Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01521525bab9b4008b4fd81c5bca10c1f711c6ee.cer
File:                     01521525bab9b4008b4fd81c5bca10c1f711c6ee.cer (raw, json)
Hash identifier:          Yk+gz7CUsq5ZedKvpEyMxDao4wyd2HVW060X1qAzYds=
Subject key identifier:   70:02:A7:EC:6E:BA:4C:3D:93:24:16:9D:75:14:6A:55:CD:13:BA:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01066C2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/01521525bab9b4008b4fd81c5bca10c1f711c6ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Aug 2021 15:09:37 +0000
Certificate not after:    Mon 02 Jun 2025 17:34:59 +0000
Subordinate resources:    AS: 271948

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17198122 (0x1066c2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  2 15:09:37 2021 GMT
            Not After : Jun  2 17:34:59 2025 GMT
        Subject: CN=01521525bab9b4008b4fd81c5bca10c1f711c6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:42:82:8b:66:40:e6:58:6b:51:dd:c9:de:
                    ef:38:84:c4:8a:ed:98:94:8d:03:64:77:84:5c:57:
                    58:1f:62:d4:e3:1b:37:26:86:88:b0:55:6a:9a:c7:
                    1e:1c:95:2c:55:b9:66:27:b8:36:65:11:0a:d2:cc:
                    29:f6:70:6a:54:ee:dd:7a:5b:80:65:34:08:65:bf:
                    ed:a8:28:93:83:cb:9f:82:a0:b9:d7:11:c1:20:99:
                    41:f8:fb:38:c1:5d:00:72:9d:89:5f:1e:53:ef:fe:
                    3c:98:d6:10:1e:f4:ab:78:dd:c1:1b:73:ad:11:70:
                    fc:45:df:c7:ad:88:d8:cc:f8:b5:c8:2d:08:33:61:
                    2a:f1:b3:9d:8b:66:a5:ba:3e:07:00:fe:c0:c3:96:
                    3b:d0:1d:40:c4:80:ee:8f:46:d8:30:69:e3:3b:cc:
                    1f:0d:07:8e:6d:ea:72:ef:c5:b7:c7:5d:c5:d0:f3:
                    5a:84:f0:41:43:b6:65:04:9f:f8:63:f1:fa:47:9c:
                    70:d5:41:09:cd:09:70:9e:d6:29:5c:76:e4:d2:67:
                    db:98:9a:3f:71:ae:58:d1:91:5b:43:0d:e2:93:10:
                    6b:c5:c5:86:19:83:c4:da:68:cd:7a:32:96:9f:c6:
                    d1:21:30:2e:93:a8:12:03:bd:2e:31:9e:a7:22:d8:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:A7:EC:6E:BA:4C:3D:93:24:16:9D:75:14:6A:55:CD:13:BA:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/01521525bab9b4008b4fd81c5bca10c1f711c6ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271948

    Signature Algorithm: sha256WithRSAEncryption
         76:70:c5:1c:87:e8:33:0d:99:09:ac:50:a1:56:19:de:6c:f8:
         72:cf:0f:28:78:97:8b:2d:4d:3b:20:ac:26:d5:54:bd:e1:ce:
         4f:bd:cc:82:a1:61:d6:3c:ec:82:3a:68:f4:dc:fb:ee:e0:49:
         13:78:34:37:df:3d:4e:c2:fe:9f:a9:38:08:bd:ed:2c:82:f3:
         4e:80:97:59:f6:60:58:32:8c:62:79:ca:06:00:bb:0f:80:17:
         6c:a9:f4:86:06:ab:87:35:d4:f8:7f:82:89:c2:66:6e:ae:8a:
         82:4f:be:4b:06:46:d1:3f:f1:a9:d8:09:f2:f0:f6:f7:76:b3:
         8f:6c:e0:7f:6d:79:79:5f:1e:44:8c:aa:df:b4:56:ba:9a:67:
         36:b4:8e:f8:40:05:6b:bf:40:36:35:6a:f9:44:89:63:7d:14:
         24:ac:35:03:9e:18:86:f7:4e:29:6b:76:23:82:e9:b1:cd:67:
         ee:f3:0b:b2:cd:ba:12:eb:fa:e4:28:3b:e7:1c:ed:44:6e:46:
         28:97:4d:fe:4f:9c:25:bf:8d:70:7e:03:e9:a4:ad:6b:3a:e2:
         b5:37:18:aa:0b:53:c5:04:9b:62:b7:00:02:9e:13:dc:18:56:
         f3:af:ca:59:6c:b6:6f:34:7b:0c:b5:67:3d:99:b1:c9:62:f0:
         ef:38:cc:5f
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIEAQZsKjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgwMjE1MDkzN1oXDTI1MDYwMjE3MzQ1
OVowMzExMC8GA1UEAxMoMDE1MjE1MjViYWI5YjQwMDhiNGZkODFjNWJjYTEwYzFm
NzExYzZlZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMi9QoKLZkDm
WGtR3cne7ziExIrtmJSNA2R3hFxXWB9i1OMbNyaGiLBVaprHHhyVLFW5Zie4NmUR
CtLMKfZwalTu3XpbgGU0CGW/7agok4PLn4KgudcRwSCZQfj7OMFdAHKdiV8eU+/+
PJjWEB70q3jdwRtzrRFw/EXfx62I2Mz4tcgtCDNhKvGznYtmpbo+BwD+wMOWO9Ad
QMSA7o9G2DBp4zvMHw0Hjm3qcu/Ft8ddxdDzWoTwQUO2ZQSf+GPx+keccNVBCc0J
cJ7WKVx25NJn25iaP3GuWNGRW0MN4pMQa8XFhhmDxNpozXoylp/G0SEwLpOoEgO9
LjGepyLYptcCAwEAAaOCAtkwggLVMB0GA1UdDgQWBBRwAqfsbrpMPZMkFp11FGpV
zRO64zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yZjA4MDUxZi1jZTc4
LTQzYTUtYTU3Yi0wOGMzODdiOTU3NmQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmYwODA1MWYtY2U3OC00
M2E1LWE1N2ItMDhjMzg3Yjk1NzZkLzAxNTIxNTI1YmFiOWI0MDA4YjRmZDgxYzVi
Y2ExMGMxZjcxMWM2ZWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJkwwDQYJKoZIhvcNAQELBQADggEBAHZw
xRyH6DMNmQmsUKFWGd5s+HLPDyh4l4stTTsgrCbVVL3hzk+9zIKhYdY87II6aPTc
++7gSRN4NDffPU7C/p+pOAi97SyC806Al1n2YFgyjGJ5ygYAuw+AF2yp9IYGq4c1
1Ph/gonCZm6uioJPvksGRtE/8anYCfLw9vd2s49s4H9teXlfHkSMqt+0VrqaZza0
jvhABWu/QDY1avlEiWN9FCSsNQOeGIb3TilrdiOC6bHNZ+7zC7LNuhLr+uQoO+cc
7URuRiiXTf5PnCW/jXB+A+mkrWs64rU3GKoLU8UEm2K3AAKeE9wYVvOvyllstm80
ewy1Zz2Zscli8O84zF8=
-----END CERTIFICATE-----