Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.cer
File:                     b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.cer (raw, json)
Hash identifier:          CjhPw+n9FvDsWPc7m7iSpy6EpNQF/iKWt8bZ5P3Wcm0=
Subject key identifier:   10:1F:C6:99:E2:3B:6C:79:52:DB:06:3F:59:88:AB:BE:65:9E:A2:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7B291
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 22 Feb 2020 12:03:41 +0000
Certificate not after:    Thu 21 Dec 2023 15:08:58 +0000
Subordinate resources:    AS: 269956
                          IP: 189.126.8.0/23
                          IP: 2803:fae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14135953 (0xd7b291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 12:03:41 2020 GMT
            Not After : Dec 21 15:08:58 2023 GMT
        Subject: CN=b2eeb7d21a82dd2781e0690819a40b6f5cdee87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:00:cb:63:43:cb:08:6f:9f:ce:d1:cf:c6:
                    4a:be:36:6c:38:76:c6:59:dd:0d:3e:21:2f:9f:2c:
                    a3:23:69:74:dc:23:62:e7:1b:60:76:0e:e0:af:7a:
                    66:00:46:ff:5f:6f:82:1b:ed:1e:51:1b:8f:94:3b:
                    47:1a:31:42:5c:3f:7f:e5:74:72:d9:2f:76:58:cd:
                    25:4a:3d:2a:94:f5:a0:f9:fb:f6:35:c6:0e:d8:6b:
                    ce:2a:96:5b:22:39:fc:22:45:67:df:56:f2:78:79:
                    2f:f0:7a:b7:8d:21:b4:84:8e:18:a2:c9:f2:db:9e:
                    25:24:a1:be:1b:ee:bf:0d:74:3d:1e:79:ff:70:11:
                    7b:4b:ab:6a:6a:fa:8d:ee:27:ae:0a:0f:80:ee:ce:
                    78:33:69:db:9a:ad:3b:35:b9:6c:d0:5c:6e:3d:cc:
                    18:17:94:69:99:8c:24:08:4f:2b:2b:e3:d0:54:7a:
                    50:19:d4:03:8f:cc:c0:5b:85:bd:6c:55:53:33:5d:
                    93:b1:f0:0f:fc:0e:b7:62:46:85:55:64:98:86:29:
                    82:6a:77:c5:64:e0:f6:d4:84:04:c7:25:e2:83:7d:
                    0d:95:ec:ec:6e:b6:d5:47:8e:77:bb:23:79:44:e5:
                    63:b8:1b:f9:b9:6b:ab:ff:f4:2b:33:ed:21:4a:46:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:C6:99:E2:3B:6C:79:52:DB:06:3F:59:88:AB:BE:65:9E:A2:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.8.0/23
                IPv6:
                  2803:fae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269956

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:1b:1f:2d:34:8d:c0:3a:66:b2:82:ef:a3:64:65:6f:a9:
         9b:af:9c:3e:fa:99:3f:f3:4f:02:36:34:04:f5:0e:d9:95:1a:
         77:4d:9d:53:dc:01:e0:1b:fa:44:e9:8b:b0:bf:4d:d5:fc:84:
         93:43:44:fc:e6:d0:56:f8:71:79:46:a5:bb:72:e1:89:c3:48:
         76:fd:4d:b6:bf:de:41:b7:a5:6c:4a:d1:81:ee:1b:1c:f8:0f:
         19:a0:c6:f9:57:9d:24:e2:2c:fa:96:87:18:05:fb:96:99:69:
         76:77:b1:6c:52:39:bd:9b:65:8b:87:25:07:8e:08:ef:43:7d:
         d3:a3:30:75:b4:e1:36:b1:8e:44:50:8b:4b:02:01:e9:79:20:
         49:cb:6a:6d:2d:72:83:16:fe:aa:fc:ce:ce:3a:c2:b5:d4:fc:
         f1:60:69:e1:d3:50:86:95:7b:67:58:78:d4:1c:38:ce:b0:50:
         43:9f:1b:83:4c:46:4c:55:5a:2e:bf:c9:ba:0d:28:7f:81:7e:
         d2:8c:e1:17:39:f2:23:8d:fd:cb:53:59:0d:d0:17:d5:0b:4e:
         c5:d0:c9:e1:fe:37:d6:80:b0:1e:82:ef:66:e3:3a:b2:dc:0b:
         69:5a:21:f0:fc:11:49:f4:aa:be:25:db:bd:a2:c9:0f:53:46:
         69:eb:34:00
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANeykTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDIyMjEyMDM0MVoXDTIzMTIyMTE1MDg1
OFowMzExMC8GA1UEAxMoYjJlZWI3ZDIxYTgyZGQyNzgxZTA2OTA4MTlhNDBiNmY1
Y2RlZTg3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKKrAMtjQ8sI
b5/O0c/GSr42bDh2xlndDT4hL58soyNpdNwjYucbYHYO4K96ZgBG/19vghvtHlEb
j5Q7RxoxQlw/f+V0ctkvdljNJUo9KpT1oPn79jXGDthrziqWWyI5/CJFZ99W8nh5
L/B6t40htISOGKLJ8tueJSShvhvuvw10PR55/3ARe0uramr6je4nrgoPgO7OeDNp
25qtOzW5bNBcbj3MGBeUaZmMJAhPKyvj0FR6UBnUA4/MwFuFvWxVUzNdk7HwD/wO
t2JGhVVkmIYpgmp3xWTg9tSEBMcl4oN9DZXs7G621UeOd7sjeUTlY7gb+blrq//0
KzPtIUpGFjcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQQH8aZ4jtseVLbBj9ZiKu+
ZZ6isTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zMzFkZDI5OC03Zjky
LTRhOGMtYjBkMS0xY2FiYTQ4MmNmZDYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzMxZGQyOTgtN2Y5Mi00
YThjLWIwZDEtMWNhYmE0ODJjZmQ2L2IyZWViN2QyMWE4MmRkMjc4MWUwNjkwODE5
YTQwYjZmNWNkZWU4N2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAb1+CDANBAIAAjAHAwUAKAP64DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHoQwDQYJKoZIhvcNAQELBQADggEBALg1
Gx8tNI3AOmaygu+jZGVvqZuvnD76mT/zTwI2NAT1DtmVGndNnVPcAeAb+kTpi7C/
TdX8hJNDRPzm0Fb4cXlGpbty4YnDSHb9Tba/3kG3pWxK0YHuGxz4DxmgxvlXnSTi
LPqWhxgF+5aZaXZ3sWxSOb2bZYuHJQeOCO9DfdOjMHW04TaxjkRQi0sCAel5IEnL
am0tcoMW/qr8zs46wrXU/PFgaeHTUIaVe2dYeNQcOM6wUEOfG4NMRkxVWi6/yboN
KH+BftKM4Rc58iON/ctTWQ3QF9ULTsXQyeH+N9aAsB6C72bjOrLcC2laIfD8EUn0
qr4l272iyQ9TRmnrNAA=
-----END CERTIFICATE-----