Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21487fcfc6a259ee6eef8b83af2ed5745bdafb57.cer
File:                     21487fcfc6a259ee6eef8b83af2ed5745bdafb57.cer (raw, json)
Hash identifier:          kviUU/9j80bFn/90Z4R5x36ndy7Ualubr4wyEAmtSx0=
Subject key identifier:   85:4F:98:6C:D8:57:2D:FE:B5:AB:4F:12:45:00:8A:BE:2B:32:46:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF7DDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43665d3d-b36f-4e44-a5e5-a30ff6e53c3e/21487fcfc6a259ee6eef8b83af2ed5745bdafb57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43665d3d-b36f-4e44-a5e5-a30ff6e53c3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:23:10 +0000
Certificate not after:    Thu 12 Sep 2024 14:15:47 +0000
Subordinate resources:    AS: 265144
                          IP: 131.161.44.0/22
                          IP: 143.255.108.0/22
                          IP: 2804:2b44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16743900 (0xff7ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:23:10 2023 GMT
            Not After : Sep 12 14:15:47 2024 GMT
        Subject: CN=21487fcfc6a259ee6eef8b83af2ed5745bdafb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:89:33:66:5d:f4:2a:9a:e4:53:b8:4c:14:
                    07:ad:7b:4b:c4:12:96:3d:92:a7:9c:51:ad:a5:dd:
                    22:ed:7a:10:56:45:2b:4e:9d:aa:23:86:08:37:53:
                    10:25:12:ae:d2:67:fd:03:1d:4b:80:f3:93:c4:c0:
                    44:bc:30:37:49:7d:ec:be:65:4e:b3:db:33:e9:cc:
                    72:fa:b9:be:f3:6a:51:28:68:f1:4d:c0:47:6c:6c:
                    87:7b:17:01:a4:e0:4c:18:75:53:09:81:cd:72:06:
                    d4:77:28:d5:4b:be:81:c2:87:69:4a:32:1e:b0:1f:
                    bc:dd:15:b1:d2:c0:ae:fb:d3:e3:61:db:88:c5:b6:
                    7c:29:b0:50:fa:b9:51:ac:37:55:50:ae:24:85:ba:
                    e4:d6:51:39:7e:21:1e:42:f4:7c:2b:ba:05:55:41:
                    04:71:e8:0f:1e:8d:d9:0c:06:cb:14:42:e5:65:a6:
                    b9:49:b3:49:c9:af:08:9c:b4:b5:fd:ef:5a:09:b8:
                    e5:8f:f4:e5:ab:0e:f2:e5:91:d4:1d:18:11:fa:fe:
                    0e:f3:75:73:74:db:52:35:16:f5:49:0c:06:a5:0e:
                    49:11:57:7b:f2:2f:2a:16:47:c9:ee:8a:59:77:c1:
                    d9:3e:61:47:74:ed:29:f3:70:76:53:b8:81:22:02:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:98:6C:D8:57:2D:FE:B5:AB:4F:12:45:00:8A:BE:2B:32:46:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43665d3d-b36f-4e44-a5e5-a30ff6e53c3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43665d3d-b36f-4e44-a5e5-a30ff6e53c3e/21487fcfc6a259ee6eef8b83af2ed5745bdafb57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.44.0/22
                  143.255.108.0/22
                IPv6:
                  2804:2b44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265144

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:a7:08:8b:09:7f:ef:f9:f1:6b:fb:e2:51:e7:61:17:fd:
         35:41:38:e1:56:f4:4f:86:6d:00:f5:36:9e:67:b9:e9:8a:af:
         e8:81:99:70:87:12:3f:9c:f1:0d:8f:ae:af:65:ab:fb:18:52:
         d3:5e:a5:11:e8:fe:2f:d1:6e:86:20:ce:42:ad:1e:1d:b4:fc:
         b5:42:1c:7f:b0:03:91:9a:d6:87:e2:e1:26:8b:4f:92:76:db:
         1a:95:90:85:28:00:d0:e1:cb:27:38:e5:2a:ce:2e:09:72:54:
         54:1b:c9:52:fb:5a:1f:34:47:7f:fa:a5:90:02:09:74:08:bb:
         b5:02:09:2d:d0:dc:a4:de:c2:e0:82:20:87:de:70:37:c3:49:
         cd:c3:4a:21:20:67:e0:3c:d9:4f:1b:c4:28:25:09:9f:1a:f7:
         0a:8c:5f:f5:80:72:30:ed:dc:a4:31:7c:12:2f:9d:d2:ed:0c:
         37:b1:e1:6d:46:c0:10:45:06:ea:09:93:42:83:89:7f:64:6e:
         a9:c5:21:46:15:e7:0c:72:8d:70:c8:f2:11:78:24:6b:db:55:
         f8:4b:ed:4a:1c:ca:eb:37:6a:70:a6:5c:db:34:17:2c:22:82:
         dd:f7:ce:b0:de:91:2a:4b:cf:e7:42:4c:cc:54:95:3d:7e:16:
         9b:a5:25:ab
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP993DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3MjMxMFoXDTI0MDkxMjE0MTU0
N1owMzExMC8GA1UEAxMoMjE0ODdmY2ZjNmEyNTllZTZlZWY4YjgzYWYyZWQ1NzQ1
YmRhZmI1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtWiTNmXfQq
muRTuEwUB617S8QSlj2Sp5xRraXdIu16EFZFK06dqiOGCDdTECUSrtJn/QMdS4Dz
k8TARLwwN0l97L5lTrPbM+nMcvq5vvNqUSho8U3AR2xsh3sXAaTgTBh1UwmBzXIG
1Hco1Uu+gcKHaUoyHrAfvN0VsdLArvvT42HbiMW2fCmwUPq5Uaw3VVCuJIW65NZR
OX4hHkL0fCu6BVVBBHHoDx6N2QwGyxRC5WWmuUmzScmvCJy0tf3vWgm45Y/05asO
8uWR1B0YEfr+DvN1c3TbUjUW9UkMBqUOSRFXe/IvKhZHye6KWXfB2T5hR3TtKfNw
dlO4gSICXQECAwEAAaOCAw8wggMLMB0GA1UdDgQWBBSFT5hs2Fct/rWrTxJFAIq+
KzJGDjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MzY2NWQzZC1iMzZm
LTRlNDQtYTVlNS1hMzBmZjZlNTNjM2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDM2NjVkM2QtYjM2Zi00
ZTQ0LWE1ZTUtYTMwZmY2ZTUzYzNlLzIxNDg3ZmNmYzZhMjU5ZWU2ZWVmOGI4M2Fm
MmVkNTc0NWJkYWZiNTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoOhLAMEAo//bDANBAIAAjAHAwUA
KAQrRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC7gwDQYJKoZIhvcNAQELBQAD
ggEBAD18pwiLCX/v+fFr++JR52EX/TVBOOFW9E+GbQD1Np5nuemKr+iBmXCHEj+c
8Q2Prq9lq/sYUtNepRHo/i/RboYgzkKtHh20/LVCHH+wA5Ga1ofi4SaLT5J22xqV
kIUoANDhyyc45SrOLglyVFQbyVL7Wh80R3/6pZACCXQIu7UCCS3Q3KTewuCCIIfe
cDfDSc3DSiEgZ+A82U8bxCglCZ8a9wqMX/WAcjDt3KQxfBIvndLtDDex4W1GwBBF
BuoJk0KDiX9kbqnFIUYV5wxyjXDI8hF4JGvbVfhL7Uocyus3anCmXNs0Fywigt33
zrDekSpLz+dCTMxUlT1+FpulJas=
-----END CERTIFICATE-----