Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01841a826a17e6bb639e5155153b2415763ecb52.cer
File:                     01841a826a17e6bb639e5155153b2415763ecb52.cer (raw, json)
Hash identifier:          eQ2A85zk27nsMACyulN+GA/upIBAbfS1bNHO7ydxzF8=
Subject key identifier:   64:DF:4C:43:49:C5:AF:E3:28:C3:4B:3E:A2:85:47:9F:FE:6E:3C:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB877A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/01841a826a17e6bb639e5155153b2415763ecb52.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Aug 2021 19:51:01 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 152.74.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16484218 (0xfb877a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 10 19:51:01 2021 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=01841a826a17e6bb639e5155153b2415763ecb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:02:81:ba:a4:a1:5c:9a:bb:dd:81:cf:76:
                    8f:e0:73:8a:e2:a5:7f:8d:bc:4c:e3:47:3d:cd:c5:
                    6b:75:a0:50:9f:0e:d9:60:dc:6f:b0:76:c8:35:45:
                    03:ce:ae:77:ce:b0:a8:2b:03:ac:c4:8a:06:b7:26:
                    ea:ec:5b:ae:87:97:89:24:4b:34:dd:19:d7:6f:48:
                    52:31:ba:31:0c:ec:7c:f0:2f:4a:9c:f8:49:e5:48:
                    ac:5f:30:ab:0b:d2:ae:e6:a7:41:d0:11:68:2c:d7:
                    f1:19:23:2f:f2:3d:ca:4e:9b:fa:7f:3a:1a:50:34:
                    bd:2c:5a:18:ee:ee:68:f2:b8:3e:74:bd:a9:0f:1a:
                    1c:9f:c1:0b:dd:e1:7d:1c:53:5b:de:a7:cd:78:e7:
                    a3:04:58:5d:a6:6e:55:1a:7b:e1:b9:17:91:55:24:
                    69:d8:40:fa:86:9b:75:81:f5:e7:5a:4f:5d:bb:cc:
                    6f:7f:d1:9a:fb:94:b1:c7:cd:6a:a1:4e:b7:b8:ea:
                    f0:b2:8a:10:68:3f:e9:75:a9:2f:f2:08:43:e1:9f:
                    b0:f2:54:a3:f1:10:ac:a3:c6:36:5e:e5:17:3c:bb:
                    cc:6a:59:9a:4f:d3:a2:a5:5c:30:58:c6:21:7a:37:
                    13:37:f6:58:01:56:3f:52:e0:d1:d3:3b:43:44:bf:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:4C:43:49:C5:AF:E3:28:C3:4B:3E:A2:85:47:9F:FE:6E:3C:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/01841a826a17e6bb639e5155153b2415763ecb52.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:be:a8:1e:30:53:0b:55:fc:6e:17:f4:05:3c:be:cf:35:
         35:51:d5:e9:53:53:6e:ce:98:80:6a:b8:0c:d4:33:9f:ca:5c:
         16:11:91:27:07:ab:98:7b:f1:71:a3:7d:67:55:54:3e:57:64:
         52:76:50:60:7b:a3:e5:23:06:85:0f:a9:62:68:91:d9:29:5c:
         92:6a:74:c3:7c:a3:bf:f3:dd:8d:45:52:e4:b7:f8:5a:c8:55:
         37:3f:12:ac:79:a0:d3:60:ef:c9:e6:02:a3:4b:e7:28:5b:8f:
         af:ba:1d:01:ef:cf:be:15:06:57:01:6e:af:8a:28:f1:6a:4c:
         9d:97:5e:de:6a:9e:29:a5:d5:f7:e6:b0:0c:20:2d:66:79:2a:
         b6:58:09:02:02:25:f3:2a:96:e2:7f:73:f8:fb:3e:e3:4b:f7:
         72:e7:a7:c0:43:44:e5:55:bd:86:30:da:51:e5:3e:87:be:61:
         b1:be:a8:f7:df:11:85:84:8c:43:96:f4:7c:13:ad:d3:ab:93:
         9a:b7:93:1d:7a:3b:09:38:83:38:1d:2c:74:0b:d7:b9:37:e6:
         e8:07:4e:1d:c7:c4:44:51:82:3c:73:de:a8:f5:34:e6:31:85:
         59:60:90:7b:98:83:f1:a8:00:ec:e0:59:c5:41:f3:3c:c8:ce:
         b6:3f:33:76
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIEAPuHejANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgxMDE5NTEwMVoXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoMDE4NDFhODI2YTE3ZTZiYjYzOWU1MTU1MTUzYjI0MTU3
NjNlY2I1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNwAoG6pKFc
mrvdgc92j+BziuKlf428TONHPc3Fa3WgUJ8O2WDcb7B2yDVFA86ud86wqCsDrMSK
Brcm6uxbroeXiSRLNN0Z129IUjG6MQzsfPAvSpz4SeVIrF8wqwvSruanQdARaCzX
8RkjL/I9yk6b+n86GlA0vSxaGO7uaPK4PnS9qQ8aHJ/BC93hfRxTW96nzXjnowRY
XaZuVRp74bkXkVUkadhA+oabdYH151pPXbvMb3/RmvuUscfNaqFOt7jq8LKKEGg/
6XWpL/IIQ+GfsPJUo/EQrKPGNl7lFzy7zGpZmk/ToqVcMFjGIXo3Ezf2WAFWP1Lg
0dM7Q0S/keMCAwEAAaOCAt0wggLZMB0GA1UdDgQWBBRk30xDScWv4yjDSz6ihUef
/m48uzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82N2IxMjhkNS04NTlk
LTQyZGYtOWU1ZC0yYjg1MmIzODg3ZGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjdiMTI4ZDUtODU5ZC00
MmRmLTllNWQtMmI4NTJiMzg4N2RjLzAxODQxYTgyNmExN2U2YmI2MzllNTE1NTE1
M2IyNDE1NzYzZWNiNTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJhKMA0GCSqGSIb3DQEBCwUAA4IB
AQCv7L6oHjBTC1X8bhf0BTy+zzU1UdXpU1NuzpiAargM1DOfylwWEZEnB6uYe/Fx
o31nVVQ+V2RSdlBge6PlIwaFD6liaJHZKVySanTDfKO/892NRVLkt/hayFU3PxKs
eaDTYO/J5gKjS+coW4+vuh0B78++FQZXAW6viijxakydl17eap4ppdX35rAMIC1m
eSq2WAkCAiXzKpbif3P4+z7jS/dy56fAQ0TlVb2GMNpR5T6HvmGxvqj33xGFhIxD
lvR8E63Tq5Oat5MdejsJOIM4HSx0C9e5N+boB04dx8REUYI8c96o9TTmMYVZYJB7
mIPxqADs4FnFQfM8yM62PzN2
-----END CERTIFICATE-----