Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c34aa1623d42a0b6186e98309cecbae27a9189f.cer
File:                     1c34aa1623d42a0b6186e98309cecbae27a9189f.cer (raw, json)
Hash identifier:          D/0MVrSpSaQwQW077iE3fwbMfc5qZLjmWKpGXXPM5wQ=
Subject key identifier:   ED:52:7F:D5:40:DC:6E:5F:89:99:F1:21:C0:D8:26:60:41:56:DF:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6E809
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/1c34aa1623d42a0b6186e98309cecbae27a9189f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Oct 2021 12:52:17 +0000
Certificate not after:    Fri 24 May 2024 21:13:52 +0000
Subordinate resources:    AS: 263777
                          IP: 138.204.4.0/22
                          IP: 168.227.252.0/22
                          IP: 170.239.32.0/22
                          IP: 2803:2240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15132681 (0xe6e809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 12:52:17 2021 GMT
            Not After : May 24 21:13:52 2024 GMT
        Subject: CN=1c34aa1623d42a0b6186e98309cecbae27a9189f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:4d:25:70:fb:00:41:28:63:ef:f9:0d:f2:
                    b2:0f:99:ef:72:2e:dc:e0:5b:4d:94:bc:6a:89:72:
                    9d:49:2f:95:e3:05:9c:7c:aa:5e:22:f7:2a:3d:2f:
                    c1:50:1c:4a:5a:d4:9f:38:5b:7f:58:d6:91:e5:1b:
                    d8:8e:f3:a8:67:f0:a2:9c:05:b1:c1:74:43:a9:e4:
                    f2:ba:30:2d:08:8b:fa:5a:d2:be:c9:05:49:d3:c0:
                    e0:00:d7:98:ed:56:20:ea:e0:f9:55:93:bf:bc:50:
                    eb:5f:82:4c:83:ba:9a:73:9a:93:ec:2c:4b:7c:12:
                    76:79:25:90:4b:26:74:f5:8c:fe:b8:d3:9d:46:40:
                    e6:e3:e6:69:9c:92:8d:07:f0:11:2a:bd:e4:11:44:
                    eb:30:a9:84:aa:45:f9:af:ab:42:82:24:f6:51:05:
                    7c:3f:dc:1e:15:cf:ae:8e:f9:5e:ac:12:d9:9b:0b:
                    44:57:c9:c8:35:ff:7e:43:73:7c:78:3e:08:bb:a4:
                    59:e6:c3:af:6e:4d:10:2c:2e:92:b5:c7:c3:1a:82:
                    5f:7a:ba:c7:0c:bc:0c:3e:d1:f8:15:13:05:d7:14:
                    e7:9a:90:a9:29:4f:2b:d2:8b:3d:54:23:54:71:5a:
                    96:ee:89:b1:b7:95:8a:2e:ce:00:7e:26:30:e4:c4:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:52:7F:D5:40:DC:6E:5F:89:99:F1:21:C0:D8:26:60:41:56:DF:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/1c34aa1623d42a0b6186e98309cecbae27a9189f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.4.0/22
                  168.227.252.0/22
                  170.239.32.0/22
                IPv6:
                  2803:2240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263777

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:92:09:e1:91:05:84:4a:e8:c0:0a:db:e8:50:67:7f:3b:
         02:a2:71:fd:f2:21:ab:39:51:4e:d4:85:64:90:1b:c8:29:a2:
         c9:7f:4f:cb:47:82:d9:e0:93:9a:75:e1:1e:8d:6f:7d:04:41:
         6c:4d:31:9a:7b:3d:10:96:d3:61:30:0a:d3:c0:4a:ec:51:eb:
         cb:3d:d1:fc:8d:56:3b:d0:16:34:c8:5c:17:6f:8f:5f:69:08:
         8f:11:8c:64:1c:d2:fc:ff:56:10:f2:19:d3:4a:25:07:2b:0f:
         50:c7:70:0a:83:dc:15:09:82:b2:24:ba:f8:c6:05:7b:ba:c8:
         b1:07:e8:52:5b:cc:5f:f4:a5:e0:f0:af:e7:02:54:44:0b:e4:
         3e:98:9f:d7:da:63:68:9c:97:4b:6a:1e:e2:6e:71:b1:5d:80:
         30:53:b1:4f:9b:c4:64:c5:5c:2d:ad:a8:24:b9:53:82:67:6f:
         56:2c:9e:d0:a8:ff:03:80:87:7a:02:51:9d:36:99:34:35:be:
         29:c4:56:4b:6e:ff:7f:1f:5a:4d:e4:b4:e1:e2:ad:c8:30:b5:
         c4:6b:51:08:d5:96:4d:c8:24:60:c3:ec:42:ed:82:b9:da:c8:
         11:06:2d:d2:41:39:a9:80:c0:81:bb:a3:17:9e:dc:43:0a:64:
         fc:c5:7f:48
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIEAOboCTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAyNzEyNTIxN1oXDTI0MDUyNDIxMTM1
MlowMzExMC8GA1UEAxMoMWMzNGFhMTYyM2Q0MmEwYjYxODZlOTgzMDljZWNiYWUy
N2E5MTg5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJNhTSVw+wBB
KGPv+Q3ysg+Z73Iu3OBbTZS8aolynUkvleMFnHyqXiL3Kj0vwVAcSlrUnzhbf1jW
keUb2I7zqGfwopwFscF0Q6nk8rowLQiL+lrSvskFSdPA4ADXmO1WIOrg+VWTv7xQ
61+CTIO6mnOak+wsS3wSdnklkEsmdPWM/rjTnUZA5uPmaZySjQfwESq95BFE6zCp
hKpF+a+rQoIk9lEFfD/cHhXPro75XqwS2ZsLRFfJyDX/fkNzfHg+CLukWebDr25N
ECwukrXHwxqCX3q6xwy8DD7R+BUTBdcU55qQqSlPK9KLPVQjVHFalu6JsbeVii7O
AH4mMOTEOQECAwEAAaOCAxUwggMRMB0GA1UdDgQWBBTtUn/VQNxuX4mZ8SHA2CZg
QVbf0TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMTMzNjkyMS0yMzk2
LTRhZGItYTFjMC0zMzZjYTAwODg0MmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTEzMzY5MjEtMjM5Ni00
YWRiLWExYzAtMzM2Y2EwMDg4NDJlLzFjMzRhYTE2MjNkNDJhMGI2MTg2ZTk4MzA5
Y2VjYmFlMjdhOTE4OWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAorMBAMEAqjj/AMEAqrvIDANBAIA
AjAHAwUAKAMiQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBmEwDQYJKoZIhvcN
AQELBQADggEBAJJKkgnhkQWESujACtvoUGd/OwKicf3yIas5UU7UhWSQG8gposl/
T8tHgtngk5p14R6Nb30EQWxNMZp7PRCW02EwCtPASuxR68s90fyNVjvQFjTIXBdv
j19pCI8RjGQc0vz/VhDyGdNKJQcrD1DHcAqD3BUJgrIkuvjGBXu6yLEH6FJbzF/0
peDwr+cCVEQL5D6Yn9faY2icl0tqHuJucbFdgDBTsU+bxGTFXC2tqCS5U4Jnb1Ys
ntCo/wOAh3oCUZ02mTQ1vinEVktu/38fWk3ktOHircgwtcRrUQjVlk3IJGDD7ELt
grnayBEGLdJBOamAwIG7oxee3EMKZPzFf0g=
-----END CERTIFICATE-----