Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02637184c65b6a55bd4665deedb92b07fdd73f0b.cer
File:                     02637184c65b6a55bd4665deedb92b07fdd73f0b.cer (raw, json)
Hash identifier:          S2OqMjtE/WFKMQOqe+fh+guIATGZNN/EGnVWmrxn8v0=
Subject key identifier:   0E:3B:71:CE:87:2D:5C:01:D5:74:E2:7B:6D:FF:35:48:02:70:71:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F60E9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/02637184c65b6a55bd4665deedb92b07fdd73f0b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 20:32:06 +0000
Certificate not after:    Sat 21 Sep 2024 19:29:31 +0000
Subordinate resources:    AS: 267730
                          IP: 45.166.176.0/22
                          IP: 2803:65a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16125597 (0xf60e9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 21 20:32:06 2022 GMT
            Not After : Sep 21 19:29:31 2024 GMT
        Subject: CN=02637184c65b6a55bd4665deedb92b07fdd73f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:a3:bf:54:d1:c2:7f:05:18:00:30:6c:9b:
                    e7:ef:94:e1:ca:a6:f1:52:35:0e:c9:c1:f0:79:43:
                    ab:78:29:51:34:e0:a3:d1:a9:2c:22:30:5b:be:6f:
                    fc:05:3f:fe:2d:a5:d8:c2:10:12:4d:ef:11:45:05:
                    30:d9:a6:55:09:8e:0d:b1:bf:34:86:92:f9:bf:81:
                    97:9b:a5:22:94:b7:f5:d4:9c:64:17:f8:ca:c7:9a:
                    c3:a5:6b:09:1e:7a:df:c5:ff:da:42:1d:ed:69:1d:
                    43:f4:da:43:34:f2:98:bc:f1:61:0b:26:25:b9:bb:
                    3d:ed:36:2b:22:9b:32:72:57:61:0e:a9:85:21:00:
                    6c:ad:44:3b:ff:db:41:a0:69:fe:33:ff:46:6e:1f:
                    94:fd:7c:43:67:41:c3:94:2a:23:4e:f5:d9:39:6e:
                    8d:da:cf:3b:34:d7:f2:a8:e9:ab:9d:39:c3:c9:d0:
                    bc:d5:6d:d9:1b:fa:d8:2b:84:51:32:2e:ac:98:ae:
                    3a:15:18:55:88:69:7b:e5:8c:d1:af:0f:02:c0:53:
                    49:9b:ac:88:75:cb:81:f8:cc:02:45:fc:63:4f:a3:
                    96:7c:0f:7c:71:2c:50:01:09:9d:96:fd:30:81:41:
                    9e:1d:60:02:e0:d0:c3:d5:3e:da:0d:fc:2b:12:5d:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:71:CE:87:2D:5C:01:D5:74:E2:7B:6D:FF:35:48:02:70:71:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/02637184c65b6a55bd4665deedb92b07fdd73f0b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.176.0/22
                IPv6:
                  2803:65a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267730

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:a4:ed:9a:5d:7b:09:b4:f1:12:7d:04:25:b9:19:6a:b6:
         70:a8:2a:f7:3d:4f:29:44:5f:5c:65:a2:e8:b4:57:27:71:22:
         d4:df:f6:b2:ad:9d:fb:3a:e8:ea:a7:63:99:57:c1:f0:e9:0f:
         ef:9b:bf:ed:50:05:cc:e0:29:8b:40:a5:ef:98:96:58:ae:ba:
         a2:0f:d8:0e:29:2d:66:9f:63:82:7b:e7:6e:17:ec:cc:30:fe:
         09:5b:77:5c:da:2d:72:a6:93:c2:96:ea:fe:a6:e1:0e:34:d6:
         7f:ee:13:13:3d:af:33:73:76:67:d3:d2:fd:eb:50:3a:0d:0d:
         20:26:a8:17:f3:bb:1a:ac:e0:d7:e5:6f:d2:dc:cf:04:90:e3:
         f9:2d:50:1b:a7:d3:49:a7:bd:14:82:76:29:2a:d0:0a:6a:db:
         2c:51:62:6d:0e:cf:51:1c:5b:f5:5d:7f:d8:49:17:4d:6a:6d:
         0c:83:d5:83:cd:8d:2e:51:68:2c:7e:c1:ef:18:da:7a:f8:da:
         36:a1:5d:69:ae:67:fb:00:90:13:f7:54:51:e1:d8:00:6e:02:
         b1:06:76:c3:83:a6:77:48:1a:99:ba:82:a6:7e:ce:86:f0:ca:
         de:a1:67:17:2e:bb:d3:f6:6a:d0:e5:c1:74:7d:6d:1a:76:42:
         c9:1d:08:92
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPYOnTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDcyMTIwMzIwNloXDTI0MDkyMTE5Mjkz
MVowMzExMC8GA1UEAxMoMDI2MzcxODRjNjViNmE1NWJkNDY2NWRlZWRiOTJiMDdm
ZGQ3M2YwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzdo79U0cJ/
BRgAMGyb5++U4cqm8VI1DsnB8HlDq3gpUTTgo9GpLCIwW75v/AU//i2l2MIQEk3v
EUUFMNmmVQmODbG/NIaS+b+Bl5ulIpS39dScZBf4yseaw6VrCR5638X/2kId7Wkd
Q/TaQzTymLzxYQsmJbm7Pe02KyKbMnJXYQ6phSEAbK1EO//bQaBp/jP/Rm4flP18
Q2dBw5QqI0712TlujdrPOzTX8qjpq505w8nQvNVt2Rv62CuEUTIurJiuOhUYVYhp
e+WM0a8PAsBTSZusiHXLgfjMAkX8Y0+jlnwPfHEsUAEJnZb9MIFBnh1gAuDQw9U+
2g38KxJd94cCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQOO3HOhy1cAdV04ntt/zVI
AnBxSTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mODZkMWQ0Yy1mZjUy
LTQwYjUtOGU3OS0wNmRkM2M3Y2EyNmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjg2ZDFkNGMtZmY1Mi00
MGI1LThlNzktMDZkZDNjN2NhMjZiLzAyNjM3MTg0YzY1YjZhNTViZDQ2NjVkZWVk
YjkyYjA3ZmRkNzNmMGIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2msDANBAIAAjAHAwUAKANloDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFdIwDQYJKoZIhvcNAQELBQADggEBAAfj
pO2aXXsJtPESfQQluRlqtnCoKvc9TylEX1xloui0VydxItTf9rKtnfs66OqnY5lX
wfDpD++bv+1QBczgKYtApe+YlliuuqIP2A4pLWafY4J7524X7Mww/glbd1zaLXKm
k8KW6v6m4Q401n/uExM9rzNzdmfT0v3rUDoNDSAmqBfzuxqs4Nflb9LczwSQ4/kt
UBun00mnvRSCdikq0Apq2yxRYm0Oz1EcW/Vdf9hJF01qbQyD1YPNjS5RaCx+we8Y
2nr42jahXWmuZ/sAkBP3VFHh2ABuArEGdsODpndIGpm6gqZ+zobwyt6hZxcuu9P2
atDlwXR9bRp2QskdCJI=
-----END CERTIFICATE-----