Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00571304e4b047e4afd608874a3be833cca4a3e.cer
File:                     c00571304e4b047e4afd608874a3be833cca4a3e.cer (raw, json)
Hash identifier:          ziKSq5OB+7DyQ6EGID7YOd618obK9cMolC09Ny8UogY=
Subject key identifier:   85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102CE5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/c00571304e4b047e4afd608874a3be833cca4a3e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Jul 2020 22:55:55 +0000
Certificate not after:    Fri 03 Jan 2025 14:26:22 +0000
Subordinate resources:    AS: 269958
                          IP: 200.33.206.0/24
                          IP: 2803:e6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16961118 (0x102ce5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 21 22:55:55 2020 GMT
            Not After : Jan  3 14:26:22 2025 GMT
        Subject: CN=c00571304e4b047e4afd608874a3be833cca4a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:ca:ff:5f:68:2b:e9:f5:1c:df:f8:aa:97:
                    9e:9b:e0:5d:3e:e8:b4:0d:46:0b:0b:05:5c:4c:a1:
                    93:36:33:c4:c4:37:ab:22:47:06:a7:ae:04:cf:5c:
                    53:76:30:cd:ab:ec:a3:ca:62:0e:9c:d6:4f:fa:45:
                    77:3d:c2:7d:3e:9a:74:cd:01:64:e2:da:fc:a9:b6:
                    b3:a2:f4:89:59:71:5c:8a:04:ab:ce:fa:33:df:db:
                    a2:1f:be:92:a6:f5:c1:48:dc:33:16:ef:ab:77:cd:
                    37:5c:a2:22:39:3c:85:ea:8e:ef:ac:98:bb:09:2c:
                    da:d3:37:1b:1c:be:eb:b4:fc:a3:93:04:88:a6:61:
                    55:48:56:33:71:10:b3:28:5b:83:fb:74:72:0a:7f:
                    cd:63:ae:58:34:d3:1f:45:ae:d7:c4:2a:a1:0b:cf:
                    e0:a3:a1:1a:32:ea:04:c7:03:a3:e8:ff:43:e8:34:
                    5a:23:c2:b0:6f:f0:08:49:73:80:37:c2:bf:85:bb:
                    9d:f2:d3:85:7a:11:19:f7:76:aa:da:37:16:5d:af:
                    ec:ab:2e:49:c1:42:33:36:8f:04:01:86:fd:76:27:
                    59:64:b5:72:4e:8d:42:bc:be:8d:27:14:3a:90:03:
                    d8:c5:98:f8:2c:ad:2d:d4:dc:1d:6c:d6:f4:a1:ed:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/c00571304e4b047e4afd608874a3be833cca4a3e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.206.0/24
                IPv6:
                  2803:e6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269958

    Signature Algorithm: sha256WithRSAEncryption
         c1:d6:e0:67:77:55:b7:be:a4:f8:38:d5:87:a8:18:d1:0a:04:
         46:df:b2:6f:39:b9:f0:a4:fc:cd:84:38:3f:71:9d:0f:c4:04:
         a4:19:f1:01:a6:4c:a2:da:6f:d9:92:6e:c6:be:58:4c:0f:6d:
         20:b4:58:6e:f8:41:dd:ff:44:71:b0:6a:69:9b:02:c1:51:91:
         36:8d:d3:ba:ee:f0:3c:5b:be:9e:14:21:f9:71:fe:96:70:2d:
         13:80:1e:92:9a:c2:b6:72:26:b2:b9:49:aa:39:38:7a:4e:e2:
         4d:ef:49:15:8b:de:18:ce:08:05:68:73:4c:1b:d5:ef:49:ed:
         97:cd:f0:4e:ad:18:e1:35:a7:b6:a7:44:19:15:43:99:98:59:
         cc:86:4e:8b:69:65:65:33:b3:81:6b:b7:99:86:d7:39:34:43:
         c1:11:d0:0e:a5:34:bf:78:a2:04:3c:b9:6c:50:7c:62:ce:5f:
         09:d2:2e:54:59:24:f2:ff:89:5b:20:10:c3:11:3a:bb:14:c7:
         99:73:6a:08:5b:83:bc:a8:85:ec:b4:b2:79:8f:76:5e:41:28:
         d9:8c:1a:02:7b:2d:31:e4:b6:23:78:22:47:a7:b0:97:0f:6c:
         2d:3e:75:ca:55:8f:e1:1b:c7:eb:34:1d:a2:a5:df:ed:08:e5:
         a9:e1:1a:4d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQLOXjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDcyMTIyNTU1NVoXDTI1MDEwMzE0MjYy
MlowMzExMC8GA1UEAxMoYzAwNTcxMzA0ZTRiMDQ3ZTRhZmQ2MDg4NzRhM2JlODMz
Y2NhNGEzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJOpyv9faCvp
9Rzf+KqXnpvgXT7otA1GCwsFXEyhkzYzxMQ3qyJHBqeuBM9cU3Ywzavso8piDpzW
T/pFdz3CfT6adM0BZOLa/Km2s6L0iVlxXIoEq876M9/boh++kqb1wUjcMxbvq3fN
N1yiIjk8heqO76yYuwks2tM3Gxy+67T8o5MEiKZhVUhWM3EQsyhbg/t0cgp/zWOu
WDTTH0Wu18QqoQvP4KOhGjLqBMcDo+j/Q+g0WiPCsG/wCElzgDfCv4W7nfLThXoR
Gfd2qto3Fl2v7KsuScFCMzaPBAGG/XYnWWS1ck6NQry+jScUOpAD2MWY+CytLdTc
HWzW9KHttTECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSFl36KtJt1IJR1CMkU+yBv
qZs0hTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZTljMTdjYS1mOTk2
LTQzN2YtOGZmNS1kOWYzNGQ3YTM1NTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWU5YzE3Y2EtZjk5Ni00
MzdmLThmZjUtZDlmMzRkN2EzNTUzL2MwMDU3MTMwNGU0YjA0N2U0YWZkNjA4ODc0
YTNiZTgzM2NjYTRhM2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMghzjANBAIAAjAHAwUAKAPm4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHoYwDQYJKoZIhvcNAQELBQADggEBAMHW
4Gd3Vbe+pPg41YeoGNEKBEbfsm85ufCk/M2EOD9xnQ/EBKQZ8QGmTKLab9mSbsa+
WEwPbSC0WG74Qd3/RHGwammbAsFRkTaN07ru8Dxbvp4UIflx/pZwLROAHpKawrZy
JrK5Sao5OHpO4k3vSRWL3hjOCAVoc0wb1e9J7ZfN8E6tGOE1p7anRBkVQ5mYWcyG
TotpZWUzs4Frt5mG1zk0Q8ER0A6lNL94ogQ8uWxQfGLOXwnSLlRZJPL/iVsgEMMR
OrsUx5lzaghbg7yohey0snmPdl5BKNmMGgJ7LTHktiN4IkensJcPbC0+dcpVj+Eb
x+s0HaKl3+0I5anhGk0=
-----END CERTIFICATE-----