LzLXDTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NTU3NGYxMy05NjE5
LTRhNGEtYTlhNS00ZjJjYTdmOTk2OWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzU1NzRmMTMtOTYxOS00
YTRhLWE5YTUtNGYyY2E3Zjk5NjllLzljYmVkYjFiN2MzYzBlMWJlYzk0ODQwZWM0
NTVmZDUzZWI2NmY0MGYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8gDeDAPBAIAAjAJAwcEKAEAAAIg
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQADDANBgkqhkiG9w0BAQsFAAOCAQEA
CsebK41Mp44Z/GKogRYihE4jlY0k0c//ZzUXG2/P/drNeNjcN9QxRoB7wwvEtgsZ
r4CTOpA8Pogi6I9ebTrSlsFz+SJjQ7PZgy5Sj3lmFJdkMUyTlOJdDdPIhUhNWqTG
KH+lXH6jRzs95hIzHq0XTPbzhf90rriaClmaqpo1cKhNcMHhPasKKJxtNLpmqj/8
lmiXA8tlgP5g5hTT3zSKcsLEpUF6JXVDYfJLWK+mDqZb5hmhOGjsJz1wr5Jh0kN1
j9uMylelMOAC7ZD3JFeDohJsMHRo6G/TNs9dd5Z3bz/9RDMdy+NQ01LHLTu5u1E7
YnNvvyuXULz/yFSolEDF4g==
-----END CERTIFICATE-----