Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c705d32ce6bacccf12d46fc7dfc5273d5909b838.cer
File:                     c705d32ce6bacccf12d46fc7dfc5273d5909b838.cer (raw, json)
Hash identifier:          iCP1Yx51Tp0loeNhlTlPEdbbaXRox60PAtbrHvr3Wng=
Subject key identifier:   DC:C0:F6:23:8E:45:F4:44:AE:AA:93:52:C6:CC:16:34:41:17:0B:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4C39B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ac5cc25a-5506-48ca-9abe-e35d41c1e1aa/c705d32ce6bacccf12d46fc7dfc5273d5909b838.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ac5cc25a-5506-48ca-9abe-e35d41c1e1aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 Nov 2019 12:45:35 +0000
Certificate not after:    Wed 11 Sep 2024 15:31:45 +0000
Subordinate resources:    AS: 269835
                          IP: 45.185.188.0/22
                          IP: 2803:ef60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16040859 (0xf4c39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 26 12:45:35 2019 GMT
            Not After : Sep 11 15:31:45 2024 GMT
        Subject: CN=c705d32ce6bacccf12d46fc7dfc5273d5909b838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:af:19:ae:15:a3:7d:a9:5f:9c:45:fc:80:
                    4a:c6:f7:2e:64:2a:d9:c9:11:1d:fb:f0:76:cb:af:
                    9e:18:b1:64:25:78:02:87:58:b4:ca:c8:9b:d7:a4:
                    f0:c2:b9:6f:09:78:fb:b8:c4:8b:2d:2e:3f:12:e9:
                    e0:67:cd:7e:54:52:dc:4e:35:27:26:a9:cd:56:54:
                    f6:e1:dc:40:83:83:c6:df:88:42:29:48:2b:ae:aa:
                    81:a4:f1:95:03:89:79:70:ad:00:74:c5:53:7f:23:
                    64:a4:34:8a:83:21:3f:a7:2b:d7:0f:bc:8a:ea:89:
                    50:36:36:7c:d8:6d:62:22:94:8d:41:5d:65:72:11:
                    9f:b6:41:48:01:2b:41:70:f1:07:00:d1:95:04:63:
                    34:72:0e:10:67:39:24:89:1c:f7:42:e3:df:19:d5:
                    58:a8:3b:5e:4b:94:12:5a:3d:c7:fa:57:97:be:58:
                    ee:23:bb:1e:57:2e:26:4d:5a:75:00:9d:f7:e1:12:
                    7e:57:ba:4c:85:f0:12:9e:79:0e:fa:bd:66:a0:17:
                    c4:1f:38:02:4e:66:30:32:9a:fd:88:e3:b6:1a:cb:
                    34:56:7b:7a:a7:7d:9e:71:66:2f:eb:33:c1:a4:e2:
                    f8:1c:24:de:4f:32:3a:32:0e:6f:cd:b1:60:76:8d:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C0:F6:23:8E:45:F4:44:AE:AA:93:52:C6:CC:16:34:41:17:0B:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ac5cc25a-5506-48ca-9abe-e35d41c1e1aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ac5cc25a-5506-48ca-9abe-e35d41c1e1aa/c705d32ce6bacccf12d46fc7dfc5273d5909b838.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.188.0/22
                IPv6:
                  2803:ef60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269835

    Signature Algorithm: sha256WithRSAEncryption
         87:04:bb:97:4b:ee:c1:d1:06:2b:93:c8:89:f0:17:e7:f1:e4:
         45:b4:62:37:4e:30:52:a2:c7:cf:65:76:b5:26:75:15:5b:13:
         32:47:d6:01:59:fa:8c:51:8f:06:2e:35:05:d7:a9:ba:39:ea:
         bc:7d:f2:51:9c:5f:c9:ba:39:62:15:10:fc:0c:80:17:de:73:
         da:b2:24:6b:72:a8:cc:17:3c:ef:89:d5:46:06:25:9d:77:04:
         0b:5c:e6:80:21:14:cc:ca:95:76:88:b6:40:a3:72:d0:4e:39:
         7d:de:76:58:30:83:e5:38:c7:62:47:1f:77:02:41:d8:2a:96:
         4f:33:d9:bc:0a:90:4a:e1:1a:65:d3:62:d4:a1:6c:cc:21:56:
         93:cd:8f:b8:e3:e3:0f:5b:f0:ff:2b:bb:dc:f9:a0:5f:92:6a:
         96:b9:68:4d:a3:f1:0f:f5:8e:82:83:77:f5:ed:56:fb:35:d3:
         79:52:8b:e4:ae:d0:90:d2:9b:6c:91:66:41:d6:2e:ac:6c:a3:
         96:51:1c:8d:7c:fa:d7:3d:b9:8e:60:0b:f9:ee:4a:55:e9:a4:
         13:c9:5f:c8:6c:62:ca:f2:bf:61:86:c2:99:de:81:6d:53:d6:
         52:3a:bc:da:6b:e0:61:56:5c:02:aa:ee:bb:e4:30:54:c7:3f:
         84:ad:2e:36
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPTDmzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTEyNjEyNDUzNVoXDTI0MDkxMTE1MzE0
NVowMzExMC8GA1UEAxMoYzcwNWQzMmNlNmJhY2NjZjEyZDQ2ZmM3ZGZjNTI3M2Q1
OTA5YjgzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3FrxmuFaN9
qV+cRfyASsb3LmQq2ckRHfvwdsuvnhixZCV4AodYtMrIm9ek8MK5bwl4+7jEiy0u
PxLp4GfNflRS3E41JyapzVZU9uHcQIODxt+IQilIK66qgaTxlQOJeXCtAHTFU38j
ZKQ0ioMhP6cr1w+8iuqJUDY2fNhtYiKUjUFdZXIRn7ZBSAErQXDxBwDRlQRjNHIO
EGc5JIkc90Lj3xnVWKg7XkuUElo9x/pXl75Y7iO7HlcuJk1adQCd9+ESfle6TIXw
Ep55Dvq9ZqAXxB84Ak5mMDKa/YjjthrLNFZ7eqd9nnFmL+szwaTi+Bwk3k8yOjIO
b82xYHaNgcsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTcwPYjjkX0RK6qk1LGzBY0
QRcLcjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYzVjYzI1YS01NTA2
LTQ4Y2EtOWFiZS1lMzVkNDFjMWUxYWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWM1Y2MyNWEtNTUwNi00
OGNhLTlhYmUtZTM1ZDQxYzFlMWFhL2M3MDVkMzJjZTZiYWNjY2YxMmQ0NmZjN2Rm
YzUyNzNkNTkwOWI4MzgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi25vDANBAIAAjAHAwUAKAPvYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHgswDQYJKoZIhvcNAQELBQADggEBAIcE
u5dL7sHRBiuTyInwF+fx5EW0YjdOMFKix89ldrUmdRVbEzJH1gFZ+oxRjwYuNQXX
qbo56rx98lGcX8m6OWIVEPwMgBfec9qyJGtyqMwXPO+J1UYGJZ13BAtc5oAhFMzK
lXaItkCjctBOOX3edlgwg+U4x2JHH3cCQdgqlk8z2bwKkErhGmXTYtShbMwhVpPN
j7jj4w9b8P8ru9z5oF+Sapa5aE2j8Q/1joKDd/XtVvs103lSi+Su0JDSm2yRZkHW
Lqxso5ZRHI18+tc9uY5gC/nuSlXppBPJX8hsYsryv2GGwpnegW1T1lI6vNpr4GFW
XAKq7rvkMFTHP4StLjY=
-----END CERTIFICATE-----