Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a49fdf5c435c9fbcfb4b67172f731850c567f0a7.cer
File:                     a49fdf5c435c9fbcfb4b67172f731850c567f0a7.cer (raw, json)
Hash identifier:          aLZWx0+CZl9fVKvlNFxE2ex3lzwO+AZ9EyQycWg63EM=
Subject key identifier:   36:4F:40:23:FD:4E:27:BE:AA:29:9E:8F:E8:B3:B1:A2:DF:BE:9B:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC0B90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/a49fdf5c435c9fbcfb4b67172f731850c567f0a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Oct 2019 20:27:17 +0000
Certificate not after:    Wed 06 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 264853
                          IP: 170.83.240.0/22
                          IP: 2803:f2c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16518032 (0xfc0b90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  8 20:27:17 2019 GMT
            Not After : Nov  6 04:00:00 2024 GMT
        Subject: CN=a49fdf5c435c9fbcfb4b67172f731850c567f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:c0:9c:bf:5e:51:87:72:34:11:0d:f3:50:
                    2b:83:76:f6:9a:f4:a6:7b:9d:7c:f7:a0:36:9c:0c:
                    25:50:e9:1b:06:40:3f:47:ae:a0:55:95:dc:e6:9e:
                    b8:d9:38:69:0f:3b:fb:d0:12:f0:c4:b4:27:50:54:
                    e6:f7:c5:77:47:b0:3a:b1:d3:6f:d2:0b:de:d9:9e:
                    7c:28:d1:fd:99:78:31:0b:02:68:a2:18:2e:56:72:
                    93:3c:42:34:77:37:8f:a5:76:12:37:22:8c:f9:11:
                    eb:ff:92:5e:2d:3d:92:c0:1b:8b:a8:8f:1a:bd:ff:
                    1f:8c:a9:66:85:22:c6:0b:36:a0:43:bd:fa:95:4d:
                    82:94:83:9b:5b:4f:62:ec:e2:1a:a5:fd:99:66:40:
                    32:a0:46:ae:1d:96:ff:68:49:8b:69:02:84:fd:24:
                    20:ad:c1:ae:22:36:f8:2f:8d:66:10:e1:96:70:83:
                    a2:90:64:b7:be:fc:85:7c:ac:a1:8a:11:4b:41:56:
                    26:75:45:fa:e1:58:92:78:52:b7:a3:38:59:80:4d:
                    ef:3b:e2:9a:27:7a:51:68:5b:83:d3:d2:37:e9:3b:
                    9f:f3:30:bc:8c:31:5e:f6:0e:03:b4:ac:1c:a3:b5:
                    1c:d5:6e:e0:65:aa:c4:cf:55:8d:40:aa:30:a9:e7:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:40:23:FD:4E:27:BE:AA:29:9E:8F:E8:B3:B1:A2:DF:BE:9B:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/a49fdf5c435c9fbcfb4b67172f731850c567f0a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.240.0/22
                IPv6:
                  2803:f2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264853

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:3c:da:75:b3:7e:29:0d:32:d4:c7:94:5f:98:09:b7:1e:
         c7:33:48:4f:99:4d:5f:ef:4b:5e:10:c4:2f:21:51:40:1d:87:
         9f:45:35:04:a4:7a:a7:94:83:c2:a9:17:86:8d:98:53:bf:47:
         52:b5:f1:88:c5:42:a9:7b:57:44:84:20:c7:8f:c7:80:2e:15:
         9c:03:9c:37:b3:ec:9d:76:ab:85:83:12:be:50:7a:ea:bf:72:
         72:24:2d:6f:e8:26:66:42:c5:68:07:da:32:1e:0f:1f:43:9f:
         dd:b7:60:eb:c2:a1:29:e0:3f:a2:33:94:b5:bc:28:4c:d8:4e:
         11:1d:88:2f:0c:f3:7f:22:cc:c7:b3:a7:73:3e:63:17:d7:4c:
         c8:87:0b:ef:51:4d:ed:63:9c:bb:91:0d:48:f4:6b:94:ab:be:
         7e:ee:85:af:3d:78:af:0e:85:95:6c:e6:0d:6c:50:1b:84:bb:
         1a:88:fc:7c:82:b2:0a:e0:71:0e:ab:b0:ac:b1:58:02:e1:76:
         13:0e:7b:ca:2d:6e:16:32:f5:9b:9a:1e:25:be:d7:e2:71:93:
         c3:68:ad:e8:cd:a5:f2:18:1a:f3:d7:dd:9e:a8:fb:7b:99:01:
         a8:8d:a3:8b:fd:59:3a:d0:9f:53:6a:97:06:d5:cc:9f:44:2b:
         a4:0b:ed:dc
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPwLkDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTAwODIwMjcxN1oXDTI0MTEwNjA0MDAw
MFowMzExMC8GA1UEAxMoYTQ5ZmRmNWM0MzVjOWZiY2ZiNGI2NzE3MmY3MzE4NTBj
NTY3ZjBhNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9ywJy/XlGH
cjQRDfNQK4N29pr0pnudfPegNpwMJVDpGwZAP0euoFWV3OaeuNk4aQ87+9AS8MS0
J1BU5vfFd0ewOrHTb9IL3tmefCjR/Zl4MQsCaKIYLlZykzxCNHc3j6V2EjcijPkR
6/+SXi09ksAbi6iPGr3/H4ypZoUixgs2oEO9+pVNgpSDm1tPYuziGqX9mWZAMqBG
rh2W/2hJi2kChP0kIK3BriI2+C+NZhDhlnCDopBkt778hXysoYoRS0FWJnVF+uFY
knhSt6M4WYBN7zvimid6UWhbg9PSN+k7n/MwvIwxXvYOA7SsHKO1HNVu4GWqxM9V
jUCqMKnns9kCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQ2T0Aj/U4nvqopno/os7Gi
376blTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NmRhMjllOC1mMDM4
LTQ0M2ItOThkZS04ZTgzYjA5ODVkMjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTZkYTI5ZTgtZjAzOC00
NDNiLTk4ZGUtOGU4M2IwOTg1ZDI3L2E0OWZkZjVjNDM1YzlmYmNmYjRiNjcxNzJm
NzMxODUwYzU2N2YwYTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpT8DANBAIAAjAHAwUAKAPywDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECpUwDQYJKoZIhvcNAQELBQADggEBAHtk
PNp1s34pDTLUx5RfmAm3HsczSE+ZTV/vS14QxC8hUUAdh59FNQSkeqeUg8KpF4aN
mFO/R1K18YjFQql7V0SEIMePx4AuFZwDnDez7J12q4WDEr5Qeuq/cnIkLW/oJmZC
xWgH2jIeDx9Dn923YOvCoSngP6IzlLW8KEzYThEdiC8M838izMezp3M+YxfXTMiH
C+9RTe1jnLuRDUj0a5Srvn7uha89eK8OhZVs5g1sUBuEuxqI/HyCsgrgcQ6rsKyx
WALhdhMOe8otbhYy9ZuaHiW+1+Jxk8NorejNpfIYGvPX3Z6o+3uZAaiNo4v9WTrQ
n1NqlwbVzJ9EK6QL7dw=
-----END CERTIFICATE-----