Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer
File:                     a5925846ddd27521ce64527a50820075bbf1e5b7.cer (raw, json)
Hash identifier:          7PbwkdTsVcasCliGXNeFm7qhThf03M+MJrlF5ysVOxw=
Subject key identifier:   77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6C665
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/a5925846ddd27521ce64527a50820075bbf1e5b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Aug 2020 12:29:45 +0000
Certificate not after:    Thu 23 May 2024 14:38:24 +0000
Subordinate resources:    IP: 45.181.44.0/22
                          IP: 2803:a160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15124069 (0xe6c665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 12:29:45 2020 GMT
            Not After : May 23 14:38:24 2024 GMT
        Subject: CN=a5925846ddd27521ce64527a50820075bbf1e5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:03:44:8c:13:3b:1b:04:0a:97:08:60:16:
                    55:fb:be:a6:fa:2c:1f:db:ca:67:fc:f4:2c:3a:88:
                    fc:34:71:11:e4:31:72:11:67:16:5e:82:e8:1b:9a:
                    7b:83:de:53:81:c1:5c:34:c1:e7:0b:0e:da:75:45:
                    14:79:f9:8d:65:c5:46:3b:9e:89:c7:aa:e8:66:47:
                    67:83:6c:7e:22:44:5f:45:c1:12:a7:2e:c3:75:82:
                    d7:02:b5:41:09:29:4b:de:12:9d:b5:db:e5:9a:40:
                    a3:a5:95:5e:11:af:d1:64:76:10:f3:10:58:e1:cf:
                    9c:26:97:c8:03:cc:ef:bf:09:53:47:e6:31:94:9f:
                    5e:c7:3b:17:43:67:a6:f1:53:ce:55:90:3e:88:1d:
                    28:b0:12:a6:1a:11:24:88:1a:07:82:2b:2a:ef:8f:
                    46:99:77:5b:85:3e:20:e0:3b:85:5d:c7:8b:5a:0d:
                    be:c6:a5:ff:d4:90:5c:48:63:45:4d:2a:3b:7a:75:
                    8d:78:7b:57:08:05:ab:ec:39:fc:3e:df:ea:2a:74:
                    6d:ac:8f:a4:90:44:24:13:2f:c9:29:15:e5:bd:81:
                    15:cf:66:df:d0:18:79:f7:36:e9:d0:4e:78:61:c6:
                    e8:f1:5e:d4:60:3a:e1:24:b9:33:71:d4:80:60:9d:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/a5925846ddd27521ce64527a50820075bbf1e5b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/22
                IPv6:
                  2803:a160::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:91:ef:10:56:af:e6:77:80:c6:a3:63:f3:0e:aa:d7:34:43:
         e2:ae:c5:44:65:10:13:dd:ce:da:af:9a:ae:16:a5:a8:fb:8f:
         e5:7f:b2:bd:5a:ff:43:71:3a:4c:0a:a7:3b:c7:f9:25:eb:be:
         92:a1:59:0e:a3:e3:fa:0d:1f:bf:a8:0d:18:08:89:bc:79:95:
         74:c0:36:d7:89:60:02:16:66:7f:30:d1:34:92:7d:82:9f:02:
         2d:58:75:85:a4:80:e2:dc:2a:2e:e0:41:bc:e6:c0:64:fa:a2:
         ed:f4:38:51:4e:31:e2:c3:82:c4:8e:76:c4:ef:6c:83:6c:21:
         29:fe:48:b9:8f:f7:1d:98:56:78:11:c1:10:a9:32:a7:d4:92:
         0c:4f:5e:a4:91:aa:4a:7c:73:ec:7d:a7:af:1f:61:99:6a:2f:
         8d:e0:f1:0a:4f:f1:1d:15:4a:20:b8:72:68:19:ad:74:64:5b:
         73:fd:56:fc:f5:c7:30:6a:0b:19:ef:46:6b:23:0e:21:04:38:
         dc:e7:ca:3a:a3:83:54:24:f7:a2:4c:b4:da:df:3e:f9:d8:4a:
         a7:a4:b9:e7:07:bb:44:20:2d:f0:f1:c8:95:c3:f0:2b:fb:d8:
         ef:c6:c7:9a:a6:37:c1:4f:6d:2b:6c:83:e6:65:4f:ae:99:b7:
         2a:a8:c7:ae
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAObGZTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgwNTEyMjk0NVoXDTI0MDUyMzE0Mzgy
NFowMzExMC8GA1UEAxMoYTU5MjU4NDZkZGQyNzUyMWNlNjQ1MjdhNTA4MjAwNzVi
YmYxZTViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJUA0SMEzsb
BAqXCGAWVfu+pvosH9vKZ/z0LDqI/DRxEeQxchFnFl6C6Buae4PeU4HBXDTB5wsO
2nVFFHn5jWXFRjueiceq6GZHZ4NsfiJEX0XBEqcuw3WC1wK1QQkpS94SnbXb5ZpA
o6WVXhGv0WR2EPMQWOHPnCaXyAPM778JU0fmMZSfXsc7F0NnpvFTzlWQPogdKLAS
phoRJIgaB4IrKu+PRpl3W4U+IOA7hV3Hi1oNvsal/9SQXEhjRU0qO3p1jXh7VwgF
q+w5/D7f6ip0bayPpJBEJBMvySkV5b2BFc9m39AYefc26dBOeGHG6PFe1GA64SS5
M3HUgGCdWMcCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBR35tgfOCOtY6+bAqX0DKZ8
a+Kx+TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mNzE5ZWMyZi0xZjdl
LTQ0YzMtODYyOS01Njg4ZDc0ZTE2ZWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjcxOWVjMmYtMWY3ZS00
NGMzLTg2MjktNTY4OGQ3NGUxNmVhL2E1OTI1ODQ2ZGRkMjc1MjFjZTY0NTI3YTUw
ODIwMDc1YmJmMWU1YjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi21LDANBAIAAjAHAwUAKAOhYDAN
BgkqhkiG9w0BAQsFAAOCAQEARJHvEFav5neAxqNj8w6q1zRD4q7FRGUQE93O2q+a
rhalqPuP5X+yvVr/Q3E6TAqnO8f5Jeu+kqFZDqPj+g0fv6gNGAiJvHmVdMA214lg
AhZmfzDRNJJ9gp8CLVh1haSA4twqLuBBvObAZPqi7fQ4UU4x4sOCxI52xO9sg2wh
Kf5IuY/3HZhWeBHBEKkyp9SSDE9epJGqSnxz7H2nrx9hmWovjeDxCk/xHRVKILhy
aBmtdGRbc/1W/PXHMGoLGe9GayMOIQQ43OfKOqODVCT3oky02t8++dhKp6S55we7
RCAt8PHIlcPwK/vY78bHmqY3wU9tK2yD5mVPrpm3KqjHrg==
-----END CERTIFICATE-----