Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d540a2f05624a216a4589684e8e39e782d982f0e.cer
File:                     d540a2f05624a216a4589684e8e39e782d982f0e.cer (raw, json)
Hash identifier:          jH+pe0wHrWIcT4mCZsM8oeLGDYuPGX7SEqHvhSdv4lk=
Subject key identifier:   30:8D:0F:A7:0F:CA:C2:8F:CF:B8:E7:1C:AB:DA:48:3A:E4:22:3E:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E206E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/d540a2f05624a216a4589684e8e39e782d982f0e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2020 14:45:28 +0000
Certificate not after:    Sat 20 Apr 2024 21:47:30 +0000
Subordinate resources:    IP: 170.150.88.0/22
                          IP: 2803:4740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14812904 (0xe206e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 14:45:28 2020 GMT
            Not After : Apr 20 21:47:30 2024 GMT
        Subject: CN=d540a2f05624a216a4589684e8e39e782d982f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d6:08:47:dd:61:97:63:dc:1f:53:02:53:41:
                    cb:85:3f:06:73:69:50:e1:f2:b0:0b:be:75:1b:19:
                    db:c3:90:31:29:d0:f1:00:19:26:d8:12:5b:49:9a:
                    01:4a:df:e8:8e:7d:b1:ba:30:47:b3:dc:ca:43:5c:
                    08:87:f4:35:49:fd:84:72:90:bd:93:d8:f9:cb:d8:
                    23:ef:01:61:03:6b:c1:0f:e9:e5:e7:1b:d8:19:95:
                    06:5c:fd:da:29:7d:ec:ab:37:26:51:ea:09:72:42:
                    a4:2b:22:a9:36:15:76:6d:a0:ab:2c:51:35:4f:fe:
                    79:78:22:ac:dd:5d:31:d8:8f:bc:da:32:fd:db:24:
                    01:19:f5:52:11:9c:a9:c8:b5:99:1e:52:fa:0f:b5:
                    4b:c5:df:38:62:e3:f2:f5:ce:f3:d3:90:fe:17:78:
                    d6:2a:de:26:51:46:6e:5f:fb:f3:fb:bb:83:82:2c:
                    ec:26:2d:39:38:5a:06:3b:46:c1:5d:52:b6:e5:9f:
                    40:b2:18:2d:c2:0e:50:2e:05:b0:bc:3a:75:d3:97:
                    19:e4:6e:78:2b:43:2e:84:09:bc:9d:a3:5a:38:ce:
                    e5:c5:bf:02:22:5f:ae:e7:e5:f8:dc:e0:1e:87:7c:
                    9f:c8:92:ef:0a:e5:95:b5:a0:20:c9:9d:e3:50:1a:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8D:0F:A7:0F:CA:C2:8F:CF:B8:E7:1C:AB:DA:48:3A:E4:22:3E:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/d540a2f05624a216a4589684e8e39e782d982f0e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.88.0/22
                IPv6:
                  2803:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:c9:40:57:3d:a9:9f:81:6a:17:4d:e3:ee:3e:b4:a0:08:
         c4:76:b0:51:76:6d:97:e5:b7:aa:5e:3d:b9:fe:8a:c4:d0:c0:
         ce:5f:18:38:2b:b1:3e:52:d2:0b:ae:e1:c2:68:e2:99:14:59:
         ac:d7:71:9c:f8:d2:ae:22:74:5f:3d:30:87:ab:fd:b0:0a:00:
         6c:eb:72:59:b4:5a:68:6b:3a:93:03:35:0b:78:db:9f:4f:70:
         43:79:66:5a:e9:e9:66:4b:bd:a8:38:b5:15:d3:61:3c:7d:44:
         87:f3:f7:29:b8:6c:72:09:34:56:23:cc:af:d5:69:33:87:95:
         15:85:df:4b:5e:46:11:43:13:51:88:d6:c3:9c:03:f2:c2:49:
         a6:16:2a:82:1c:29:41:3b:fa:6c:3c:85:ff:06:c0:30:3d:1e:
         75:89:58:15:11:30:e3:52:fd:b8:81:0b:66:16:4a:81:d1:75:
         fa:f5:0c:10:e0:45:a6:d9:b9:73:7d:f8:15:64:bd:b6:af:09:
         50:c5:7d:c5:0f:ea:3c:2d:49:3c:44:c1:55:08:00:4e:06:d5:
         da:85:28:c3:10:14:80:88:74:f6:91:3d:0c:8a:3a:91:4d:b1:
         a8:a1:b0:3c:f2:05:e2:45:25:75:6f:81:d9:c0:f5:1e:a8:57:
         0a:69:94:87
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOIG6DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDExNDE0NDUyOFoXDTI0MDQyMDIxNDcz
MFowMzExMC8GA1UEAxMoZDU0MGEyZjA1NjI0YTIxNmE0NTg5Njg0ZThlMzllNzgy
ZDk4MmYwZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIHWCEfdYZdj
3B9TAlNBy4U/BnNpUOHysAu+dRsZ28OQMSnQ8QAZJtgSW0maAUrf6I59sbowR7Pc
ykNcCIf0NUn9hHKQvZPY+cvYI+8BYQNrwQ/p5ecb2BmVBlz92il97Ks3JlHqCXJC
pCsiqTYVdm2gqyxRNU/+eXgirN1dMdiPvNoy/dskARn1UhGcqci1mR5S+g+1S8Xf
OGLj8vXO89OQ/hd41ireJlFGbl/78/u7g4Is7CYtOThaBjtGwV1StuWfQLIYLcIO
UC4FsLw6ddOXGeRueCtDLoQJvJ2jWjjO5cW/AiJfrufl+NzgHod8n8iS7wrllbWg
IMmd41Aa1fMCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQwjQ+nD8rCj8+45xyr2kg6
5CI+qDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNGU0M2MzNy02NGZl
LTRkNDUtOTJhNy1lODE0ODY0YzdhMTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDRlNDNjMzctNjRmZS00
ZDQ1LTkyYTctZTgxNDg2NGM3YTE4L2Q1NDBhMmYwNTYyNGEyMTZhNDU4OTY4NGU4
ZTM5ZTc4MmQ5ODJmMGUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqqWWDANBAIAAjAHAwUAKANHQDAN
BgkqhkiG9w0BAQsFAAOCAQEArjDJQFc9qZ+BahdN4+4+tKAIxHawUXZtl+W3ql49
uf6KxNDAzl8YOCuxPlLSC67hwmjimRRZrNdxnPjSriJ0Xz0wh6v9sAoAbOtyWbRa
aGs6kwM1C3jbn09wQ3lmWunpZku9qDi1FdNhPH1Eh/P3Kbhscgk0ViPMr9VpM4eV
FYXfS15GEUMTUYjWw5wD8sJJphYqghwpQTv6bDyF/wbAMD0edYlYFREw41L9uIEL
ZhZKgdF1+vUMEOBFptm5c334FWS9tq8JUMV9xQ/qPC1JPETBVQgATgbV2oUowxAU
gIh09pE9DIo6kU2xqKGwPPIF4kUldW+B2cD1HqhXCmmUhw==
-----END CERTIFICATE-----