Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce035223add7affbc39c50745e4f0a03ba5ff31c.cer
File:                     ce035223add7affbc39c50745e4f0a03ba5ff31c.cer (raw, json)
Hash identifier:          fk73QoiWdcfM7pBUt8tW2YfjtXrNDwi6aBYjjeYu1sg=
Subject key identifier:   9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01030330
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ce035223add7affbc39c50745e4f0a03ba5ff31c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Mar 2020 12:35:42 +0000
Certificate not after:    Mon 06 Jan 2025 15:22:46 +0000
Subordinate resources:    AS: 269963
                          AS: 271893 -- 271895
                          IP: 200.14.60.0/22
                          IP: 2801:18:2800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16974640 (0x1030330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 20 12:35:42 2020 GMT
            Not After : Jan  6 15:22:46 2025 GMT
        Subject: CN=ce035223add7affbc39c50745e4f0a03ba5ff31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:b9:a9:3d:d5:67:76:7d:80:66:97:18:b5:
                    42:02:32:39:6f:9f:38:09:13:0c:d2:31:43:67:2f:
                    cb:01:90:16:43:c4:0a:32:3a:45:77:fa:78:39:a6:
                    e0:b0:f2:8f:0c:3f:04:d1:ac:f5:56:fb:bd:28:6c:
                    15:11:73:3a:fd:f8:d3:be:7e:21:08:84:0c:7a:d6:
                    1a:bd:73:70:2a:f6:cc:cd:73:05:94:53:e7:e1:04:
                    64:bf:ba:f3:5c:cf:03:37:5f:6b:7b:1a:ba:b8:bc:
                    11:26:20:3f:aa:38:e1:74:d4:7c:b2:36:b7:e7:75:
                    b3:eb:8d:3f:e7:71:82:df:9f:a2:ef:54:e1:f6:3c:
                    a9:1f:bc:e3:9b:20:af:f4:dd:c6:c1:53:08:4b:5e:
                    39:ac:8b:b8:83:ac:8c:0e:25:ac:9c:31:28:46:98:
                    dc:70:cd:4e:1e:43:6a:15:cd:c5:83:a9:df:7f:e1:
                    dc:91:6f:01:77:4f:9f:bc:98:42:f7:45:4c:fb:77:
                    09:c3:44:39:7f:43:6e:76:e4:71:b3:36:51:9e:bf:
                    f5:28:37:d9:3b:3c:93:08:ff:e2:38:6e:48:85:9d:
                    28:14:6b:d4:d7:a0:ab:7a:4c:3b:2b:d6:68:e5:24:
                    da:d8:ab:24:05:4b:38:31:23:21:8a:3b:d8:fb:1b:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ce035223add7affbc39c50745e4f0a03ba5ff31c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.60.0/22
                IPv6:
                  2801:18:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269963
                  271893-271895

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:2e:8c:2d:d6:b4:15:ee:95:55:45:38:0d:0b:88:4d:a1:
         d4:83:3a:ff:51:2d:d2:b2:0c:71:62:2f:f0:1f:8d:2e:a0:98:
         5a:29:57:48:de:fc:64:53:64:57:ba:d1:af:98:f5:22:68:ae:
         6b:10:db:53:98:fd:ee:31:67:a2:3d:59:93:7c:66:22:eb:eb:
         a5:1a:92:fc:46:eb:67:8e:7b:fc:e8:f8:0e:11:33:f3:9c:28:
         12:27:93:d9:1c:51:63:a6:06:f4:f8:fb:cd:1d:53:1b:ce:93:
         a1:74:ef:d8:15:63:bc:7b:39:bb:ea:82:bb:31:7e:da:96:09:
         57:10:b0:fb:fb:ac:31:b6:17:ac:0d:12:74:e8:82:f6:b3:a2:
         c8:01:f6:cf:79:4a:05:f6:31:75:ec:67:4d:52:e3:12:49:13:
         8e:38:f5:3b:b5:9d:9d:ce:c2:36:10:1e:d8:78:4c:7a:07:3b:
         b5:6d:6c:f8:d5:29:07:b5:e5:d2:81:8c:a4:29:9f:91:e9:2d:
         97:e3:cb:93:bb:df:91:7d:18:39:62:23:13:07:84:a7:63:0a:
         48:65:79:19:07:a0:65:59:c1:3a:0c:ae:95:73:17:e0:ee:03:
         d7:93:f6:de:46:9a:b7:1b:83:71:74:a1:90:a1:a6:60:86:37:
         5e:1d:db:ab
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIEAQMDMDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMyMDEyMzU0MloXDTI1MDEwNjE1MjI0
NlowMzExMC8GA1UEAxMoY2UwMzUyMjNhZGQ3YWZmYmMzOWM1MDc0NWU0ZjBhMDNi
YTVmZjMxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOGKuak91Wd2
fYBmlxi1QgIyOW+fOAkTDNIxQ2cvywGQFkPECjI6RXf6eDmm4LDyjww/BNGs9Vb7
vShsFRFzOv34075+IQiEDHrWGr1zcCr2zM1zBZRT5+EEZL+681zPAzdfa3sauri8
ESYgP6o44XTUfLI2t+d1s+uNP+dxgt+fou9U4fY8qR+845sgr/TdxsFTCEteOayL
uIOsjA4lrJwxKEaY3HDNTh5DahXNxYOp33/h3JFvAXdPn7yYQvdFTPt3CcNEOX9D
bnbkcbM2UZ6/9Sg32Ts8kwj/4jhuSIWdKBRr1Negq3pMOyvWaOUk2tirJAVLODEj
IYo72PsbnnECAwEAAaOCAxcwggMTMB0GA1UdDgQWBBSfjIXke4UcpRqak1grSp4O
D5Y/ZzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81OGM2ZWNlYi00OTEw
LTQ0OTYtYWY2Ny0zOWM3ZDhjZThlM2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNThjNmVjZWItNDkxMC00
NDk2LWFmNjctMzljN2Q4Y2U4ZTNkL2NlMDM1MjIzYWRkN2FmZmJjMzljNTA3NDVl
NGYwYTAzYmE1ZmYzMWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAsgOPDAPBAIAAjAJAwcAKAEAGCgA
MCYGCCsGAQUFBwEIAQH/BBcwFaATMBECAwQeizAKAgMEJhUCAwQmFzANBgkqhkiG
9w0BAQsFAAOCAQEADrsujC3WtBXulVVFOA0LiE2h1IM6/1Et0rIMcWIv8B+NLqCY
WilXSN78ZFNkV7rRr5j1ImiuaxDbU5j97jFnoj1Zk3xmIuvrpRqS/EbrZ457/Oj4
DhEz85woEieT2RxRY6YG9Pj7zR1TG86ToXTv2BVjvHs5u+qCuzF+2pYJVxCw+/us
MbYXrA0SdOiC9rOiyAH2z3lKBfYxdexnTVLjEkkTjjj1O7Wdnc7CNhAe2HhMegc7
tW1s+NUpB7Xl0oGMpCmfkektl+PLk7vfkX0YOWIjEweEp2MKSGV5GQegZVnBOgyu
lXMX4O4D15P23kaatxuDcXShkKGmYIY3Xh3bqw==
-----END CERTIFICATE-----