Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
File:                     b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer (raw, json)
Hash identifier:          0hqvS4W1I7H1oz0L8b3CsRoFPnsyCy1tzjOcnHaGiLw=
Subject key identifier:   EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7842C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 01 Sep 2019 23:01:27 +0000
Certificate not after:    Mon 18 Dec 2023 21:57:07 +0000
Subordinate resources:    AS: 267775
                          IP: 45.171.48.0/23
                          IP: 2803:67a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14124076 (0xd7842c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 23:01:27 2019 GMT
            Not After : Dec 18 21:57:07 2023 GMT
        Subject: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:eb:6c:e6:b5:d3:49:55:fb:51:bd:d2:4c:
                    e9:f1:4b:f3:9a:8e:5b:09:29:7a:f7:a8:05:9b:61:
                    2f:7f:2a:ab:a4:86:66:99:54:b9:48:2c:f4:95:60:
                    7c:05:07:4d:67:92:6e:7a:ee:93:4e:fa:45:98:8b:
                    92:0a:4b:b8:9a:a9:ba:f6:27:35:32:f7:49:80:7e:
                    97:5d:f9:8a:c2:67:bb:ca:97:39:4f:c3:53:ec:c2:
                    b8:ed:67:c6:d6:fb:d6:2c:cf:1a:ae:08:ee:e1:c0:
                    10:78:6c:04:e4:99:c1:9d:7b:53:fb:8d:25:5b:a5:
                    15:2c:5b:71:3a:00:83:95:9b:de:23:cb:01:8c:fb:
                    03:be:63:48:0a:33:de:01:ab:bb:09:2b:e2:15:05:
                    e6:0f:ce:b7:58:5d:21:26:4e:94:3b:22:bd:29:8a:
                    9a:c8:be:81:90:28:4d:3d:f3:16:83:ca:e0:66:49:
                    59:1e:cb:27:da:70:57:52:42:8b:bf:6d:41:87:e7:
                    78:a9:61:f5:84:29:99:a6:a8:6b:19:cc:10:1e:b9:
                    c5:6e:9c:f6:20:e9:b1:c3:49:65:e6:7f:ec:e7:6f:
                    ad:b3:09:91:0e:06:15:fa:f0:ce:d4:70:a8:ed:de:
                    ad:01:fb:08:ed:31:a3:a6:eb:38:3d:62:ab:93:9c:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.48.0/23
                IPv6:
                  2803:67a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267775

    Signature Algorithm: sha256WithRSAEncryption
         24:73:c2:2c:3e:77:c4:f3:03:f5:a2:e7:ae:8e:1b:43:b9:df:
         ac:95:e2:20:9e:ce:d6:b6:ce:0d:72:41:24:cf:5d:db:07:1b:
         ad:47:07:dc:dc:3c:bc:32:1b:1e:c0:d8:15:c5:0d:64:8d:94:
         03:c3:d7:43:eb:a9:e1:15:68:03:0b:ad:61:79:d5:bf:b6:2c:
         1d:84:cd:b7:6b:e4:79:a1:61:e9:d4:36:5a:4a:1d:1d:77:08:
         67:21:8a:c9:ce:3e:34:94:51:5e:52:b5:30:ae:07:53:65:ab:
         c6:23:a8:5f:e0:b7:f8:58:3f:60:37:98:dc:d5:5d:95:75:0b:
         ca:aa:5e:b9:4f:0d:ba:49:4f:d5:f4:1a:e5:ed:80:32:41:34:
         19:a6:c3:a1:6a:54:d8:11:db:d9:41:08:ad:32:e5:ee:07:46:
         f4:5a:eb:00:8e:f9:ba:1f:14:04:e4:4d:fa:7d:fb:f8:34:7b:
         44:4f:7b:f5:22:a3:8a:88:40:ca:48:f6:94:59:84:84:bd:4e:
         ad:b8:e9:f9:22:ed:f0:b8:e9:9f:f7:0b:f3:9f:86:49:b3:c7:
         61:44:2c:57:2f:3d:45:db:c3:2a:e1:d6:d2:6e:e2:67:96:11:
         8e:0c:f8:3f:d3:60:7a:1b:f5:0f:ec:3e:47:ba:81:eb:3c:c0:
         c5:f6:33:7a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANeELDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDkwMTIzMDEyN1oXDTIzMTIxODIxNTcw
N1owMzExMC8GA1UEAxMoYjg0M2NlNzRiYjM4ZjNmMmZjN2M5MzZhZDA2NzNmYTUx
N2U3YjI3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJl662zmtdNJ
VftRvdJM6fFL85qOWwkpeveoBZthL38qq6SGZplUuUgs9JVgfAUHTWeSbnruk076
RZiLkgpLuJqpuvYnNTL3SYB+l135isJnu8qXOU/DU+zCuO1nxtb71izPGq4I7uHA
EHhsBOSZwZ17U/uNJVulFSxbcToAg5Wb3iPLAYz7A75jSAoz3gGruwkr4hUF5g/O
t1hdISZOlDsivSmKmsi+gZAoTT3zFoPK4GZJWR7LJ9pwV1JCi79tQYfneKlh9YQp
maaoaxnMEB65xW6c9iDpscNJZeZ/7OdvrbMJkQ4GFfrwztRwqO3erQH7CO0xo6br
OD1iq5OcARkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTrXDnjhQENtZBVO1RVoqjh
NfLmPTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MWEzMjZlZC1lZWU0
LTQ2ZDMtODAyOS01YmVkMmQ4NjI2ZDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjFhMzI2ZWQtZWVlNC00
NmQzLTgwMjktNWJlZDJkODYyNmQxL2I4NDNjZTc0YmIzOGYzZjJmYzdjOTM2YWQw
NjczZmE1MTdlN2IyN2MubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS2rMDANBAIAAjAHAwUAKANnoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFf8wDQYJKoZIhvcNAQELBQADggEBACRz
wiw+d8TzA/Wi566OG0O536yV4iCezta2zg1yQSTPXdsHG61HB9zcPLwyGx7A2BXF
DWSNlAPD10PrqeEVaAMLrWF51b+2LB2Ezbdr5HmhYenUNlpKHR13CGchisnOPjSU
UV5StTCuB1Nlq8YjqF/gt/hYP2A3mNzVXZV1C8qqXrlPDbpJT9X0GuXtgDJBNBmm
w6FqVNgR29lBCK0y5e4HRvRa6wCO+bofFATkTfp9+/g0e0RPe/Uio4qIQMpI9pRZ
hIS9Tq246fki7fC46Z/3C/Ofhkmzx2FELFcvPUXbwyrh1tJu4meWEY4M+D/TYHob
9Q/sPke6ges8wMX2M3o=
-----END CERTIFICATE-----