Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
File:                     ffe64fcbdace0b26df99b62a807cea23c8707e12.cer (raw, json)
Hash identifier:          oCKgAhacm96O7RBHcpliOpetMKFKOw9imh9gJs++r+I=
Subject key identifier:   20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC6A67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/ffe64fcbdace0b26df99b62a807cea23c8707e12.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 Aug 2020 15:47:38 +0000
Certificate not after:    Sun 10 Nov 2024 17:50:26 +0000
Subordinate resources:    AS: 269899
                          IP: 45.191.244.0/22
                          IP: 2803:b4e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16542311 (0xfc6a67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 21 15:47:38 2020 GMT
            Not After : Nov 10 17:50:26 2024 GMT
        Subject: CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:eb:ae:e3:b8:59:1c:c5:d7:93:cf:01:46:70:
                    43:44:32:f6:0c:23:b7:19:da:cf:55:e5:7a:79:4a:
                    37:06:44:7d:5a:d0:fe:bd:34:f9:ca:ab:fc:12:85:
                    c7:49:68:a3:ce:05:50:6f:69:35:c8:57:ac:dd:3d:
                    8c:03:fb:27:42:87:58:3f:8a:4c:22:1b:ab:f9:bf:
                    b8:2e:04:ab:30:7d:50:49:bb:0a:02:b1:a3:d6:58:
                    1c:f5:87:1d:e0:8f:72:ae:98:d3:81:82:06:c5:d2:
                    c8:bb:82:aa:e0:ae:19:d8:e1:2c:72:bf:c9:6d:df:
                    94:98:f1:3a:bb:ec:9e:19:1d:88:53:b4:89:c1:bc:
                    80:4b:e1:ec:4e:3b:87:3c:09:63:e4:28:65:3c:6b:
                    c6:2d:bd:84:16:9e:9c:62:35:00:e6:8f:62:58:73:
                    6e:9a:af:80:d7:07:90:b1:42:e6:1b:6e:f4:ad:0e:
                    d4:7c:e0:98:2f:07:26:d9:e8:ad:4a:f8:28:8e:b7:
                    aa:30:65:f3:b5:36:4b:1d:73:c1:62:90:7c:58:c1:
                    71:aa:ee:b3:f9:a2:97:67:16:b4:37:f1:94:ce:f8:
                    2a:dc:ff:a9:7d:1a:37:f5:7d:60:63:81:89:4f:03:
                    8d:c3:83:d8:d6:3b:78:27:e9:88:79:2c:bf:2f:b6:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/ffe64fcbdace0b26df99b62a807cea23c8707e12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.244.0/22
                IPv6:
                  2803:b4e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269899

    Signature Algorithm: sha256WithRSAEncryption
         24:00:07:a5:47:66:d0:14:82:f6:3e:36:df:03:84:63:af:8f:
         ca:69:bb:c6:7a:39:47:1e:0d:73:5b:9a:eb:fa:cf:35:08:ae:
         3e:52:1a:b5:db:3a:37:df:11:a9:4f:d8:4c:e0:58:06:bb:75:
         13:67:a6:08:2d:38:9b:d1:58:ec:75:8b:25:d5:7a:3d:d2:c1:
         1e:00:50:8c:44:ae:58:dc:6c:dc:78:6a:9f:86:7e:e7:ed:2d:
         3a:df:13:dd:ac:ec:43:a5:9d:df:d2:97:69:ad:1b:08:b2:60:
         21:50:62:a5:ab:5e:b6:44:53:00:81:af:3f:9d:d6:80:aa:11:
         2a:61:aa:5b:43:9c:28:5f:1d:7e:fa:1b:86:c5:20:40:1c:c4:
         de:30:84:a1:27:ef:77:7d:b7:c5:eb:c5:c4:a8:46:d1:1e:0b:
         3e:96:eb:22:69:ae:6b:16:91:5b:b6:7b:4e:d4:d9:1d:91:14:
         38:65:52:8f:a4:e2:58:fe:a7:b9:05:2b:c7:22:06:78:a3:01:
         c9:b4:c9:5c:73:4a:ac:37:e4:ce:78:fb:9b:04:8e:8b:28:54:
         1d:41:c1:87:a0:aa:07:be:58:cf:8c:a4:06:ea:4e:72:3e:d6:
         30:52:2b:6f:a4:e4:31:b9:ee:c5:f9:43:50:07:15:9f:91:9d:
         1d:63:90:1c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPxqZzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgyMTE1NDczOFoXDTI0MTExMDE3NTAy
NlowMzExMC8GA1UEAxMoZmZlNjRmY2JkYWNlMGIyNmRmOTliNjJhODA3Y2VhMjNj
ODcwN2UxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIvrruO4WRzF
15PPAUZwQ0Qy9gwjtxnaz1XlenlKNwZEfVrQ/r00+cqr/BKFx0loo84FUG9pNchX
rN09jAP7J0KHWD+KTCIbq/m/uC4EqzB9UEm7CgKxo9ZYHPWHHeCPcq6Y04GCBsXS
yLuCquCuGdjhLHK/yW3flJjxOrvsnhkdiFO0icG8gEvh7E47hzwJY+QoZTxrxi29
hBaenGI1AOaPYlhzbpqvgNcHkLFC5htu9K0O1HzgmC8HJtnorUr4KI63qjBl87U2
Sx1zwWKQfFjBcarus/mil2cWtDfxlM74Ktz/qX0aN/V9YGOBiU8DjcOD2NY7eCfp
iHksvy+2tNMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQg4EWIusjtDDYRrfOwxsak
HPoedTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82YWY3ZTkzNS1mNjlk
LTRlYTEtODY0OS1kMTI3YmM5ZGIxYzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmFmN2U5MzUtZjY5ZC00
ZWExLTg2NDktZDEyN2JjOWRiMWM3L2ZmZTY0ZmNiZGFjZTBiMjZkZjk5YjYyYTgw
N2NlYTIzYzg3MDdlMTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2/9DANBAIAAjAHAwUAKAO04DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHkswDQYJKoZIhvcNAQELBQADggEBACQA
B6VHZtAUgvY+Nt8DhGOvj8ppu8Z6OUceDXNbmuv6zzUIrj5SGrXbOjffEalP2Ezg
WAa7dRNnpggtOJvRWOx1iyXVej3SwR4AUIxErljcbNx4ap+GfuftLTrfE92s7EOl
nd/Sl2mtGwiyYCFQYqWrXrZEUwCBrz+d1oCqESphqltDnChfHX76G4bFIEAcxN4w
hKEn73d9t8XrxcSoRtEeCz6W6yJprmsWkVu2e07U2R2RFDhlUo+k4lj+p7kFK8ci
BnijAcm0yVxzSqw35M54+5sEjosoVB1BwYegqge+WM+MpAbqTnI+1jBSK2+k5DG5
7sX5Q1AHFZ+RnR1jkBw=
-----END CERTIFICATE-----