Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
File:                     cfd77889f712db89177f6478b03af00c3bad37fa.cer (raw, json)
Hash identifier:          Q4cm5ukN9YkIo9fhuTeum72xODUEdjrXq1Cc1B9PnWs=
Subject key identifier:   3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D92DCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Jun 2020 15:15:47 +0000
Certificate not after:    Tue 09 Jan 2024 17:08:20 +0000
Subordinate resources:    AS: 269965
                          IP: 24.152.48.0/22
                          IP: 2803:56e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14233037 (0xd92dcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 15:15:47 2020 GMT
            Not After : Jan  9 17:08:20 2024 GMT
        Subject: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:4e:e6:14:71:a0:ed:0e:35:b0:c9:74:f3:
                    d5:a7:a3:a9:57:09:8d:d6:0e:e0:57:36:e6:64:e8:
                    97:e8:f4:33:e7:21:1a:83:9f:af:d7:f3:a7:7a:4f:
                    c3:94:51:41:ba:51:e7:48:75:77:7e:69:57:5a:da:
                    76:92:e4:bf:e8:7c:3f:8d:f4:eb:b8:1c:97:32:0b:
                    72:2d:4d:a4:92:61:d2:41:a5:59:ba:fa:d5:db:44:
                    1a:b3:b6:49:c0:5a:3d:17:b3:fa:0a:75:71:db:5a:
                    58:c6:e1:00:51:5d:b8:e0:af:59:3d:90:ff:e5:5b:
                    12:05:a0:9d:14:55:9c:dd:f2:2b:2c:4c:a1:a8:a0:
                    fe:37:b1:ce:eb:2a:e9:9c:54:87:04:f9:7f:64:4a:
                    15:a9:04:08:0f:b4:97:46:16:74:28:26:bb:a6:6a:
                    6f:9e:41:17:ef:73:ba:59:b9:67:da:7b:ea:ec:f6:
                    a8:4a:db:73:8d:c5:53:7e:c2:e8:56:90:78:5c:6c:
                    7c:98:8b:a5:d2:4c:5d:c8:5b:8b:c6:00:8d:e6:fc:
                    a9:92:b2:5c:63:68:f0:14:e0:cf:ad:55:59:4b:19:
                    71:9b:c3:24:e3:43:08:2c:c5:4d:6f:e6:dc:22:1b:
                    52:23:5e:39:99:e5:83:13:10:0f:ee:98:1c:fe:e9:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.48.0/22
                IPv6:
                  2803:56e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269965

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:bb:6a:45:55:32:b8:ce:aa:c4:04:a6:69:ef:5e:8a:27:
         8f:9a:8c:db:9f:d5:ff:64:8b:94:42:6f:87:a1:cc:12:e9:ce:
         48:2f:02:de:4d:be:53:f0:c5:ca:fe:cd:8a:67:34:b2:8f:c3:
         5e:7a:58:49:04:a5:b6:c7:c3:7d:0d:b9:10:50:a3:7d:ee:53:
         be:c9:4e:ba:80:92:0f:d6:17:70:a5:95:8c:d5:1f:41:ee:14:
         38:c6:3d:cc:22:83:87:38:2d:67:82:f2:0d:9c:b0:e6:14:e1:
         aa:f2:3a:3a:f5:16:7e:22:54:6a:df:8a:4a:1e:fa:e6:96:d3:
         92:f4:e8:8a:ef:26:7e:53:8d:ec:56:95:7e:30:a5:ea:9f:89:
         49:26:2b:46:98:d9:15:66:89:f0:01:da:78:ab:b6:dc:6a:8d:
         f1:ff:91:2e:45:23:a8:ef:fa:35:c1:c3:38:56:7e:e9:d9:3c:
         1a:87:0b:34:5a:93:96:27:36:08:85:ea:39:1c:1a:8d:af:c8:
         5e:a2:0a:07:1c:ea:94:6c:21:0f:70:e0:a4:dd:d3:13:78:cb:
         ca:b4:cf:f0:ed:f5:13:6b:cd:57:f0:b8:67:1a:ec:f1:2d:b9:
         8a:1f:bf:27:74:6b:a4:58:ed:fa:49:52:65:77:21:2f:b0:c8:
         30:7b:69:49
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANktzTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDYwMzE1MTU0N1oXDTI0MDEwOTE3MDgy
MFowMzExMC8GA1UEAxMoY2ZkNzc4ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMz
YmFkMzdmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyZTuYUcaDt
DjWwyXTz1aejqVcJjdYO4Fc25mTol+j0M+chGoOfr9fzp3pPw5RRQbpR50h1d35p
V1radpLkv+h8P43067gclzILci1NpJJh0kGlWbr61dtEGrO2ScBaPRez+gp1cdta
WMbhAFFduOCvWT2Q/+VbEgWgnRRVnN3yKyxMoaig/jexzusq6ZxUhwT5f2RKFakE
CA+0l0YWdCgmu6Zqb55BF+9zulm5Z9p76uz2qErbc43FU37C6FaQeFxsfJiLpdJM
Xchbi8YAjeb8qZKyXGNo8BTgz61VWUsZcZvDJONDCCzFTW/m3CIbUiNeOZnlgxMQ
D+6YHP7pxeMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQ9wec5RTJJ60ZO+wbhBetP
2f3rgjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZWQ2ZWM0Ny00Njdm
LTRhNTYtOTgwMy1mYWE5NTllNGU4ZjkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWVkNmVjNDctNDY3Zi00
YTU2LTk4MDMtZmFhOTU5ZTRlOGY5L2NmZDc3ODg5ZjcxMmRiODkxNzdmNjQ3OGIw
M2FmMDBjM2JhZDM3ZmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAhiYMDANBAIAAjAHAwUAKANW4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHo0wDQYJKoZIhvcNAQELBQADggEBAJP7
u2pFVTK4zqrEBKZp716KJ4+ajNuf1f9ki5RCb4ehzBLpzkgvAt5NvlPwxcr+zYpn
NLKPw156WEkEpbbHw30NuRBQo33uU77JTrqAkg/WF3CllYzVH0HuFDjGPcwig4c4
LWeC8g2csOYU4aryOjr1Fn4iVGrfikoe+uaW05L06IrvJn5TjexWlX4wpeqfiUkm
K0aY2RVmifAB2nirttxqjfH/kS5FI6jv+jXBwzhWfunZPBqHCzRak5YnNgiF6jkc
Go2vyF6iCgcc6pRsIQ9w4KTd0xN4y8q0z/Dt9RNrzVfwuGca7PEtuYofvyd0a6RY
7fpJUmV3IS+wyDB7aUk=
-----END CERTIFICATE-----