Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcf9bdd846fe87b0f20768b345cdac309b27ad7d.cer
File:                     fcf9bdd846fe87b0f20768b345cdac309b27ad7d.cer (raw, json)
Hash identifier:          s+29QIm8AkkA+Rg+jk8G21hqQRAfrphrm82aq6wMcW4=
Subject key identifier:   C8:AC:4C:32:66:3C:AC:C6:3C:3D:61:F4:B3:6C:4F:F4:31:85:0D:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB13A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c99f7f22-3371-4fa4-8bd5-fcd10107834d/fcf9bdd846fe87b0f20768b345cdac309b27ad7d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c99f7f22-3371-4fa4-8bd5-fcd10107834d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Dec 2020 17:47:17 +0000
Certificate not after:    Tue 29 Oct 2024 17:33:33 +0000
Subordinate resources:    IP: 2801:1d:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16454569 (0xfb13a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 30 17:47:17 2020 GMT
            Not After : Oct 29 17:33:33 2024 GMT
        Subject: CN=fcf9bdd846fe87b0f20768b345cdac309b27ad7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:bd:fe:1a:15:95:14:15:ca:75:0f:8f:b6:
                    9f:52:25:1c:5a:dc:cf:61:9f:7f:55:8f:60:ce:14:
                    d0:8c:d6:1a:33:de:f9:e8:bd:70:8e:0b:71:6b:39:
                    f1:28:57:7e:ec:bb:3b:98:d7:7a:68:27:b3:4d:28:
                    bd:2f:20:d3:fb:09:37:02:f4:f8:27:35:9a:a0:57:
                    82:0a:a9:43:c5:69:51:c4:d3:35:89:3d:f9:f2:a4:
                    45:3e:50:39:17:fc:17:34:b9:d2:12:60:8c:9d:c3:
                    9b:f7:db:b8:f5:31:6c:89:06:4d:12:d3:a2:85:f2:
                    4f:1d:e4:df:00:78:9f:08:0c:37:a7:6c:6c:cb:69:
                    71:37:81:c2:bb:91:4d:b0:eb:b0:9c:63:35:6c:a4:
                    77:cb:5e:06:75:c0:6d:a7:59:ee:a6:3c:ed:d4:d6:
                    b0:dd:8a:1c:be:aa:1f:97:58:eb:79:f8:43:fe:2a:
                    eb:01:a1:0e:dc:59:1e:ee:09:b1:c1:f4:d5:8b:3c:
                    81:80:75:d7:b5:6e:f9:12:6f:b1:45:48:2a:c8:bc:
                    5f:84:28:8b:3b:34:f0:bf:98:6e:ce:a8:2f:d8:e7:
                    0c:e0:91:ca:ec:cf:b0:9b:2f:0a:1b:fc:31:b1:d8:
                    dd:93:16:71:20:7d:c7:db:b1:a0:27:65:ec:2b:9c:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AC:4C:32:66:3C:AC:C6:3C:3D:61:F4:B3:6C:4F:F4:31:85:0D:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c99f7f22-3371-4fa4-8bd5-fcd10107834d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c99f7f22-3371-4fa4-8bd5-fcd10107834d/fcf9bdd846fe87b0f20768b345cdac309b27ad7d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:b5:c8:b4:28:14:12:d1:04:9b:6a:48:fb:bc:de:78:1c:ab:
         79:70:16:22:0a:22:c6:10:97:47:a1:f3:32:4c:d3:f0:27:ed:
         33:52:c9:43:90:fa:82:73:86:67:38:a0:3e:4e:13:8c:b0:3c:
         9a:f8:fa:24:cb:36:ea:ad:da:de:51:64:ba:84:50:d5:8c:15:
         3a:30:ea:23:ab:47:b4:d1:b4:65:9e:ea:de:2c:12:f2:4d:f6:
         63:f0:7a:81:91:01:de:58:6b:96:80:e3:96:3b:e5:ef:08:94:
         5d:cf:d0:e3:88:91:49:67:b8:67:07:42:85:9b:fa:9c:d8:74:
         e9:8e:5a:0c:4a:b3:05:f5:46:f3:f9:ca:70:b2:db:67:fd:71:
         c0:89:c8:e9:04:6e:e3:9b:60:52:39:46:f4:ed:67:c0:3f:4d:
         49:76:14:48:70:08:e8:42:6d:4b:7b:a6:3d:34:4b:00:37:06:
         05:10:e5:35:b9:52:68:2f:5a:2b:b4:ea:b0:db:60:d4:d8:36:
         eb:99:a2:d2:71:bb:42:0e:05:39:8f:1e:dc:85:72:60:85:ce:
         77:00:8f:87:bf:31:a4:6b:95:57:eb:93:b6:00:a7:43:a2:d9:
         e8:fb:a7:02:fb:af:8a:2e:35:cf:e3:07:a0:f1:49:d9:b4:a5:
         b8:65:95:35
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPsTqTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTIzMDE3NDcxN1oXDTI0MTAyOTE3MzMz
M1owMzExMC8GA1UEAxMoZmNmOWJkZDg0NmZlODdiMGYyMDc2OGIzNDVjZGFjMzA5
YjI3YWQ3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALS0vf4aFZUU
Fcp1D4+2n1IlHFrcz2Gff1WPYM4U0IzWGjPe+ei9cI4LcWs58ShXfuy7O5jXemgn
s00ovS8g0/sJNwL0+Cc1mqBXggqpQ8VpUcTTNYk9+fKkRT5QORf8FzS50hJgjJ3D
m/fbuPUxbIkGTRLTooXyTx3k3wB4nwgMN6dsbMtpcTeBwruRTbDrsJxjNWykd8te
BnXAbadZ7qY87dTWsN2KHL6qH5dY63n4Q/4q6wGhDtxZHu4JscH01Ys8gYB117Vu
+RJvsUVIKsi8X4Qoizs08L+Ybs6oL9jnDOCRyuzPsJsvChv8MbHY3ZMWcSB9x9ux
oCdl7CucysUCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBTIrEwyZjysxjw9YfSzbE/0
MYUNrzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jOTlmN2YyMi0zMzcx
LTRmYTQtOGJkNS1mY2QxMDEwNzgzNGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzk5ZjdmMjItMzM3MS00
ZmE0LThiZDUtZmNkMTAxMDc4MzRkL2ZjZjliZGQ4NDZmZTg3YjBmMjA3NjhiMzQ1
Y2RhYzMwOWIyN2FkN2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAB1oADANBgkqhkiG9w0BAQsF
AAOCAQEAnLXItCgUEtEEm2pI+7zeeByreXAWIgoixhCXR6HzMkzT8CftM1LJQ5D6
gnOGZzigPk4TjLA8mvj6JMs26q3a3lFkuoRQ1YwVOjDqI6tHtNG0ZZ7q3iwS8k32
Y/B6gZEB3lhrloDjljvl7wiUXc/Q44iRSWe4ZwdChZv6nNh06Y5aDEqzBfVG8/nK
cLLbZ/1xwInI6QRu45tgUjlG9O1nwD9NSXYUSHAI6EJtS3umPTRLADcGBRDlNblS
aC9aK7TqsNtg1Ng265mi0nG7Qg4FOY8e3IVyYIXOdwCPh78xpGuVV+uTtgCnQ6LZ
6PunAvuvii41z+MHoPFJ2bSluGWVNQ==
-----END CERTIFICATE-----