Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer
File:                     1d01e0d3cb834f895612155144725f326726b46a.cer (raw, json)
Hash identifier:          UwPKlVVx36sg6cvcIlkxMFh53g0eJmxFquyVCnczXrM=
Subject key identifier:   09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4EA9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/1d01e0d3cb834f895612155144725f326726b46a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 May 2021 17:15:54 +0000
Certificate not after:    Sun 12 May 2024 17:23:05 +0000
Subordinate resources:    AS: 265770
                          IP: 164.163.124.0/22
                          IP: 2803:97c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15002267 (0xe4ea9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 26 17:15:54 2021 GMT
            Not After : May 12 17:23:05 2024 GMT
        Subject: CN=1d01e0d3cb834f895612155144725f326726b46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:c7:09:73:41:ef:da:08:d5:b2:2d:5c:6c:
                    6c:1e:77:37:f2:da:a4:5b:52:56:77:08:76:d3:4e:
                    99:f0:03:d7:91:53:d5:4b:8b:4a:72:e8:c4:7c:fe:
                    6d:c8:01:08:e6:5f:a3:eb:55:7c:0a:f4:80:c8:dd:
                    13:5b:e2:c1:50:4c:ef:0c:28:02:e8:d0:1c:b2:a9:
                    07:25:2f:71:2c:45:9e:06:e2:58:18:ac:62:8c:01:
                    26:c5:eb:f8:3d:b8:47:9f:18:ba:7e:15:03:96:83:
                    5f:88:97:22:ce:8d:63:af:72:69:43:75:90:bc:0f:
                    81:f2:58:04:dd:b2:29:ce:1a:6b:ab:1f:a8:81:44:
                    e3:45:1a:38:5a:1c:90:45:a0:f9:9f:82:58:37:98:
                    53:96:80:f4:f0:e4:f8:0d:18:7b:8d:8f:fd:7f:6a:
                    28:2a:15:63:63:5c:7d:92:84:f0:0a:f9:45:a1:13:
                    dd:0d:05:2e:43:9c:4d:c9:71:67:81:ab:f8:96:ad:
                    16:8d:dd:9e:14:65:86:a3:8a:5d:97:d0:9e:77:55:
                    2d:e4:cc:83:48:f3:c4:4d:72:20:4a:62:72:34:33:
                    81:d6:5c:50:ea:39:30:85:21:f9:80:13:02:c4:63:
                    2c:10:a5:9f:43:cc:fb:5e:5c:63:11:c8:01:b5:42:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/1d01e0d3cb834f895612155144725f326726b46a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.124.0/22
                IPv6:
                  2803:97c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265770

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:02:4c:c8:f2:83:6f:48:b7:aa:bc:fa:67:b0:f5:00:87:
         28:52:c5:c7:1c:a8:d6:4d:35:e2:cd:8d:31:01:93:a5:66:07:
         86:a9:db:a4:93:3c:db:73:94:bf:1c:be:3d:51:b6:74:24:ca:
         cb:3e:ee:78:67:1f:9d:c0:02:59:f7:a9:b7:3c:24:84:25:92:
         f6:f1:55:60:ae:50:06:bf:82:d0:a9:e9:ef:24:9f:13:80:8b:
         88:e1:c2:4f:b1:c6:7a:29:93:a8:5e:ae:91:2c:93:83:6e:8d:
         2a:52:2f:f9:98:dc:ad:ba:00:67:f6:54:2d:b3:e5:0f:0f:08:
         fa:d7:01:b3:86:fe:61:e6:3e:c4:3d:06:93:7d:14:d0:38:95:
         4a:cd:e7:f8:2d:0d:28:bd:7d:4e:cd:e7:5a:d8:99:94:09:74:
         30:97:b9:3a:f4:84:d4:0c:4e:c5:ca:00:ab:65:b1:ec:80:d8:
         59:68:84:dc:d3:33:5c:4d:dc:c0:52:48:6e:67:a1:4a:8c:e1:
         70:95:06:16:4d:84:d8:f2:96:6b:01:08:dd:6e:83:c5:e4:a9:
         5e:c4:0c:8d:e2:ff:19:50:d3:26:5c:13:f7:58:c4:df:ca:5c:
         00:3e:da:d0:fe:c6:35:06:1e:98:df:9c:d7:bb:07:da:e3:23:
         51:f7:1a:3c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOTqmzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUyNjE3MTU1NFoXDTI0MDUxMjE3MjMw
NVowMzExMC8GA1UEAxMoMWQwMWUwZDNjYjgzNGY4OTU2MTIxNTUxNDQ3MjVmMzI2
NzI2YjQ2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKK1xwlzQe/a
CNWyLVxsbB53N/LapFtSVncIdtNOmfAD15FT1UuLSnLoxHz+bcgBCOZfo+tVfAr0
gMjdE1viwVBM7wwoAujQHLKpByUvcSxFngbiWBisYowBJsXr+D24R58Yun4VA5aD
X4iXIs6NY69yaUN1kLwPgfJYBN2yKc4aa6sfqIFE40UaOFockEWg+Z+CWDeYU5aA
9PDk+A0Ye42P/X9qKCoVY2NcfZKE8Ar5RaET3Q0FLkOcTclxZ4Gr+JatFo3dnhRl
hqOKXZfQnndVLeTMg0jzxE1yIEpicjQzgdZcUOo5MIUh+YATAsRjLBCln0PM+15c
YxHIAbVCZs0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQJKcq0titm1fcXKu6EXnmE
Za9ZGDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYTU2Mzg4OC0wYTVk
LTQ4MGMtOWEyNC00NmFmNGI5NmJiYjYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGE1NjM4ODgtMGE1ZC00
ODBjLTlhMjQtNDZhZjRiOTZiYmI2LzFkMDFlMGQzY2I4MzRmODk1NjEyMTU1MTQ0
NzI1ZjMyNjcyNmI0NmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqSjfDANBAIAAjAHAwUAKAOXwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDiowDQYJKoZIhvcNAQELBQADggEBAIif
AkzI8oNvSLeqvPpnsPUAhyhSxcccqNZNNeLNjTEBk6VmB4ap26STPNtzlL8cvj1R
tnQkyss+7nhnH53AAln3qbc8JIQlkvbxVWCuUAa/gtCp6e8knxOAi4jhwk+xxnop
k6herpEsk4NujSpSL/mY3K26AGf2VC2z5Q8PCPrXAbOG/mHmPsQ9BpN9FNA4lUrN
5/gtDSi9fU7N51rYmZQJdDCXuTr0hNQMTsXKAKtlseyA2FlohNzTM1xN3MBSSG5n
oUqM4XCVBhZNhNjylmsBCN1ug8XkqV7EDI3i/xlQ0yZcE/dYxN/KXAA+2tD+xjUG
HpjfnNe7B9rjI1H3Gjw=
-----END CERTIFICATE-----