Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9dda81081c9143eb886dec2ada8317a4d52e07.cer
File:                     fa9dda81081c9143eb886dec2ada8317a4d52e07.cer (raw, json)
Hash identifier:          CAoGh0iU7YBbK/YcTtl8DUalv10L/6mOQARuiseD3Vc=
Subject key identifier:   E1:21:00:71:E7:35:21:2D:3D:D0:39:4D:FB:BB:53:0C:B3:FC:BF:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D67115
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/fa9dda81081c9143eb886dec2ada8317a4d52e07.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2019 14:09:28 +0000
Certificate not after:    Mon 04 Dec 2023 18:31:13 +0000
Subordinate resources:    AS: 267767
                          IP: 45.169.112.0/22
                          IP: 2803:dba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14053653 (0xd67115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 14:09:28 2019 GMT
            Not After : Dec  4 18:31:13 2023 GMT
        Subject: CN=fa9dda81081c9143eb886dec2ada8317a4d52e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:89:15:8f:30:73:59:ac:9c:50:b3:7e:e3:
                    ec:d6:6f:0b:4f:2d:5b:8b:5d:e2:76:03:56:a4:28:
                    1b:88:a2:3e:c4:49:3f:e6:d6:79:53:79:bd:ef:d0:
                    53:4d:e4:ec:f0:a2:80:41:15:87:a0:bd:25:66:a9:
                    17:8f:cf:7c:8e:97:78:83:d3:f4:e0:4d:ec:7a:de:
                    39:76:a4:e1:1e:21:c9:6d:1f:ed:83:e4:f5:0d:9c:
                    41:4f:ae:a3:f0:15:08:17:c2:3c:71:f9:63:57:f9:
                    6e:fa:09:b7:54:a7:66:32:2f:ad:bb:6a:db:80:b1:
                    f2:38:ab:fc:e7:68:3c:8e:9b:35:b5:af:3d:d1:fb:
                    31:8a:40:d6:aa:90:45:df:32:ec:d8:7e:9c:22:11:
                    25:27:12:10:01:8a:5f:ea:8a:c0:b0:fd:4f:6e:da:
                    0a:b0:51:ad:e5:d7:5e:81:ac:fb:86:68:bd:11:ca:
                    e6:36:e0:39:ec:a5:cf:f8:a0:7d:40:5b:7b:22:60:
                    12:8c:3f:72:58:c5:47:b6:53:5b:3b:62:8f:86:e2:
                    85:53:1c:74:ec:ec:16:24:9b:7d:81:3f:bc:67:ff:
                    44:36:2c:82:6e:45:88:63:41:86:f9:82:8e:3c:8a:
                    e0:78:1d:8f:65:2e:d8:fc:0a:7c:73:87:f0:8f:ee:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:21:00:71:E7:35:21:2D:3D:D0:39:4D:FB:BB:53:0C:B3:FC:BF:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/fa9dda81081c9143eb886dec2ada8317a4d52e07.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.112.0/22
                IPv6:
                  2803:dba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267767

    Signature Algorithm: sha256WithRSAEncryption
         c3:3e:49:b7:9f:67:64:89:96:18:06:95:95:04:b1:b0:38:f7:
         46:07:80:5e:be:66:63:76:db:d6:e1:72:b9:ae:a6:65:c5:f6:
         a7:64:e5:09:72:d2:8b:dd:2f:09:0a:c2:08:86:6f:64:29:d5:
         d6:1c:5f:8e:94:2c:e7:4f:e2:2e:03:b6:df:22:30:46:4b:de:
         ab:19:0e:06:2d:b6:93:aa:6c:ad:4b:75:2c:8f:79:3d:c0:0f:
         08:e2:07:23:fc:fc:d4:ea:4d:59:2b:ca:51:37:4a:2d:2e:86:
         eb:dd:ce:cd:70:68:38:4c:e4:f4:aa:26:42:f2:cd:fb:ec:24:
         e3:6d:94:a8:10:52:d5:41:da:46:59:c3:78:27:f3:cd:a3:cc:
         3d:f2:98:ed:ad:ad:ce:ff:87:32:27:4a:05:8c:92:8c:f6:18:
         6f:84:5d:7a:4a:ca:05:d2:ad:ee:28:48:f5:62:ca:cc:76:44:
         37:e0:52:25:fa:bb:89:e8:3f:d3:71:da:80:77:fc:5c:7d:e1:
         cd:53:b2:4e:e3:6b:b8:b2:2b:58:7f:3b:d4:d5:60:e1:5f:bd:
         0a:5f:2e:1c:74:d9:bd:bb:93:84:ab:a8:7a:0f:a5:b8:54:51:
         32:cb:2b:51:e0:f8:31:ed:48:67:99:97:e3:d2:ae:12:c6:0b:
         b0:f8:17:17
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANZxFTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDkxNzE0MDkyOFoXDTIzMTIwNDE4MzEx
M1owMzExMC8GA1UEAxMoZmE5ZGRhODEwODFjOTE0M2ViODg2ZGVjMmFkYTgzMTdh
NGQ1MmUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqniRWPMHNZ
rJxQs37j7NZvC08tW4td4nYDVqQoG4iiPsRJP+bWeVN5ve/QU03k7PCigEEVh6C9
JWapF4/PfI6XeIPT9OBN7HreOXak4R4hyW0f7YPk9Q2cQU+uo/AVCBfCPHH5Y1f5
bvoJt1SnZjIvrbtq24Cx8jir/OdoPI6bNbWvPdH7MYpA1qqQRd8y7Nh+nCIRJScS
EAGKX+qKwLD9T27aCrBRreXXXoGs+4ZovRHK5jbgOeylz/igfUBbeyJgEow/cljF
R7ZTWztij4bihVMcdOzsFiSbfYE/vGf/RDYsgm5FiGNBhvmCjjyK4Hgdj2Uu2PwK
fHOH8I/uH88CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBThIQBx5zUhLT3QOU37u1MM
s/y/qzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYTIxZDJlMy1iYzA1
LTRjMTctYjlkNy1jMTQwZDY1NTI1MTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2EyMWQyZTMtYmMwNS00
YzE3LWI5ZDctYzE0MGQ2NTUyNTE1L2ZhOWRkYTgxMDgxYzkxNDNlYjg4NmRlYzJh
ZGE4MzE3YTRkNTJlMDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2pcDANBAIAAjAHAwUAKAPboDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFfcwDQYJKoZIhvcNAQELBQADggEBAMM+
SbefZ2SJlhgGlZUEsbA490YHgF6+ZmN229bhcrmupmXF9qdk5Qly0ovdLwkKwgiG
b2Qp1dYcX46ULOdP4i4Dtt8iMEZL3qsZDgYttpOqbK1LdSyPeT3ADwjiByP8/NTq
TVkrylE3Si0uhuvdzs1waDhM5PSqJkLyzfvsJONtlKgQUtVB2kZZw3gn882jzD3y
mO2trc7/hzInSgWMkoz2GG+EXXpKygXSre4oSPViysx2RDfgUiX6u4noP9Nx2oB3
/Fx94c1Tsk7ja7iyK1h/O9TVYOFfvQpfLhx02b27k4SrqHoPpbhUUTLLK1Hg+DHt
SGeZl+PSrhLGC7D4Fxc=
-----END CERTIFICATE-----