Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291989210477451628cf9b30f2f0d12559c92730.cer
File:                     291989210477451628cf9b30f2f0d12559c92730.cer (raw, json)
Hash identifier:          pGS2swxO6+suvr7SA2hwT0s9oievVtwV9wuSlgL7TO8=
Subject key identifier:   6A:51:6D:D2:A0:83:58:5C:0D:E3:8A:2B:FC:8C:0C:00:26:93:B9:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5C1F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/291989210477451628cf9b30f2f0d12559c92730.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Jan 2021 16:47:25 +0000
Certificate not after:    Sun 26 Nov 2023 16:21:48 +0000
Subordinate resources:    IP: 177.126.36.0/22
                          IP: 2803:a410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14008817 (0xd5c1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 27 16:47:25 2021 GMT
            Not After : Nov 26 16:21:48 2023 GMT
        Subject: CN=291989210477451628cf9b30f2f0d12559c92730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:bf:af:2c:a6:16:97:47:d0:84:f7:e2:cb:
                    53:be:be:43:97:66:6c:8c:1c:35:b2:8a:c3:fc:14:
                    af:04:25:c3:0a:30:51:21:93:d0:b2:38:26:23:01:
                    03:c5:b9:dc:55:b0:1c:3d:df:b2:72:d8:13:90:05:
                    52:fa:e4:52:cf:b6:66:ab:bd:31:d0:9c:27:bf:85:
                    73:94:d2:b6:70:5e:15:05:92:7d:76:2e:f3:4a:fa:
                    a8:c5:3d:e6:37:ab:86:90:f4:de:d2:f0:3e:1c:de:
                    3e:10:e6:c3:10:c3:91:cf:28:4c:e1:50:d4:a5:b0:
                    4c:95:75:1b:53:15:8a:09:2f:51:03:95:02:3c:39:
                    74:f7:01:d7:94:c1:d6:54:f9:03:4a:a5:a3:fa:f6:
                    d9:1c:ec:4d:25:27:d6:9e:af:e2:34:b2:7e:9a:75:
                    c7:dd:b1:74:ce:20:d5:01:eb:a2:2a:3a:34:36:de:
                    0a:88:50:d3:b0:56:a8:ec:a0:a0:26:4c:69:79:f4:
                    5a:29:bc:78:2e:d3:6f:d5:db:63:6b:3b:76:47:08:
                    f2:36:79:54:91:a3:2f:3d:68:09:f9:ff:5b:f2:8e:
                    04:4c:37:c2:51:5e:87:33:92:e6:23:93:f1:c7:70:
                    0b:e4:4d:62:46:54:05:60:bc:d7:4b:5f:35:66:04:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:51:6D:D2:A0:83:58:5C:0D:E3:8A:2B:FC:8C:0C:00:26:93:B9:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/291989210477451628cf9b30f2f0d12559c92730.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.36.0/22
                IPv6:
                  2803:a410::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:97:86:74:e2:59:e6:9a:9f:68:22:69:1d:51:1d:07:f2:bb:
         0f:64:82:77:5e:33:b0:b7:9a:08:bf:df:0d:0c:25:5a:ac:66:
         de:82:70:44:16:9a:44:23:14:9f:06:ec:61:62:a3:2f:1e:74:
         ec:57:3f:f2:7b:40:92:fd:59:39:c1:e8:cf:3b:31:59:7e:4d:
         6c:1b:f5:8c:cd:a2:a3:02:f0:0d:42:22:5d:bf:41:9b:9c:dd:
         24:cd:00:a4:1e:2b:47:86:58:33:ce:77:56:03:af:17:70:2c:
         50:3a:44:14:27:84:97:94:58:a0:b9:ec:a8:18:5c:2c:e9:8d:
         e6:54:22:55:c6:6f:7c:ee:73:7f:7f:91:ec:16:14:0a:1d:50:
         db:c7:6e:c8:05:31:62:44:33:25:31:72:cf:7e:a8:7d:69:ca:
         56:2a:6e:dd:6c:3a:8a:e4:bf:0f:b1:23:cc:a1:69:91:ce:62:
         7d:8c:8e:2e:55:35:ed:ad:f1:44:7d:47:3c:20:9e:59:e9:26:
         70:52:27:2c:83:66:87:c9:56:06:e1:6b:a3:81:b9:f9:8e:b9:
         a6:30:ff:09:6f:02:d0:b6:1b:8f:aa:40:13:b9:0b:48:ab:aa:
         89:c9:c7:30:e5:7a:3c:1f:99:bc:2c:ba:d5:a7:0d:7a:1d:db:
         11:56:db:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEANXB8TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDEyNzE2NDcyNVoXDTIzMTEyNjE2MjE0
OFowMzExMC8GA1UEAxMoMjkxOTg5MjEwNDc3NDUxNjI4Y2Y5YjMwZjJmMGQxMjU1
OWM5MjczMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhtv68sphaX
R9CE9+LLU76+Q5dmbIwcNbKKw/wUrwQlwwowUSGT0LI4JiMBA8W53FWwHD3fsnLY
E5AFUvrkUs+2Zqu9MdCcJ7+Fc5TStnBeFQWSfXYu80r6qMU95jerhpD03tLwPhze
PhDmwxDDkc8oTOFQ1KWwTJV1G1MVigkvUQOVAjw5dPcB15TB1lT5A0qlo/r22Rzs
TSUn1p6v4jSyfpp1x92xdM4g1QHroio6NDbeCohQ07BWqOygoCZMaXn0Wim8eC7T
b9XbY2s7dkcI8jZ5VJGjLz1oCfn/W/KOBEw3wlFehzOS5iOT8cdwC+RNYkZUBWC8
10tfNWYE3TUCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRqUW3SoINYXA3jiiv8jAwA
JpO5MTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iZjE1OTU4OC1lM2U5
LTQ5MDEtYjk0NC0wYzE4MGI4YjUxOTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmYxNTk1ODgtZTNlOS00
OTAxLWI5NDQtMGMxODBiOGI1MTk4LzI5MTk4OTIxMDQ3NzQ1MTYyOGNmOWIzMGYy
ZjBkMTI1NTljOTI3MzAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArF+JDANBAIAAjAHAwUAKAOkEDAN
BgkqhkiG9w0BAQsFAAOCAQEAspeGdOJZ5pqfaCJpHVEdB/K7D2SCd14zsLeaCL/f
DQwlWqxm3oJwRBaaRCMUnwbsYWKjLx507Fc/8ntAkv1ZOcHozzsxWX5NbBv1jM2i
owLwDUIiXb9Bm5zdJM0ApB4rR4ZYM853VgOvF3AsUDpEFCeEl5RYoLnsqBhcLOmN
5lQiVcZvfO5zf3+R7BYUCh1Q28duyAUxYkQzJTFyz36ofWnKVipu3Ww6iuS/D7Ej
zKFpkc5ifYyOLlU17a3xRH1HPCCeWekmcFInLINmh8lWBuFro4G5+Y65pjD/CW8C
0LYbj6pAE7kLSKuqicnHMOV6PB+ZvCy61acNeh3bEVbbwA==
-----END CERTIFICATE-----