Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
File:                     228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer (raw, json)
Hash identifier:          ejK7/K7yH0vnXAAsCCl0UVrosRXeJZt64Ldv65yFOrw=
Subject key identifier:   AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1030E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 May 2021 16:09:26 +0000
Certificate not after:    Wed 07 Aug 2024 08:26:45 +0000
Subordinate resources:    IP: 200.106.164.0/22
                          IP: 2806:3ce::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15794958 (0xf1030e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 21 16:09:26 2021 GMT
            Not After : Aug  7 08:26:45 2024 GMT
        Subject: CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:08:40:cc:5b:a1:45:46:3b:e6:e4:74:12:6c:
                    74:6e:e9:54:e1:53:88:ab:77:e2:0d:b8:23:71:9b:
                    b7:2d:5a:3e:ec:31:a6:de:d4:3b:0c:81:bb:3e:db:
                    76:c8:02:49:31:1d:06:cf:56:6c:eb:72:32:68:1a:
                    23:f2:e7:49:fc:ef:80:d6:56:0a:75:4c:31:7e:39:
                    aa:6f:3e:3b:76:75:8a:b3:74:b6:12:e9:9a:22:f4:
                    3b:7d:6d:47:3d:8f:b6:c8:52:3e:f6:07:2f:d1:97:
                    2c:f7:4a:2d:af:46:4f:8c:6d:d0:00:bc:6c:65:45:
                    67:9c:48:1e:73:86:86:47:60:45:d4:72:84:f8:54:
                    bd:aa:5e:10:9f:2b:08:39:24:a5:ec:49:0f:85:ff:
                    89:92:4f:c2:09:99:05:ed:b6:d3:0b:cb:62:b9:b9:
                    bf:69:02:4e:80:85:e1:21:54:67:89:39:fb:80:18:
                    97:e0:d2:c2:fc:28:6b:61:09:ed:5c:d1:96:ae:37:
                    1e:e6:62:db:59:b4:a3:70:2b:68:bd:46:86:43:8a:
                    5d:3a:91:44:aa:ee:0b:b9:04:f7:ef:07:c4:4d:42:
                    e1:c3:59:61:6c:c8:e8:86:ea:5e:cd:4d:03:c6:7f:
                    04:fb:85:65:9a:ca:6e:ef:7b:2e:00:b8:50:e0:0f:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.164.0/22
                IPv6:
                  2806:3ce::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:4e:fc:29:d3:ed:6e:ce:27:6c:17:ca:69:5c:24:81:35:ea:
         ff:21:11:f2:8a:d4:94:38:1c:12:47:7d:4f:25:4f:ff:6d:ad:
         29:8f:c0:3b:58:39:3e:36:fe:4e:5e:8b:d1:5a:e0:fc:f5:86:
         96:a4:a9:8a:bf:04:9a:9b:5d:64:3e:e4:39:e5:8d:95:b3:28:
         52:d9:6e:81:47:74:47:1d:a6:0a:53:d9:56:77:22:61:72:79:
         aa:3d:b8:d8:05:66:dd:2f:b8:5b:12:23:aa:6e:41:3a:6b:69:
         eb:2d:f5:61:0b:a5:32:d4:6c:cd:3c:77:d9:64:77:6f:c6:cf:
         34:19:90:7b:95:f8:d6:d5:f8:8c:3a:5e:81:49:c6:27:a3:9e:
         e4:96:24:4e:97:b9:95:69:b7:61:a0:b1:20:74:fe:b6:c5:cb:
         e0:f9:51:00:14:23:a4:b7:af:08:3f:04:6f:f6:b2:2b:34:c5:
         6a:e4:6f:ba:7f:55:51:71:66:76:1f:a1:c5:eb:46:2b:e0:03:
         d7:ef:62:e3:df:4d:4f:f2:f0:be:dd:1b:e1:64:25:fc:fa:56:
         08:6f:58:1a:82:36:e3:3a:66:a0:3a:a4:97:4b:ae:6f:88:fd:
         9c:8d:a0:dc:0d:4d:b8:a6:c0:09:f4:79:69:38:7d:2c:c2:8f:
         79:02:54:37
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAPEDDjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUyMTE2MDkyNloXDTI0MDgwNzA4MjY0
NVowMzExMC8GA1UEAxMoMjI4ZjQwODhjOWVjNGI1NmJjODM4YTM0OTlmNzY4ZDVj
ZjczYmFiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIQIQMxboUVG
O+bkdBJsdG7pVOFTiKt34g24I3Gbty1aPuwxpt7UOwyBuz7bdsgCSTEdBs9WbOty
MmgaI/LnSfzvgNZWCnVMMX45qm8+O3Z1irN0thLpmiL0O31tRz2PtshSPvYHL9GX
LPdKLa9GT4xt0AC8bGVFZ5xIHnOGhkdgRdRyhPhUvapeEJ8rCDkkpexJD4X/iZJP
wgmZBe220wvLYrm5v2kCToCF4SFUZ4k5+4AYl+DSwvwoa2EJ7VzRlq43HuZi21m0
o3AraL1GhkOKXTqRRKruC7kE9+8HxE1C4cNZYWzI6IbqXs1NA8Z/BPuFZZrKbu97
LgC4UOAPNnUCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBSvvqkDY4nF21QvpgCOt1xX
9IqKYTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMjg5Njk4NC1jMTJk
LTQ5YjktYTQyNS1mNTJjZmRhMzFkY2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjI4OTY5ODQtYzEyZC00
OWI5LWE0MjUtZjUyY2ZkYTMxZGNlLzIyOGY0MDg4YzllYzRiNTZiYzgzOGEzNDk5
Zjc2OGQ1Y2Y3M2JhYjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAshqpDANBAIAAjAHAwUAKAYDzjAN
BgkqhkiG9w0BAQsFAAOCAQEAVk78KdPtbs4nbBfKaVwkgTXq/yER8orUlDgcEkd9
TyVP/22tKY/AO1g5Pjb+Tl6L0Vrg/PWGlqSpir8EmptdZD7kOeWNlbMoUtlugUd0
Rx2mClPZVnciYXJ5qj242AVm3S+4WxIjqm5BOmtp6y31YQulMtRszTx32WR3b8bP
NBmQe5X41tX4jDpegUnGJ6Oe5JYkTpe5lWm3YaCxIHT+tsXL4PlRABQjpLevCD8E
b/ayKzTFauRvun9VUXFmdh+hxetGK+AD1+9i499NT/Lwvt0b4WQl/PpWCG9YGoI2
4zpmoDqkl0uub4j9nI2g3A1NuKbACfR5aTh9LMKPeQJUNw==
-----END CERTIFICATE-----