Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer
File:                     a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer (raw, json)
Hash identifier:          QHVBfHcSKOyJXGn54vIumN+0Ej5TTaiIKVqBw9uNWjs=
Subject key identifier:   23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8F957
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 18 Jan 2020 02:01:06 +0000
Certificate not after:    Fri 11 Oct 2024 07:06:08 +0000
Subordinate resources:    AS: 269872
                          IP: 45.189.200.0/22
                          IP: 2803:28e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16316759 (0xf8f957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 02:01:06 2020 GMT
            Not After : Oct 11 07:06:08 2024 GMT
        Subject: CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:c8:df:35:70:7b:08:68:b7:ef:dc:25:31:
                    98:46:9b:2e:63:37:33:15:6e:0b:4c:41:dc:be:26:
                    ef:1d:ba:ad:7f:35:88:be:70:34:5d:35:04:2b:73:
                    c2:4c:ec:9d:f3:a0:7b:94:7a:ac:ea:36:11:04:b0:
                    98:a0:99:13:1e:54:31:74:cb:1c:45:80:ec:3c:4e:
                    fd:d9:a5:b5:43:2e:de:94:ae:91:1b:0c:32:43:b3:
                    ed:65:bb:92:24:0b:fc:22:9b:ae:26:54:b2:38:14:
                    1a:ba:38:3d:42:e4:d9:48:21:74:eb:6d:b8:a9:17:
                    3f:94:0b:03:ec:6d:03:fc:3a:11:06:69:07:c7:65:
                    03:7c:ac:72:1a:47:e2:e6:32:50:6a:97:66:57:31:
                    26:b4:23:a3:11:c3:e6:05:5a:d4:7f:d4:44:6a:17:
                    3b:64:13:3e:e2:42:d4:8d:23:a5:7c:43:af:dc:76:
                    bd:a0:d3:70:54:4b:88:18:28:90:80:75:92:e2:88:
                    9b:da:57:e5:c2:66:32:ab:29:a1:98:94:9f:9c:71:
                    d2:e5:d8:1e:fc:33:f2:7f:64:21:df:58:b6:17:ac:
                    bd:ba:f7:5b:b6:e5:e1:dc:4b:bd:4e:09:7f:f9:02:
                    ee:8c:a0:04:30:ef:25:e5:be:88:3f:5d:8f:78:a0:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.200.0/22
                IPv6:
                  2803:28e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269872

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:cd:a9:eb:f1:ea:31:3d:ac:c7:85:6f:fe:de:3c:e8:cf:
         e6:5c:5e:2e:6b:85:1c:ab:30:6b:28:7d:77:aa:ec:fe:56:b9:
         38:58:de:6f:fe:34:06:56:10:34:3f:7f:60:37:1e:0f:30:91:
         a7:e4:64:08:2d:c9:01:f0:8b:64:54:86:db:9b:4f:d3:91:b9:
         1a:ce:4b:d2:18:20:26:d5:0b:96:e8:08:9e:0c:0b:c0:ab:ab:
         c0:a9:1e:90:e0:0f:27:6d:64:1c:20:8e:03:93:63:d6:00:a5:
         28:bc:30:4b:f0:d7:64:64:60:24:c8:3a:5f:56:9e:27:b0:d2:
         91:77:b5:4b:59:d2:1f:a8:68:b0:dd:61:f3:db:66:30:c3:a5:
         a9:42:21:f4:74:6f:13:43:57:83:f3:24:ee:43:1e:ca:96:9b:
         7b:e4:bc:53:07:04:e1:b2:68:6e:80:4c:00:39:cd:83:cd:70:
         0c:b7:b8:d3:ff:50:65:2f:b0:dd:52:96:e8:67:13:21:32:9a:
         15:02:22:c8:2d:99:9d:e4:13:b2:1b:3c:c9:7d:9a:2c:75:84:
         78:f5:00:89:4a:48:47:55:5c:65:0e:de:7e:a5:21:03:a0:45:
         d4:94:5f:98:c6:af:4b:72:bf:7c:c0:36:24:95:e9:8a:b3:84:
         c2:2d:ad:e1
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPj5VzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDExODAyMDEwNloXDTI0MTAxMTA3MDYw
OFowMzExMC8GA1UEAxMoYTAzYTNmNjllOWE0NGFhMTYyOTgxNGFhMjIzMzI0ZTBh
NjNmYTNmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKAiyN81cHsI
aLfv3CUxmEabLmM3MxVuC0xB3L4m7x26rX81iL5wNF01BCtzwkzsnfOge5R6rOo2
EQSwmKCZEx5UMXTLHEWA7DxO/dmltUMu3pSukRsMMkOz7WW7kiQL/CKbriZUsjgU
Gro4PULk2UghdOttuKkXP5QLA+xtA/w6EQZpB8dlA3yschpH4uYyUGqXZlcxJrQj
oxHD5gVa1H/URGoXO2QTPuJC1I0jpXxDr9x2vaDTcFRLiBgokIB1kuKIm9pX5cJm
MqspoZiUn5xx0uXYHvwz8n9kId9Ythesvbr3W7bl4dxLvU4Jf/kC7oygBDDvJeW+
iD9dj3igaD0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQj5xy/9v0ItYCBY1s/XjJZ
ADncmjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83OTEyZmM5Yy0wODZj
LTQ1OGUtYTk3Yi00YWQxNWM1MmJjNWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzkxMmZjOWMtMDg2Yy00
NThlLWE5N2ItNGFkMTVjNTJiYzViL2EwM2EzZjY5ZTlhNDRhYTE2Mjk4MTRhYTIy
MzMyNGUwYTYzZmEzZjIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi29yDANBAIAAjAHAwUAKAMo4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHjAwDQYJKoZIhvcNAQELBQADggEBABpe
zanr8eoxPazHhW/+3jzoz+ZcXi5rhRyrMGsofXeq7P5WuThY3m/+NAZWEDQ/f2A3
Hg8wkafkZAgtyQHwi2RUhtubT9ORuRrOS9IYICbVC5boCJ4MC8Crq8CpHpDgDydt
ZBwgjgOTY9YApSi8MEvw12RkYCTIOl9Wniew0pF3tUtZ0h+oaLDdYfPbZjDDpalC
IfR0bxNDV4PzJO5DHsqWm3vkvFMHBOGyaG6ATAA5zYPNcAy3uNP/UGUvsN1Sluhn
EyEymhUCIsgtmZ3kE7IbPMl9mix1hHj1AIlKSEdVXGUO3n6lIQOgRdSUX5jGr0ty
v3zANiSV6YqzhMItreE=
-----END CERTIFICATE-----