Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f069eaa25a2ace6a09275d8c5d3dbf56251d68dc.cer
File:                     f069eaa25a2ace6a09275d8c5d3dbf56251d68dc.cer (raw, json)
Hash identifier:          65dSVeJyTCPkgkquCD8/WY4c7vHEe5vTSPv7CBpVzBE=
Subject key identifier:   EE:A3:EF:C0:B3:3E:55:79:10:B6:5D:56:30:F3:73:A4:4B:C0:9E:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8699F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1e07dea9-b6fe-462b-87a7-4d68a4e63f18/f069eaa25a2ace6a09275d8c5d3dbf56251d68dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1e07dea9-b6fe-462b-87a7-4d68a4e63f18/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Oct 2019 22:22:25 +0000
Certificate not after:    Thu 27 Jun 2024 18:40:31 +0000
Subordinate resources:    AS: 266893
                          IP: 45.161.24.0/22
                          IP: 2803:96a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14182815 (0xd8699f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 22:22:25 2019 GMT
            Not After : Jun 27 18:40:31 2024 GMT
        Subject: CN=f069eaa25a2ace6a09275d8c5d3dbf56251d68dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:c8:42:81:49:a1:e1:db:04:63:7e:1d:62:
                    07:0d:a7:46:b2:6f:08:20:a5:c7:ce:c8:7f:fd:e9:
                    2d:28:3c:c0:90:9a:38:69:5e:46:50:84:78:c3:17:
                    59:55:d7:81:19:66:78:11:cb:e9:a2:5f:4d:f4:1e:
                    a7:ab:33:c8:c0:0b:7e:fd:fa:42:c8:16:91:be:5f:
                    4c:4a:2a:50:fe:01:c3:96:93:c5:62:33:be:0a:4b:
                    2f:2c:6c:91:df:d9:30:8e:82:4c:ec:bb:c9:2c:3c:
                    18:0b:89:29:ea:60:c8:05:eb:15:3f:f5:31:f9:b8:
                    70:3c:61:66:93:06:b5:69:d2:0b:3c:e6:f9:4d:5a:
                    10:3b:9a:47:d4:1d:80:76:f0:25:4c:1c:e2:ad:47:
                    5b:d5:24:18:bb:a0:e4:d7:cd:70:4f:b2:8b:88:dd:
                    81:cd:e5:9f:be:df:c6:71:61:84:00:4a:2a:f3:8f:
                    c1:a4:25:0c:f6:4c:43:64:e1:1e:f7:b5:a1:73:aa:
                    41:ec:d4:5f:0f:7b:6b:27:88:e1:e7:60:d3:39:02:
                    d0:48:aa:63:c1:88:0e:0b:b9:d9:86:70:8d:e6:b2:
                    fb:0e:b4:0f:91:6f:50:df:eb:38:a4:90:eb:1b:cc:
                    e7:78:ae:49:25:3a:07:22:a7:95:1d:67:40:41:af:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A3:EF:C0:B3:3E:55:79:10:B6:5D:56:30:F3:73:A4:4B:C0:9E:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1e07dea9-b6fe-462b-87a7-4d68a4e63f18/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1e07dea9-b6fe-462b-87a7-4d68a4e63f18/f069eaa25a2ace6a09275d8c5d3dbf56251d68dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.24.0/22
                IPv6:
                  2803:96a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266893

    Signature Algorithm: sha256WithRSAEncryption
         80:df:9d:8d:db:ea:f4:84:eb:43:d2:d2:e8:cb:42:5e:a1:0c:
         01:df:e2:41:d7:e4:d7:5d:e2:25:0d:4e:47:4b:52:9a:9d:d1:
         3e:6d:c9:10:c7:26:a9:d4:bd:a5:f3:db:09:39:06:08:f4:39:
         7d:fa:61:c1:31:13:09:2d:c9:09:cf:94:9c:b5:c8:7e:69:3a:
         38:b1:db:43:b5:10:31:32:e5:53:64:40:c9:89:d7:00:d2:d4:
         c2:8c:8a:7b:60:24:18:5a:05:86:f0:96:f3:80:14:73:df:96:
         57:5b:34:20:64:4a:11:96:37:1d:12:2e:61:bd:f1:7c:12:5e:
         4e:08:e2:52:07:11:0e:02:bb:04:90:bf:4c:e5:3a:ca:53:ff:
         c5:24:31:8f:25:81:ae:95:28:22:3a:c4:bb:81:2c:3f:60:31:
         bf:2f:c0:89:70:5d:f3:c3:01:ab:12:fd:9b:f9:00:ab:c2:f5:
         77:2f:e0:07:da:b3:29:43:71:42:ae:dd:45:da:36:95:95:f0:
         23:c5:04:4a:8c:90:cd:cd:c7:d0:3e:53:ff:ce:06:fd:3c:3f:
         49:eb:9b:78:57:f9:cc:75:6d:47:ac:5c:2b:3c:b2:4f:d0:b7:
         9c:bf:c1:c2:9d:e3:09:e2:5e:21:18:f9:d7:d2:18:34:48:b4:
         a9:1c:30:91
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANhpnzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTAwNzIyMjIyNVoXDTI0MDYyNzE4NDAz
MVowMzExMC8GA1UEAxMoZjA2OWVhYTI1YTJhY2U2YTA5Mjc1ZDhjNWQzZGJmNTYy
NTFkNjhkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+QyEKBSaHh
2wRjfh1iBw2nRrJvCCClx87If/3pLSg8wJCaOGleRlCEeMMXWVXXgRlmeBHL6aJf
TfQep6szyMALfv36QsgWkb5fTEoqUP4Bw5aTxWIzvgpLLyxskd/ZMI6CTOy7ySw8
GAuJKepgyAXrFT/1Mfm4cDxhZpMGtWnSCzzm+U1aEDuaR9QdgHbwJUwc4q1HW9Uk
GLug5NfNcE+yi4jdgc3ln77fxnFhhABKKvOPwaQlDPZMQ2ThHve1oXOqQezUXw97
ayeI4edg0zkC0EiqY8GIDgu52YZwjeay+w60D5FvUN/rOKSQ6xvM53iuSSU6ByKn
lR1nQEGvOScCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTuo+/Asz5VeRC2XVYw83Ok
S8Ce4TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZTA3ZGVhOS1iNmZl
LTQ2MmItODdhNy00ZDY4YTRlNjNmMTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWUwN2RlYTktYjZmZS00
NjJiLTg3YTctNGQ2OGE0ZTYzZjE4L2YwNjllYWEyNWEyYWNlNmEwOTI3NWQ4YzVk
M2RiZjU2MjUxZDY4ZGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hGDANBAIAAjAHAwUAKAOWoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEo0wDQYJKoZIhvcNAQELBQADggEBAIDf
nY3b6vSE60PS0ujLQl6hDAHf4kHX5Ndd4iUNTkdLUpqd0T5tyRDHJqnUvaXz2wk5
Bgj0OX36YcExEwktyQnPlJy1yH5pOjix20O1EDEy5VNkQMmJ1wDS1MKMintgJBha
BYbwlvOAFHPflldbNCBkShGWNx0SLmG98XwSXk4I4lIHEQ4CuwSQv0zlOspT/8Uk
MY8lga6VKCI6xLuBLD9gMb8vwIlwXfPDAasS/Zv5AKvC9Xcv4AfasylDcUKu3UXa
NpWV8CPFBEqMkM3Nx9A+U//OBv08P0nrm3hX+cx1bUesXCs8sk/Qt5y/wcKd4wni
XiEY+dfSGDRItKkcMJE=
-----END CERTIFICATE-----