Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
File:                     20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer (raw, json)
Hash identifier:          1aMRCR5Hzub5POw5D+OP4gyumM+NMMal/1Kxrivc62w=
Subject key identifier:   D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D2AE34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 21:15:39 +0000
Certificate not after:    Wed 22 May 2024 06:00:00 +0000
Subordinate resources:    AS: 8163
                          IP: 181.192.128.0/17
                          IP: 186.121.0.0/17
                          IP: 190.1.128.0/18
                          IP: 190.182.0.0/17
                          IP: 200.89.96.0/19
                          IP: 201.220.64.0/19
                          IP: 2803:fd00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13807156 (0xd2ae34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 20 21:15:39 2022 GMT
            Not After : May 22 06:00:00 2024 GMT
        Subject: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:50:be:03:2e:20:95:b4:af:10:ad:e7:5c:
                    3b:33:e6:49:c8:57:2c:40:24:76:cb:48:1b:18:f6:
                    dc:ad:89:66:d1:d4:2b:9d:82:e8:58:85:0b:fa:13:
                    49:68:45:52:c6:3b:77:b0:2a:50:52:e8:5a:b6:56:
                    fa:a4:0e:f1:a1:9b:44:1e:72:50:6a:01:22:9a:7c:
                    68:c3:31:74:cd:d2:6f:b4:7a:e1:f2:5e:9e:33:d3:
                    f3:3a:0a:35:da:0c:3f:d9:e5:ac:c0:06:24:94:d5:
                    d0:6a:c7:37:21:73:04:fe:dc:0c:63:db:71:31:ba:
                    cc:53:f8:08:22:d5:18:2e:e5:54:21:b7:ee:8f:d1:
                    0b:ea:0d:1a:4c:db:6e:dc:54:6b:9d:a9:58:5b:34:
                    81:df:bb:5e:df:b9:e3:b2:cd:7e:19:a7:90:78:20:
                    48:78:9c:11:10:a6:ea:52:bb:7c:7e:e6:f8:ca:9b:
                    d1:54:e4:db:13:97:bb:09:3e:8e:82:10:c3:e2:e2:
                    e5:e0:8f:09:88:3b:fb:fa:32:32:0d:1b:8c:36:d1:
                    a5:39:b2:f9:85:01:c8:e1:34:e1:a6:72:0d:94:b9:
                    7a:33:6b:b7:91:25:ee:c8:79:eb:73:d4:d6:ac:8d:
                    c7:cd:9f:9e:bc:50:12:c9:cd:39:a7:4a:95:38:f9:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.128.0/17
                  186.121.0.0/17
                  190.1.128.0/18
                  190.182.0.0/17
                  200.89.96.0/19
                  201.220.64.0/19
                IPv6:
                  2803:fd00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8163

    Signature Algorithm: sha256WithRSAEncryption
         83:64:b4:20:e8:f2:aa:05:74:75:06:f9:07:ef:a0:32:c7:8d:
         60:cb:68:15:ec:83:7f:65:2d:ea:7d:8c:65:3a:69:d2:30:58:
         7a:ea:26:87:25:73:64:8e:c6:63:d2:63:7d:37:84:09:cc:92:
         43:5c:13:f3:63:fa:e1:c6:37:02:7e:00:ae:dd:dc:6e:c1:ff:
         39:c4:71:f9:80:07:f4:18:c7:be:d9:f9:85:6f:35:45:39:7a:
         4d:03:c0:1f:2c:eb:64:04:19:3b:46:49:5a:f1:12:ab:d9:3b:
         fa:bc:8f:23:1d:47:c6:d0:0c:ed:94:22:94:3d:c6:d0:9f:c5:
         e5:db:23:96:a0:32:81:b7:fb:1b:17:b8:04:74:f9:10:9c:f2:
         07:b7:bb:e0:2b:31:0f:36:77:02:bc:f0:27:0f:bd:7a:a5:c8:
         19:5e:de:3f:99:10:ee:99:89:26:c9:75:1a:c9:d6:01:9d:70:
         80:46:f1:bd:b5:c7:2c:24:c0:29:4a:f9:3a:fc:d4:0f:76:53:
         19:19:ee:33:a0:b4:01:2a:be:9a:f7:4f:e6:46:57:82:3f:f1:
         23:f2:44:ba:fa:db:cf:d1:cb:20:e7:5a:07:20:25:86:d3:30:
         3d:ba:38:90:c0:8a:c3:15:4c:6b:4f:75:3d:41:7f:f7:59:41:
         07:f2:cc:ad
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIEANKuNDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkyMDIxMTUzOVoXDTI0MDUyMjA2MDAw
MFowMzExMC8GA1UEAxMoMjBjZmQzNmE1NTZlMWE0NmMxOGRlNTNkM2ZhODFiMGUx
ZTk3MGYyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZEUL4DLiCV
tK8QredcOzPmSchXLEAkdstIGxj23K2JZtHUK52C6FiFC/oTSWhFUsY7d7AqUFLo
WrZW+qQO8aGbRB5yUGoBIpp8aMMxdM3Sb7R64fJenjPT8zoKNdoMP9nlrMAGJJTV
0GrHNyFzBP7cDGPbcTG6zFP4CCLVGC7lVCG37o/RC+oNGkzbbtxUa52pWFs0gd+7
Xt+547LNfhmnkHggSHicERCm6lK7fH7m+Mqb0VTk2xOXuwk+joIQw+Li5eCPCYg7
+/oyMg0bjDbRpTmy+YUByOE04aZyDZS5ejNrt5El7sh563PU1qyNx82fnrxQEsnN
OadKlTj5DT0CAwEAAaOCAyYwggMiMB0GA1UdDgQWBBTWdlR4UelvPYf676QF6tSk
tw2JADAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NThiMzFlYy0zMTMz
LTQyM2QtOGFkYi0zODEzNmIzYzlmNTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTU4YjMxZWMtMzEzMy00
MjNkLThhZGItMzgxMzZiM2M5ZjUxLzIwY2ZkMzZhNTU2ZTFhNDZjMThkZTUzZDNm
YTgxYjBlMWU5NzBmMjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEB7XAgAMEB7p5AAMEBr4BgAMEB762
AAMEBchZYAMEBcncQDANBAIAAjAHAwUAKAP9ADAZBggrBgEFBQcBCAEB/wQKMAig
BjAEAgIf4zANBgkqhkiG9w0BAQsFAAOCAQEAg2S0IOjyqgV0dQb5B++gMseNYMto
FeyDf2Ut6n2MZTpp0jBYeuomhyVzZI7GY9JjfTeECcySQ1wT82P64cY3An4Art3c
bsH/OcRx+YAH9BjHvtn5hW81RTl6TQPAHyzrZAQZO0ZJWvESq9k7+ryPIx1HxtAM
7ZQilD3G0J/F5dsjlqAygbf7Gxe4BHT5EJzyB7e74CsxDzZ3ArzwJw+9eqXIGV7e
P5kQ7pmJJsl1GsnWAZ1wgEbxvbXHLCTAKUr5OvzUD3ZTGRnuM6C0ASq+mvdP5kZX
gj/xI/JEuvrbz9HLIOdaByAlhtMwPbo4kMCKwxVMa091PUF/91lBB/LMrQ==
-----END CERTIFICATE-----