Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e074773f8d01bb1253672f7e07391dbeefd322f5.cer
File:                     e074773f8d01bb1253672f7e07391dbeefd322f5.cer (raw, json)
Hash identifier:          ZpzErMurHUUCPSeUjGR6uC0LmFgAtA9banCzNJ/jXrk=
Subject key identifier:   71:7F:64:00:C3:D1:0B:41:B6:B1:F7:D8:72:29:23:55:65:80:25:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFF1F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/e074773f8d01bb1253672f7e07391dbeefd322f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Feb 2021 12:14:17 +0000
Certificate not after:    Mon 02 Dec 2024 15:44:48 +0000
Subordinate resources:    AS: 271863
                          IP: 167.250.238.0/23
                          IP: 200.6.43.0/24
                          IP: 2803:5410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16773620 (0xfff1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  3 12:14:17 2021 GMT
            Not After : Dec  2 15:44:48 2024 GMT
        Subject: CN=e074773f8d01bb1253672f7e07391dbeefd322f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:69:d1:0a:7d:9e:c1:20:ad:c1:48:c7:d6:
                    05:c0:1d:94:bd:b7:3e:7e:e7:5e:53:42:a1:c5:33:
                    d8:95:3b:f7:11:52:95:12:1f:c3:ce:55:fb:2c:91:
                    b4:0e:8e:a1:4e:df:f6:51:c7:55:c3:c0:f6:16:5c:
                    d6:7e:f8:5c:b2:e7:06:b2:0e:7d:e7:24:1d:53:34:
                    19:5a:86:00:15:3e:07:ba:5c:39:ff:14:0c:56:ab:
                    94:46:1c:48:0e:b9:d1:60:ec:2b:db:87:0f:d3:97:
                    4a:f8:b8:17:ae:51:55:0c:8a:87:04:29:f1:79:13:
                    20:82:83:0e:bb:d4:ba:9e:d9:f1:c8:3f:1d:b3:f7:
                    3a:0b:f0:8f:b7:22:aa:21:fc:4f:0b:43:32:2e:fb:
                    f3:29:9d:81:6c:63:f9:26:8b:89:1c:5e:d3:e7:7a:
                    81:5d:62:be:46:9f:30:a9:4b:de:b9:f2:6d:2d:b6:
                    4f:17:3a:bf:03:c8:67:c1:46:39:25:22:fe:10:25:
                    48:6c:e8:42:8d:e0:7d:7c:f3:11:e6:de:a0:0c:bd:
                    a5:47:e8:54:bc:a9:2f:37:d0:09:a2:c9:78:0b:58:
                    44:52:24:d7:ab:ad:a3:ff:67:15:c2:ee:43:d7:7a:
                    3b:9c:3b:ca:50:8b:fa:ea:e2:b9:2b:6a:f1:39:3c:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7F:64:00:C3:D1:0B:41:B6:B1:F7:D8:72:29:23:55:65:80:25:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/e074773f8d01bb1253672f7e07391dbeefd322f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.238.0/23
                  200.6.43.0/24
                IPv6:
                  2803:5410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271863

    Signature Algorithm: sha256WithRSAEncryption
         45:55:aa:5f:59:80:ae:af:74:7f:f2:9a:62:4e:72:56:0f:68:
         19:0e:15:6a:b9:d5:21:20:51:06:06:a4:a3:be:59:fc:ef:cd:
         ce:6b:56:a0:21:0a:fe:6c:ea:60:62:9c:8f:3b:ff:0e:46:35:
         d6:21:70:e5:af:89:fa:fd:f9:52:52:6d:15:b7:17:50:e4:45:
         a0:60:d2:e8:61:1c:6d:a1:ef:96:53:9e:d5:d0:e8:f1:43:b7:
         9d:13:61:42:d2:87:df:dc:ad:d9:f9:09:6f:6e:7d:03:46:71:
         47:8d:3c:e8:17:4a:58:0e:98:4a:ac:2b:94:8a:24:40:2e:d3:
         b6:06:43:e1:9a:cc:b5:df:89:68:40:ae:44:c2:ac:aa:07:d5:
         49:84:bf:4b:50:fc:58:0b:0d:c8:42:e2:81:fe:6a:9d:6c:ec:
         35:db:e3:d8:26:a3:a1:6a:e3:b4:4f:c1:b4:2f:82:17:b2:e2:
         ef:97:9f:8c:4b:32:de:ac:18:5f:7b:47:89:95:59:e7:98:e7:
         5b:79:e4:32:1f:a4:14:22:54:5e:6e:ed:9f:1f:f6:68:f7:5a:
         af:b3:a2:e7:eb:fd:6f:86:62:d0:fd:ae:88:2a:c7:ff:e2:39:
         ba:a7:e7:04:45:f0:35:06:40:6e:ea:3c:66:85:c1:47:0a:10:
         65:5a:78:5a
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP/x9DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIwMzEyMTQxN1oXDTI0MTIwMjE1NDQ0
OFowMzExMC8GA1UEAxMoZTA3NDc3M2Y4ZDAxYmIxMjUzNjcyZjdlMDczOTFkYmVl
ZmQzMjJmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJRiadEKfZ7B
IK3BSMfWBcAdlL23Pn7nXlNCocUz2JU79xFSlRIfw85V+yyRtA6OoU7f9lHHVcPA
9hZc1n74XLLnBrIOfeckHVM0GVqGABU+B7pcOf8UDFarlEYcSA650WDsK9uHD9OX
Svi4F65RVQyKhwQp8XkTIIKDDrvUup7Z8cg/HbP3Ogvwj7ciqiH8TwtDMi778ymd
gWxj+SaLiRxe0+d6gV1ivkafMKlL3rnybS22Txc6vwPIZ8FGOSUi/hAlSGzoQo3g
fXzzEebeoAy9pUfoVLypLzfQCaLJeAtYRFIk16uto/9nFcLuQ9d6O5w7ylCL+uri
uStq8Tk8NsUCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRxf2QAw9ELQbax99hyKSNV
ZYAljjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mYzE5MmVjNi1kNzg4
LTRmOTktOTFiYy00NWRiNWQ2NWFkZTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmMxOTJlYzYtZDc4OC00
Zjk5LTkxYmMtNDVkYjVkNjVhZGU1L2UwNzQ3NzNmOGQwMWJiMTI1MzY3MmY3ZTA3
MzkxZGJlZWZkMzIyZjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAaf67gMEAMgGKzANBAIAAjAHAwUA
KANUEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJfcwDQYJKoZIhvcNAQELBQAD
ggEBAEVVql9ZgK6vdH/ymmJOclYPaBkOFWq51SEgUQYGpKO+Wfzvzc5rVqAhCv5s
6mBinI87/w5GNdYhcOWvifr9+VJSbRW3F1DkRaBg0uhhHG2h75ZTntXQ6PFDt50T
YULSh9/crdn5CW9ufQNGcUeNPOgXSlgOmEqsK5SKJEAu07YGQ+GazLXfiWhArkTC
rKoH1UmEv0tQ/FgLDchC4oH+ap1s7DXb49gmo6Fq47RPwbQvghey4u+Xn4xLMt6s
GF97R4mVWeeY51t55DIfpBQiVF5u7Z8f9mj3Wq+zoufr/W+GYtD9rogqx//iObqn
5wRF8DUGQG7qPGaFwUcKEGVaeFo=
-----END CERTIFICATE-----