Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer
File:                     9f4add842c04cc0e056fa508d773c646d1b9f40c.cer (raw, json)
Hash identifier:          iPT1jFaLjBeb/FhPADKLdVMT1bFXInh1R+OIYnoD5oY=
Subject key identifier:   64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCE37D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/9f4add842c04cc0e056fa508d773c646d1b9f40c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 18 Jan 2020 20:26:00 +0000
Certificate not after:    Fri 15 Nov 2024 17:16:03 +0000
Subordinate resources:    IP: 2801:10a::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16573309 (0xfce37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 20:26:00 2020 GMT
            Not After : Nov 15 17:16:03 2024 GMT
        Subject: CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:f4:b7:49:a1:6a:82:64:1a:44:89:20:88:
                    2d:3e:bf:7d:41:59:b4:80:0e:c1:92:cc:ee:df:d1:
                    8f:63:82:33:94:07:4b:27:39:a6:a5:11:2f:8f:56:
                    66:d4:52:3c:51:dd:da:af:b1:6b:30:fd:c1:9b:2c:
                    2d:20:5f:f6:1f:27:6c:fd:d0:f4:a0:f4:82:e2:93:
                    a3:da:ce:bf:2f:79:b5:db:09:f5:23:5a:05:12:67:
                    f3:24:83:0d:d7:44:81:52:ee:41:ef:b7:cd:8f:c4:
                    82:99:e5:48:e6:8e:0f:3b:b3:db:93:e6:df:4c:c2:
                    70:ee:c2:a6:99:81:8d:6f:28:57:20:eb:ff:5d:af:
                    c1:af:05:a7:6d:19:98:da:77:98:3e:98:9b:f6:dc:
                    ed:76:d1:6d:17:8a:25:fd:91:c6:8f:ca:f4:42:1f:
                    ee:1a:d7:57:5c:50:4d:44:4e:0b:43:ee:1d:fa:5c:
                    e4:cf:e3:7a:4c:db:ec:03:1a:f3:03:6d:e8:d3:77:
                    e9:02:c3:52:ac:06:bb:15:91:f5:1b:52:a9:b3:2d:
                    28:48:40:f1:8e:d8:ae:6e:4f:71:da:5e:75:cd:e1:
                    93:a6:97:39:e6:53:da:1a:e2:da:98:f6:d1:44:96:
                    d8:52:50:46:61:19:5c:a9:55:eb:eb:3e:8e:19:71:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/9f4add842c04cc0e056fa508d773c646d1b9f40c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:fc:a2:9d:48:85:c5:b5:05:31:29:c1:b3:be:c2:cf:80:8e:
         37:b0:14:15:80:46:47:06:3e:c8:d9:71:ea:76:a6:b3:64:22:
         4d:a2:7e:53:69:c8:f3:98:46:e6:8c:87:ed:9a:6e:29:09:19:
         3b:d4:95:48:f6:52:7d:78:3d:cb:43:bb:f7:04:42:10:97:b6:
         c4:a2:1b:ee:bf:16:4b:e5:02:e3:00:80:7c:48:38:ad:b3:52:
         31:e6:d4:2b:1b:6e:75:67:65:c2:93:5b:f5:4a:fb:b9:c7:24:
         e8:42:e6:10:f5:f3:9d:21:ef:2e:2a:68:d8:96:1b:c3:0c:03:
         b4:b9:b1:8b:9b:d3:a6:2e:d1:a8:63:6e:d5:53:6e:1e:72:70:
         c4:b1:35:ec:31:28:ef:77:43:67:22:3c:38:f7:08:54:42:e3:
         35:e3:57:33:65:a2:50:6e:24:c5:2c:32:7f:ac:92:9c:39:e4:
         db:99:78:45:8c:ac:85:fb:b2:f0:08:55:4a:1d:2a:c7:56:99:
         1a:11:9a:45:fb:91:18:57:9b:af:f8:70:6b:19:9d:3f:f4:1c:
         92:d9:60:be:cf:98:b6:dc:82:4f:67:db:a3:9b:52:9f:0a:2b:
         d2:41:5c:d8:90:2b:ac:e0:27:09:a4:90:22:1a:71:43:dc:77:
         f1:86:a8:99
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPzjfTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDExODIwMjYwMFoXDTI0MTExNTE3MTYw
M1owMzExMC8GA1UEAxMoOWY0YWRkODQyYzA0Y2MwZTA1NmZhNTA4ZDc3M2M2NDZk
MWI5ZjQwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKma9LdJoWqC
ZBpEiSCILT6/fUFZtIAOwZLM7t/Rj2OCM5QHSyc5pqURL49WZtRSPFHd2q+xazD9
wZssLSBf9h8nbP3Q9KD0guKTo9rOvy95tdsJ9SNaBRJn8ySDDddEgVLuQe+3zY/E
gpnlSOaODzuz25Pm30zCcO7CppmBjW8oVyDr/12vwa8Fp20ZmNp3mD6Ym/bc7XbR
bReKJf2Rxo/K9EIf7hrXV1xQTUROC0PuHfpc5M/jekzb7AMa8wNt6NN36QLDUqwG
uxWR9RtSqbMtKEhA8Y7Yrm5Pcdpedc3hk6aXOeZT2hri2pj20USW2FJQRmEZXKlV
6+s+jhlxbnkCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBRkCZse7J/JFMkb4QIoTNnG
Ss6z1TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNWU0NmUxNi00NTdh
LTQ5ZGQtOWQ0My1iMDgwZjQyNTU1YjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDVlNDZlMTYtNDU3YS00
OWRkLTlkNDMtYjA4MGY0MjU1NWI0LzlmNGFkZDg0MmMwNGNjMGUwNTZmYTUwOGQ3
NzNjNjQ2ZDFiOWY0MGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAQoAADANBgkqhkiG9w0BAQsF
AAOCAQEAkPyinUiFxbUFMSnBs77Cz4CON7AUFYBGRwY+yNlx6nams2QiTaJ+U2nI
85hG5oyH7ZpuKQkZO9SVSPZSfXg9y0O79wRCEJe2xKIb7r8WS+UC4wCAfEg4rbNS
MebUKxtudWdlwpNb9Ur7ucck6ELmEPXznSHvLipo2JYbwwwDtLmxi5vTpi7RqGNu
1VNuHnJwxLE17DEo73dDZyI8OPcIVELjNeNXM2WiUG4kxSwyf6ySnDnk25l4RYys
hfuy8AhVSh0qx1aZGhGaRfuRGFebr/hwaxmdP/Qcktlgvs+YttyCT2fbo5tSnwor
0kFc2JArrOAnCaSQIhpxQ9x38YaomQ==
-----END CERTIFICATE-----