Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.cer
File:                     2d7ada75860472b45a97cb9e0c6698ff1f4fb086.cer (raw, json)
Hash identifier:          jJL6S38im+N3D/S+29aM5IC9YYi2PgiF+8B91NKuZEE=
Subject key identifier:   DB:2D:9C:F6:4E:E6:D5:B4:9A:8D:AF:E3:A1:3D:E9:0E:C4:A4:46:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7E9E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Sep 2022 15:53:08 +0000
Certificate not after:    Thu 03 Oct 2024 20:57:31 +0000
Subordinate resources:    AS: 28408
                          IP: 167.249.252.0/22
                          IP: 170.244.108.0/22
                          IP: 2806:20f::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16247268 (0xf7e9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 14 15:53:08 2022 GMT
            Not After : Oct  3 20:57:31 2024 GMT
        Subject: CN=2d7ada75860472b45a97cb9e0c6698ff1f4fb086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:0a:ad:5b:4a:89:7e:f4:bc:70:7b:5b:68:
                    ec:89:93:21:8e:2b:f5:7c:53:7e:b8:11:a7:2d:76:
                    fe:dd:74:12:ad:ef:75:52:3b:08:51:95:83:8b:17:
                    82:17:bd:23:be:bc:78:ca:b4:21:79:70:7b:d2:f1:
                    a9:d1:9e:ba:3b:8d:9a:71:4d:4c:58:df:90:c5:a1:
                    ca:c7:c1:85:ed:5e:c7:b9:f1:44:c3:73:6b:20:d6:
                    a0:94:df:fd:be:74:56:9f:82:07:a7:88:81:bb:d2:
                    3e:bf:9b:2d:d5:ef:0f:2b:fc:39:1d:ba:fa:df:42:
                    13:a7:9b:e4:01:f1:3b:5d:9c:ab:32:b6:09:fb:81:
                    6b:8d:29:c6:f3:44:43:e7:f0:03:88:7d:ab:66:df:
                    6c:96:47:f3:e0:50:3e:82:24:08:b5:d1:ab:cb:3a:
                    d7:5a:5b:9c:dd:87:c0:70:6c:55:fa:d7:b3:f5:9d:
                    25:48:ba:1f:4b:63:ed:8b:bd:aa:69:59:4b:55:5f:
                    fa:f2:af:be:48:ec:39:3a:ad:bf:14:8d:be:ea:56:
                    42:20:43:c5:e5:8e:6a:2a:51:e8:e5:5f:3a:3b:0f:
                    96:ec:e9:4d:d3:fc:c7:0f:09:c9:a1:6f:de:b3:e0:
                    66:da:b8:f6:58:21:e8:ea:d4:98:ca:6a:95:bd:ad:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2D:9C:F6:4E:E6:D5:B4:9A:8D:AF:E3:A1:3D:E9:0E:C4:A4:46:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.252.0/22
                  170.244.108.0/22
                IPv6:
                  2806:20f::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28408

    Signature Algorithm: sha256WithRSAEncryption
         29:24:df:9b:5f:e7:33:4c:a4:84:74:91:c9:67:af:2b:85:2d:
         85:50:5f:f7:b9:80:b3:ea:9d:e8:fc:76:d4:ec:b9:da:44:77:
         64:cc:97:9e:c3:71:18:6c:82:c9:f7:3c:32:ba:95:a2:67:0d:
         e2:72:d7:7d:1a:07:ca:f7:e4:9d:fa:5c:1e:81:d3:9e:e6:ae:
         0b:25:f8:25:54:15:c5:76:31:27:fd:fb:a1:e3:2e:f8:d6:68:
         28:d5:e9:0a:19:c7:98:94:01:02:25:f4:54:fe:6b:0e:7f:13:
         2b:2d:81:65:d5:81:21:d5:6e:94:9a:5e:bd:56:e2:3b:c6:f7:
         fa:21:83:bc:d0:8b:be:86:cc:3b:43:ce:4f:de:b8:bc:47:4e:
         26:3e:5c:af:27:b7:5e:13:52:10:a8:2c:d6:1b:37:d4:65:85:
         75:31:0e:d2:ba:32:ae:5b:25:03:42:8a:78:a9:53:ea:57:1f:
         ad:08:d1:5c:82:2b:2f:34:ae:cf:be:e3:c1:99:87:dd:59:db:
         60:0e:c5:82:5b:8c:8d:81:b8:3a:20:47:72:8f:e3:cc:b2:4f:
         11:4a:d4:0a:ce:7f:f3:3f:0e:a6:92:cf:37:cf:59:79:25:f6:
         ba:23:2a:67:e8:62:ea:d4:2e:3b:5c:5c:08:b4:26:68:a5:fc:
         5f:3d:d6:6f
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAPfp5DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkxNDE1NTMwOFoXDTI0MTAwMzIwNTcz
MVowMzExMC8GA1UEAxMoMmQ3YWRhNzU4NjA0NzJiNDVhOTdjYjllMGM2Njk4ZmYx
ZjRmYjA4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALhXCq1bSol+
9Lxwe1to7ImTIY4r9XxTfrgRpy12/t10Eq3vdVI7CFGVg4sXghe9I768eMq0IXlw
e9LxqdGeujuNmnFNTFjfkMWhysfBhe1ex7nxRMNzayDWoJTf/b50Vp+CB6eIgbvS
Pr+bLdXvDyv8OR26+t9CE6eb5AHxO12cqzK2CfuBa40pxvNEQ+fwA4h9q2bfbJZH
8+BQPoIkCLXRq8s611pbnN2HwHBsVfrXs/WdJUi6H0tj7Yu9qmlZS1Vf+vKvvkjs
OTqtvxSNvupWQiBDxeWOaipR6OVfOjsPluzpTdP8xw8JyaFv3rPgZtq49lgh6OrU
mMpqlb2tnGUCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBTbLZz2TubVtJqNr+OhPekO
xKRGxTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NDUwZDBiNy1jYWFj
LTRiZDQtYTUxNy0yMzI1MGJkM2Q1MDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTQ1MGQwYjctY2FhYy00
YmQ0LWE1MTctMjMyNTBiZDNkNTA5LzJkN2FkYTc1ODYwNDcyYjQ1YTk3Y2I5ZTBj
NjY5OGZmMWY0ZmIwODYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqf5/AMEAqr0bDANBAIAAjAHAwUA
KAYCDzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJu+DANBgkqhkiG9w0BAQsFAAOC
AQEAKSTfm1/nM0ykhHSRyWevK4UthVBf97mAs+qd6Px21Oy52kR3ZMyXnsNxGGyC
yfc8MrqVomcN4nLXfRoHyvfknfpcHoHTnuauCyX4JVQVxXYxJ/37oeMu+NZoKNXp
ChnHmJQBAiX0VP5rDn8TKy2BZdWBIdVulJpevVbiO8b3+iGDvNCLvobMO0POT964
vEdOJj5crye3XhNSEKgs1hs31GWFdTEO0royrlslA0KKeKlT6lcfrQjRXIIrLzSu
z77jwZmH3VnbYA7FgluMjYG4OiBHco/jzLJPEUrUCs5/8z8OppLPN89ZeSX2uiMq
Z+hi6tQuO1xcCLQmaKX8Xz3Wbw==
-----END CERTIFICATE-----