Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8ee6d0b2ab93217120c81912e01b4d31ea04032.cer
File:                     a8ee6d0b2ab93217120c81912e01b4d31ea04032.cer (raw, json)
Hash identifier:          L6ivqBgo3RUPqFerjsFxPMldzdqVkTzBlLfKN7aRKvg=
Subject key identifier:   B6:02:41:02:D0:F9:2C:C6:04:18:B7:09:71:2B:B0:8D:C4:78:6E:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01019144
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/a8ee6d0b2ab93217120c81912e01b4d31ea04032.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Oct 2020 20:17:57 +0000
Certificate not after:    Wed 18 Dec 2024 19:00:21 +0000
Subordinate resources:    AS: 267774
                          IP: 45.171.64.0/22
                          IP: 2803:a7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16879940 (0x1019144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 30 20:17:57 2020 GMT
            Not After : Dec 18 19:00:21 2024 GMT
        Subject: CN=a8ee6d0b2ab93217120c81912e01b4d31ea04032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:5f:a0:6b:85:6d:cb:b6:de:d2:11:a9:ba:
                    de:51:5e:6e:47:2a:24:71:63:91:51:94:13:1b:ec:
                    9a:a6:5d:78:31:eb:4f:71:ee:54:6c:f8:37:e2:79:
                    68:a5:b0:69:9d:11:57:bc:25:42:1d:de:9b:47:4c:
                    4f:15:29:c5:18:43:b1:4e:82:84:b0:20:04:b2:92:
                    db:f6:7d:39:b7:00:81:2b:2d:56:45:d5:1d:b6:cb:
                    cd:f9:c1:c5:2b:ae:06:84:86:c1:4a:92:4c:65:01:
                    30:93:10:c7:c3:e6:f9:97:de:77:a5:11:be:58:e9:
                    9a:5c:24:b1:3e:93:64:69:5f:4e:9f:46:58:5f:ea:
                    3b:cf:35:92:8e:77:72:c8:68:57:de:b0:06:4f:d0:
                    34:61:0b:5d:d5:c7:29:71:fa:3a:a9:18:1a:60:eb:
                    65:09:db:b6:59:54:bf:f9:b3:66:08:c9:89:75:55:
                    55:17:e8:6a:37:3e:71:20:60:4e:75:ad:96:e2:5e:
                    0b:ff:26:d4:bf:32:0e:72:36:fa:ab:5b:c3:76:25:
                    ff:56:06:d0:d6:9b:e4:9a:39:3d:c0:ec:60:1a:4c:
                    76:52:d1:f9:3e:3d:86:c7:ac:05:3c:20:f3:98:ee:
                    5a:a9:50:24:e4:99:42:61:9d:71:bb:73:98:67:a2:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:41:02:D0:F9:2C:C6:04:18:B7:09:71:2B:B0:8D:C4:78:6E:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/a8ee6d0b2ab93217120c81912e01b4d31ea04032.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.64.0/22
                IPv6:
                  2803:a7a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267774

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:de:a4:1e:3b:9c:3c:18:ef:7b:90:cc:93:e6:75:e4:09:
         15:42:b1:b7:4a:3e:7d:28:ee:85:04:15:d2:bb:71:50:65:19:
         e4:cb:dd:2e:67:a2:83:25:12:86:8c:16:f9:15:94:37:42:a1:
         19:81:0a:28:01:4e:f8:af:55:cc:0e:63:70:7f:4c:a1:21:b0:
         53:98:bf:f5:5c:c3:52:d2:5b:b6:68:d5:ed:65:11:ed:11:da:
         1f:dd:18:2a:9e:7c:6e:7d:58:9a:ea:e7:ea:2b:05:ab:8b:f3:
         f6:73:35:c6:73:2b:de:d5:aa:81:4f:59:ed:f7:bd:d9:f8:ea:
         d7:79:61:b1:91:63:9b:d4:8d:da:f1:2a:c5:51:90:5b:bf:dd:
         5b:74:3b:26:b1:56:f8:5c:b1:df:87:1e:ca:29:23:65:01:b4:
         8b:13:e0:f3:91:27:28:e8:24:4d:38:c3:4f:e3:33:cc:3b:c0:
         9a:cf:db:ed:71:99:72:4c:ad:38:e8:ba:c7:38:e3:f7:46:cb:
         40:fc:64:94:68:fc:e8:2c:a0:ae:26:d5:27:5c:97:71:35:d1:
         9a:83:3f:ac:61:4d:bb:87:5a:53:14:4b:86:56:52:c7:dc:86:
         f3:1f:c5:4d:eb:65:4c:ca:48:53:28:2b:4f:90:c7:70:16:5b:
         97:6d:1e:12
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQGRRDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTAzMDIwMTc1N1oXDTI0MTIxODE5MDAy
MVowMzExMC8GA1UEAxMoYThlZTZkMGIyYWI5MzIxNzEyMGM4MTkxMmUwMWI0ZDMx
ZWEwNDAzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTWX6BrhW3L
tt7SEam63lFebkcqJHFjkVGUExvsmqZdeDHrT3HuVGz4N+J5aKWwaZ0RV7wlQh3e
m0dMTxUpxRhDsU6ChLAgBLKS2/Z9ObcAgSstVkXVHbbLzfnBxSuuBoSGwUqSTGUB
MJMQx8Pm+Zfed6URvljpmlwksT6TZGlfTp9GWF/qO881ko53cshoV96wBk/QNGEL
XdXHKXH6OqkYGmDrZQnbtllUv/mzZgjJiXVVVRfoajc+cSBgTnWtluJeC/8m1L8y
DnI2+qtbw3Yl/1YG0Nab5Jo5PcDsYBpMdlLR+T49hsesBTwg85juWqlQJOSZQmGd
cbtzmGeiDscCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS2AkEC0PksxgQYtwlxK7CN
xHhuijAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xYzgwZDZlOC1kYmQ4
LTQ1OWQtOWMzZS00NTc2NzU3OGQwYzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWM4MGQ2ZTgtZGJkOC00
NTlkLTljM2UtNDU3Njc1NzhkMGMxL2E4ZWU2ZDBiMmFiOTMyMTcxMjBjODE5MTJl
MDFiNGQzMWVhMDQwMzIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2rQDANBAIAAjAHAwUAKAOnoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFf4wDQYJKoZIhvcNAQELBQADggEBAGiM
3qQeO5w8GO97kMyT5nXkCRVCsbdKPn0o7oUEFdK7cVBlGeTL3S5nooMlEoaMFvkV
lDdCoRmBCigBTvivVcwOY3B/TKEhsFOYv/Vcw1LSW7Zo1e1lEe0R2h/dGCqefG59
WJrq5+orBauL8/ZzNcZzK97VqoFPWe33vdn46td5YbGRY5vUjdrxKsVRkFu/3Vt0
OyaxVvhcsd+HHsopI2UBtIsT4PORJyjoJE04w0/jM8w7wJrP2+1xmXJMrTjousc4
4/dGy0D8ZJRo/OgsoK4m1Sdcl3E10ZqDP6xhTbuHWlMUS4ZWUsfchvMfxU3rZUzK
SFMoK0+Qx3AWW5dtHhI=
-----END CERTIFICATE-----