Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer
File:                     bcdf4d97f35391de289dae3eec82d9065b4520f4.cer (raw, json)
Hash identifier:          Xogjqetn0OfIZjN2QPul7vk5qgSaTHMpD/Srx2e2OdE=
Subject key identifier:   12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDC0AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2020 22:20:16 +0000
Certificate not after:    Fri 22 Nov 2024 19:00:18 +0000
Subordinate resources:    IP: 45.189.216.0/22
                          IP: 2803:82e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16629934 (0xfdc0ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  6 22:20:16 2020 GMT
            Not After : Nov 22 19:00:18 2024 GMT
        Subject: CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:7b:94:89:1e:29:42:1d:0c:87:0a:40:29:
                    05:a8:9f:fc:a0:cc:38:4a:7b:07:c1:2b:c2:fe:f9:
                    da:9a:76:e0:f6:47:bb:48:b9:36:1d:3f:a6:7b:6f:
                    b7:57:c1:8b:7f:eb:6c:be:c4:80:8b:38:53:56:8b:
                    bb:72:88:ce:af:eb:4f:97:16:e8:d0:e2:ab:6c:45:
                    84:44:d6:83:c3:a3:5d:2d:e4:6b:ca:eb:ed:f4:71:
                    8e:b1:e5:1b:dc:70:37:13:e7:22:70:c9:fc:be:e1:
                    09:b5:58:0e:4a:ec:a4:f9:23:9e:7b:64:ea:9c:fe:
                    06:f8:ae:00:69:da:7e:89:a2:b0:c2:6c:ef:15:d6:
                    e1:14:94:b1:35:98:2e:dd:89:30:46:79:77:80:bc:
                    40:7a:91:ca:03:67:a7:f5:b6:99:82:fc:d0:c1:ec:
                    40:22:e9:2f:a3:d3:6f:65:58:76:f6:7a:7a:f8:b7:
                    94:3f:3a:40:81:fd:e3:a1:0c:ca:b6:b4:bb:88:48:
                    5e:f7:a0:6e:fe:72:f6:f1:26:53:da:fc:fc:3d:d4:
                    27:c9:1b:3e:25:f6:42:7d:bf:fc:ae:8e:9f:c2:e3:
                    4a:a3:4a:6d:50:c3:ec:b0:44:a0:49:d6:c6:b8:d5:
                    80:4c:a2:4a:a0:75:ff:e0:82:26:2f:8a:62:11:b2:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.216.0/22
                IPv6:
                  2803:82e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:0e:3c:20:73:e5:fa:8e:0d:d9:34:be:cf:61:88:9a:20:
         de:5d:a6:43:52:2b:79:c9:02:e3:29:d0:5d:d5:5f:57:fd:c9:
         93:d0:47:48:2d:ae:48:27:44:c0:69:c9:b6:51:81:3f:48:dd:
         2f:c6:c5:7d:ff:77:32:94:46:bb:09:60:3d:0f:e2:6f:1c:1c:
         be:29:07:77:b0:8d:0c:97:32:ca:ab:51:83:f4:5f:52:bc:bd:
         07:eb:08:af:bb:f9:8b:b5:f2:3b:01:67:6d:c2:98:67:11:61:
         26:1b:cc:43:e5:60:5e:a4:5f:26:58:8a:a2:e2:06:86:97:92:
         ce:06:4d:98:3a:af:a3:25:94:5a:75:cc:bf:a9:32:0b:b7:80:
         d5:a4:b6:a0:b2:cc:08:ce:6c:3b:e7:0d:50:0c:bd:67:5d:1b:
         a8:0b:b4:c3:5e:77:f0:53:74:09:02:45:3e:38:47:05:a3:91:
         2f:aa:81:a5:24:df:51:b2:a5:be:ec:88:75:c4:d6:41:fc:8d:
         6d:6c:5a:39:e5:31:17:cb:f8:84:ec:b9:a7:a5:b0:70:18:08:
         e6:e7:a5:fa:30:b2:1d:1a:ad:ea:82:57:24:37:c0:d3:f9:de:
         e4:77:80:88:a4:db:8f:c3:27:9c:f1:24:8d:6a:d7:b8:8c:ba:
         aa:f5:c9:b1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAP3ArjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDIwNjIyMjAxNloXDTI0MTEyMjE5MDAx
OFowMzExMC8GA1UEAxMoYmNkZjRkOTdmMzUzOTFkZTI4OWRhZTNlZWM4MmQ5MDY1
YjQ1MjBmNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIkme5SJHilC
HQyHCkApBaif/KDMOEp7B8Erwv752pp24PZHu0i5Nh0/pntvt1fBi3/rbL7EgIs4
U1aLu3KIzq/rT5cW6NDiq2xFhETWg8OjXS3ka8rr7fRxjrHlG9xwNxPnInDJ/L7h
CbVYDkrspPkjnntk6pz+BviuAGnafomisMJs7xXW4RSUsTWYLt2JMEZ5d4C8QHqR
ygNnp/W2mYL80MHsQCLpL6PTb2VYdvZ6evi3lD86QIH946EMyra0u4hIXvegbv5y
9vEmU9r8/D3UJ8kbPiX2Qn2//K6On8LjSqNKbVDD7LBEoEnWxrjVgEyiSqB1/+CC
Ji+KYhGylOkCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQSijnW6YqbswORS6fU6fsf
HXC7tzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mZmZlNDk1OS1lOWY4
LTQ0NzItODBmMy0xZGY0MzkzNTJlNTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmZmZTQ5NTktZTlmOC00
NDcyLTgwZjMtMWRmNDM5MzUyZTUwL2JjZGY0ZDk3ZjM1MzkxZGUyODlkYWUzZWVj
ODJkOTA2NWI0NTIwZjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi292DANBAIAAjAHAwUAKAOC4DAN
BgkqhkiG9w0BAQsFAAOCAQEAOyAOPCBz5fqODdk0vs9hiJog3l2mQ1IreckC4ynQ
XdVfV/3Jk9BHSC2uSCdEwGnJtlGBP0jdL8bFff93MpRGuwlgPQ/ibxwcvikHd7CN
DJcyyqtRg/RfUry9B+sIr7v5i7XyOwFnbcKYZxFhJhvMQ+VgXqRfJliKouIGhpeS
zgZNmDqvoyWUWnXMv6kyC7eA1aS2oLLMCM5sO+cNUAy9Z10bqAu0w1538FN0CQJF
PjhHBaORL6qBpSTfUbKlvuyIdcTWQfyNbWxaOeUxF8v4hOy5p6WwcBgI5uel+jCy
HRqt6oJXJDfA0/ne5HeAiKTbj8MnnPEkjWrXuIy6qvXJsQ==
-----END CERTIFICATE-----