Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer
File:                     7683d32cdb4affaba4c3cf86675e6414d022d8db.cer (raw, json)
Hash identifier:          AXqAnZC1pYO/1wwDbBW+3eK2OjC7gRgAOLfQDx2V5uM=
Subject key identifier:   81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE24A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jun 2019 20:45:48 +0000
Certificate not after:    Mon 25 Nov 2024 17:22:18 +0000
Subordinate resources:    AS: 266709
                          IP: 45.229.148.0/23
                          IP: 2803:fd20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16655521 (0xfe24a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 20:45:48 2019 GMT
            Not After : Nov 25 17:22:18 2024 GMT
        Subject: CN=7683d32cdb4affaba4c3cf86675e6414d022d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:a2:87:b1:dd:9d:66:43:72:b8:be:5f:b4:
                    e9:e4:fa:48:98:89:e4:e2:b0:59:17:cc:ea:f5:93:
                    f9:25:c0:b0:a5:e3:2e:46:21:35:e1:56:fd:99:20:
                    e8:1e:0b:34:52:0f:3b:26:62:9f:e0:10:ee:83:2d:
                    3a:26:11:16:e5:68:1c:00:85:79:c7:ec:b9:54:23:
                    20:e8:64:02:7f:4c:8f:71:84:a1:92:71:d2:03:79:
                    74:f3:f3:e1:df:86:58:c2:35:e2:85:c5:34:7a:27:
                    8c:f6:3b:6d:2f:a4:0e:d6:d0:a3:6f:01:14:54:54:
                    a6:60:b5:f8:75:5d:b0:bd:12:af:8a:9c:65:a3:64:
                    aa:7c:6f:31:5e:15:51:17:87:22:4f:7f:2a:3d:36:
                    77:57:04:9f:b9:49:41:18:f9:3e:c7:eb:f7:00:13:
                    4d:59:2f:05:e1:09:1b:f9:b0:59:f1:86:0d:7b:76:
                    28:b5:e1:8c:04:6c:c3:38:3b:df:ff:97:c4:3a:71:
                    9c:7f:cc:95:ee:d9:a4:ee:fb:d0:f7:98:2c:1c:65:
                    d6:da:eb:83:21:bc:ad:6e:b7:ae:f0:0c:db:af:21:
                    86:9e:b9:87:9d:b2:f7:27:97:92:bd:c7:b6:73:fa:
                    d6:27:0c:8e:02:d8:01:52:97:cb:8e:93:43:3a:32:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.148.0/23
                IPv6:
                  2803:fd20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266709

    Signature Algorithm: sha256WithRSAEncryption
         0d:be:1d:67:4f:5c:2b:fd:9b:ee:9c:4d:5a:78:43:7d:65:86:
         8b:6d:77:7d:a5:fb:0f:68:22:22:ef:7f:49:ea:d9:5c:9a:86:
         33:01:e1:96:85:cf:16:58:cb:31:27:e6:1c:e2:cc:e5:a4:7e:
         97:cd:f0:3a:33:bd:cc:02:92:ad:c4:25:bb:09:a6:af:81:72:
         c7:aa:cb:13:7b:94:84:de:2b:b8:90:a0:84:9a:b9:3e:a1:2a:
         66:72:b8:f5:93:65:31:1b:c0:70:54:2b:40:60:51:fc:78:e3:
         7f:94:43:13:1f:76:e3:db:7a:5a:69:fa:28:33:44:77:db:2f:
         9f:6d:a8:c6:95:a7:b5:2e:e1:c0:4d:de:26:0f:fe:3b:0b:2e:
         18:f5:e3:26:ec:e6:34:5b:52:7b:d8:23:76:60:40:76:65:35:
         6d:6f:ac:fc:44:d7:b0:19:0a:7e:94:ac:cf:c4:72:9b:fe:01:
         b9:00:17:22:49:56:52:89:e1:12:3d:fd:eb:49:b9:2b:50:1d:
         fc:0f:0f:af:af:13:e5:37:f6:11:1e:eb:27:96:6b:25:5e:76:
         f7:be:67:1f:f1:49:d1:56:91:fa:75:d2:1f:32:25:5f:e4:e4:
         15:df:44:12:09:98:d3:02:d3:6c:99:2c:ce:7c:71:89:72:05:
         50:08:16:9a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP4koTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDYwNjIwNDU0OFoXDTI0MTEyNTE3MjIx
OFowMzExMC8GA1UEAxMoNzY4M2QzMmNkYjRhZmZhYmE0YzNjZjg2Njc1ZTY0MTRk
MDIyZDhkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJdjooex3Z1m
Q3K4vl+06eT6SJiJ5OKwWRfM6vWT+SXAsKXjLkYhNeFW/Zkg6B4LNFIPOyZin+AQ
7oMtOiYRFuVoHACFecfsuVQjIOhkAn9Mj3GEoZJx0gN5dPPz4d+GWMI14oXFNHon
jPY7bS+kDtbQo28BFFRUpmC1+HVdsL0Sr4qcZaNkqnxvMV4VUReHIk9/Kj02d1cE
n7lJQRj5Psfr9wATTVkvBeEJG/mwWfGGDXt2KLXhjARswzg73/+XxDpxnH/Mle7Z
pO770PeYLBxl1trrgyG8rW63rvAM268hhp65h52y9yeXkr3HtnP61icMjgLYAVKX
y46TQzoy58ECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSBTDxgkjVG/5JrUhbB1KRW
ssdRwjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMGU3ZWJiNS01YTNl
LTRjMDktOTA3MS0wN2VjOTNmN2RhZmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzBlN2ViYjUtNWEzZS00
YzA5LTkwNzEtMDdlYzkzZjdkYWZlLzc2ODNkMzJjZGI0YWZmYWJhNGMzY2Y4NjY3
NWU2NDE0ZDAyMmQ4ZGIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS3llDANBAIAAjAHAwUAKAP9IDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEdUwDQYJKoZIhvcNAQELBQADggEBAA2+
HWdPXCv9m+6cTVp4Q31lhottd32l+w9oIiLvf0nq2VyahjMB4ZaFzxZYyzEn5hzi
zOWkfpfN8DozvcwCkq3EJbsJpq+BcseqyxN7lITeK7iQoISauT6hKmZyuPWTZTEb
wHBUK0BgUfx443+UQxMfduPbelpp+igzRHfbL59tqMaVp7Uu4cBN3iYP/jsLLhj1
4ybs5jRbUnvYI3ZgQHZlNW1vrPxE17AZCn6UrM/Ecpv+AbkAFyJJVlKJ4RI9/etJ
uStQHfwPD6+vE+U39hEe6yeWayVedve+Zx/xSdFWkfp10h8yJV/k5BXfRBIJmNMC
02yZLM58cYlyBVAIFpo=
-----END CERTIFICATE-----