Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer
File:                     fa838a953551009c19f610b9c5f2d235fe909d9f.cer (raw, json)
Hash identifier:          B+q3mFX/vSKaoaYmPB7eInkjXZ8KwKMFS+V8UTu2L08=
Subject key identifier:   A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E105B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 13:54:44 +0000
Certificate not after:    Tue 09 Apr 2024 15:59:15 +0000
Subordinate resources:    AS: 265744
                          IP: 128.201.132.0/22
                          IP: 2803:73c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14747057 (0xe105b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 13:54:44 2020 GMT
            Not After : Apr  9 15:59:15 2024 GMT
        Subject: CN=fa838a953551009c19f610b9c5f2d235fe909d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cd:f8:62:cf:6c:21:9e:57:f7:fc:fa:35:4d:
                    ff:1a:5a:15:43:00:d5:32:42:a9:d0:d1:ce:f9:fa:
                    56:41:37:4b:07:29:3b:b3:93:7a:c5:f3:11:40:6e:
                    76:cb:3e:d7:dc:72:78:81:fb:59:12:d6:5a:b3:cf:
                    30:f6:52:2a:2b:f2:dc:de:3e:01:70:52:5d:15:e1:
                    f6:f6:fe:c1:aa:28:05:6e:35:35:27:5a:30:a4:a9:
                    99:06:75:67:67:13:2d:78:ef:71:35:63:e0:7a:25:
                    9f:bd:87:62:1d:94:b8:a9:b7:6f:98:1d:20:36:1e:
                    00:a1:e0:03:01:c5:6b:cf:6a:ee:cc:ea:55:cd:b0:
                    aa:7f:90:b7:3a:5b:cd:9a:a6:c3:6f:17:5f:9e:c4:
                    83:f2:e8:2c:84:86:d5:43:b7:d9:37:c0:f2:a1:78:
                    e3:30:5f:b5:d4:2c:d8:7e:f8:f6:c7:06:cd:92:aa:
                    d2:2e:c8:da:a2:53:89:b0:53:25:59:e0:f9:e7:9d:
                    fd:3f:67:bc:1e:95:5d:18:8b:82:90:4c:38:13:9c:
                    cb:0e:e4:24:a5:48:9a:8a:c2:21:cf:99:e8:bc:00:
                    19:ed:02:8d:7e:ba:d0:fe:1b:2e:a0:82:83:14:84:
                    18:d2:e0:75:b3:30:15:3a:b5:46:5d:99:d1:e4:43:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.132.0/22
                IPv6:
                  2803:73c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265744

    Signature Algorithm: sha256WithRSAEncryption
         95:6a:a5:3b:b5:fd:08:4b:ed:6e:0b:ed:e4:0c:e9:46:a7:15:
         81:c1:7a:55:ac:b7:b2:10:82:cd:de:ab:cb:db:f7:18:d8:ca:
         b4:cc:ae:e0:c5:08:a4:a1:5d:31:30:1a:c6:dc:11:59:90:c0:
         e5:d8:b8:16:d8:26:72:7f:b5:a5:69:29:ed:48:ff:fa:af:5e:
         1c:5c:d6:1e:64:a5:04:5a:c1:63:13:76:fe:50:8e:6c:59:03:
         7a:5f:35:7a:2e:4d:2b:8f:f5:b6:cb:fe:b9:6c:48:74:26:2e:
         00:5e:35:9b:22:78:a5:bc:bc:35:51:59:8f:21:5b:5e:8a:58:
         0c:bb:b7:b9:2b:5b:c9:77:f8:ea:d8:e9:9b:03:73:20:af:f6:
         f9:6c:d4:db:d8:b8:04:1e:b0:76:a3:fd:73:29:10:35:7e:12:
         15:9d:a6:d2:91:f4:84:01:1d:d6:00:01:df:6e:b8:6c:ac:c6:
         79:4a:14:7a:b2:ca:70:ab:8f:23:a8:51:95:14:77:15:6b:8b:
         9f:f2:1e:22:3f:20:5a:c8:fe:a1:b5:e8:79:d5:f9:dd:5f:80:
         44:65:8f:85:11:2d:63:e0:95:02:8b:ac:76:cd:82:ef:a6:f8:
         10:b4:6a:c4:43:f0:70:f2:1e:b5:1e:5c:59:48:91:fe:3e:fa:
         46:6a:33:15
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOEFsTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDQxNzEzNTQ0NFoXDTI0MDQwOTE1NTkx
NVowMzExMC8GA1UEAxMoZmE4MzhhOTUzNTUxMDA5YzE5ZjYxMGI5YzVmMmQyMzVm
ZTkwOWQ5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIHN+GLPbCGe
V/f8+jVN/xpaFUMA1TJCqdDRzvn6VkE3SwcpO7OTesXzEUBudss+19xyeIH7WRLW
WrPPMPZSKivy3N4+AXBSXRXh9vb+waooBW41NSdaMKSpmQZ1Z2cTLXjvcTVj4Hol
n72HYh2UuKm3b5gdIDYeAKHgAwHFa89q7szqVc2wqn+QtzpbzZqmw28XX57Eg/Lo
LISG1UO32TfA8qF44zBftdQs2H749scGzZKq0i7I2qJTibBTJVng+eed/T9nvB6V
XRiLgpBMOBOcyw7kJKVImorCIc+Z6LwAGe0CjX660P4bLqCCgxSEGNLgdbMwFTq1
Rl2Z0eRDR2kCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSorYouVDO7tNqRO61+ONJZ
qVZN+TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81MmNjNTQyOC0yZjky
LTQ4OGYtYmNlZC1kNjBmYTg4ZWEyZTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTJjYzU0MjgtMmY5Mi00
ODhmLWJjZWQtZDYwZmE4OGVhMmUyL2ZhODM4YTk1MzU1MTAwOWMxOWY2MTBiOWM1
ZjJkMjM1ZmU5MDlkOWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoDJhDANBAIAAjAHAwUAKANzwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDhAwDQYJKoZIhvcNAQELBQADggEBAJVq
pTu1/QhL7W4L7eQM6UanFYHBelWst7IQgs3eq8vb9xjYyrTMruDFCKShXTEwGsbc
EVmQwOXYuBbYJnJ/taVpKe1I//qvXhxc1h5kpQRawWMTdv5QjmxZA3pfNXouTSuP
9bbL/rlsSHQmLgBeNZsieKW8vDVRWY8hW16KWAy7t7krW8l3+OrY6ZsDcyCv9vls
1NvYuAQesHaj/XMpEDV+EhWdptKR9IQBHdYAAd9uuGysxnlKFHqyynCrjyOoUZUU
dxVri5/yHiI/IFrI/qG16HnV+d1fgERlj4URLWPglQKLrHbNgu+m+BC0asRD8HDy
HrUeXFlIkf4++kZqMxU=
-----END CERTIFICATE-----