Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00571304e4b047e4afd608874a3be833cca4a3e.cer
File:                     c00571304e4b047e4afd608874a3be833cca4a3e.cer (raw, json)
Hash identifier:          bVjAWIq9+28c41ffc+vZYsgPSPY2SO9d+knFiCTS6jM=
Subject key identifier:   85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8C5AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/c00571304e4b047e4afd608874a3be833cca4a3e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Jul 2020 22:55:55 +0000
Certificate not after:    Wed 03 Jan 2024 14:26:22 +0000
Subordinate resources:    AS: 269958
                          IP: 200.33.206.0/24
                          IP: 2803:e6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14206379 (0xd8c5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 21 22:55:55 2020 GMT
            Not After : Jan  3 14:26:22 2024 GMT
        Subject: CN=c00571304e4b047e4afd608874a3be833cca4a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:ca:ff:5f:68:2b:e9:f5:1c:df:f8:aa:97:
                    9e:9b:e0:5d:3e:e8:b4:0d:46:0b:0b:05:5c:4c:a1:
                    93:36:33:c4:c4:37:ab:22:47:06:a7:ae:04:cf:5c:
                    53:76:30:cd:ab:ec:a3:ca:62:0e:9c:d6:4f:fa:45:
                    77:3d:c2:7d:3e:9a:74:cd:01:64:e2:da:fc:a9:b6:
                    b3:a2:f4:89:59:71:5c:8a:04:ab:ce:fa:33:df:db:
                    a2:1f:be:92:a6:f5:c1:48:dc:33:16:ef:ab:77:cd:
                    37:5c:a2:22:39:3c:85:ea:8e:ef:ac:98:bb:09:2c:
                    da:d3:37:1b:1c:be:eb:b4:fc:a3:93:04:88:a6:61:
                    55:48:56:33:71:10:b3:28:5b:83:fb:74:72:0a:7f:
                    cd:63:ae:58:34:d3:1f:45:ae:d7:c4:2a:a1:0b:cf:
                    e0:a3:a1:1a:32:ea:04:c7:03:a3:e8:ff:43:e8:34:
                    5a:23:c2:b0:6f:f0:08:49:73:80:37:c2:bf:85:bb:
                    9d:f2:d3:85:7a:11:19:f7:76:aa:da:37:16:5d:af:
                    ec:ab:2e:49:c1:42:33:36:8f:04:01:86:fd:76:27:
                    59:64:b5:72:4e:8d:42:bc:be:8d:27:14:3a:90:03:
                    d8:c5:98:f8:2c:ad:2d:d4:dc:1d:6c:d6:f4:a1:ed:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/c00571304e4b047e4afd608874a3be833cca4a3e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.206.0/24
                IPv6:
                  2803:e6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269958

    Signature Algorithm: sha256WithRSAEncryption
         93:05:c1:7a:75:bc:67:0e:00:50:e9:5e:78:e0:83:65:4b:06:
         94:cb:dd:cc:18:86:38:a3:eb:40:f5:c8:81:a8:40:63:0f:fd:
         f1:dc:1b:8f:98:c0:00:73:7b:61:01:2e:1d:b8:a7:ae:3b:0c:
         3c:fa:76:9e:c3:10:81:73:23:dc:84:07:a7:0e:c1:f5:78:08:
         c3:1b:53:dd:01:00:a0:9d:79:c7:36:4c:27:93:27:a0:86:f5:
         41:b4:99:bd:5a:00:e9:04:e7:ff:aa:6d:3a:2e:dc:5d:3e:10:
         a1:dc:c1:d7:71:ec:31:c9:5f:11:b0:db:75:92:28:ed:d4:20:
         9c:f8:72:fe:76:d2:32:e8:95:9d:b1:8d:41:55:eb:8b:cc:c9:
         77:52:8f:43:09:7b:92:92:8a:04:a8:b1:5f:d7:b0:47:38:36:
         b8:3d:56:59:3f:dd:a0:6e:1d:e1:16:ac:13:b4:ff:ab:c1:0f:
         a3:0f:95:97:48:d7:cf:5e:75:0b:0e:ad:a8:94:cf:a9:4b:c8:
         65:93:71:02:b3:50:7d:d4:bf:51:16:d3:a8:4b:60:7b:8c:93:
         b7:10:bc:65:49:f7:bd:aa:5d:af:24:0f:7f:00:b9:0b:d4:6b:
         7d:a5:cf:ce:8a:00:ca:8b:aa:e1:a8:21:bb:08:37:0a:85:2d:
         9d:2a:9e:b2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANjFqzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDcyMTIyNTU1NVoXDTI0MDEwMzE0MjYy
MlowMzExMC8GA1UEAxMoYzAwNTcxMzA0ZTRiMDQ3ZTRhZmQ2MDg4NzRhM2JlODMz
Y2NhNGEzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJOpyv9faCvp
9Rzf+KqXnpvgXT7otA1GCwsFXEyhkzYzxMQ3qyJHBqeuBM9cU3Ywzavso8piDpzW
T/pFdz3CfT6adM0BZOLa/Km2s6L0iVlxXIoEq876M9/boh++kqb1wUjcMxbvq3fN
N1yiIjk8heqO76yYuwks2tM3Gxy+67T8o5MEiKZhVUhWM3EQsyhbg/t0cgp/zWOu
WDTTH0Wu18QqoQvP4KOhGjLqBMcDo+j/Q+g0WiPCsG/wCElzgDfCv4W7nfLThXoR
Gfd2qto3Fl2v7KsuScFCMzaPBAGG/XYnWWS1ck6NQry+jScUOpAD2MWY+CytLdTc
HWzW9KHttTECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSFl36KtJt1IJR1CMkU+yBv
qZs0hTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZTljMTdjYS1mOTk2
LTQzN2YtOGZmNS1kOWYzNGQ3YTM1NTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWU5YzE3Y2EtZjk5Ni00
MzdmLThmZjUtZDlmMzRkN2EzNTUzL2MwMDU3MTMwNGU0YjA0N2U0YWZkNjA4ODc0
YTNiZTgzM2NjYTRhM2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMghzjANBAIAAjAHAwUAKAPm4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHoYwDQYJKoZIhvcNAQELBQADggEBAJMF
wXp1vGcOAFDpXnjgg2VLBpTL3cwYhjij60D1yIGoQGMP/fHcG4+YwABze2EBLh24
p647DDz6dp7DEIFzI9yEB6cOwfV4CMMbU90BAKCdecc2TCeTJ6CG9UG0mb1aAOkE
5/+qbTou3F0+EKHcwddx7DHJXxGw23WSKO3UIJz4cv520jLolZ2xjUFV64vMyXdS
j0MJe5KSigSosV/XsEc4Nrg9Vlk/3aBuHeEWrBO0/6vBD6MPlZdI189edQsOraiU
z6lLyGWTcQKzUH3Uv1EW06hLYHuMk7cQvGVJ972qXa8kD38AuQvUa32lz86KAMqL
quGoIbsINwqFLZ0qnrI=
-----END CERTIFICATE-----