Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer
File:                     3065f6a5a133325f3e525bfe0703a202498f6a21.cer (raw, json)
Hash identifier:          FG/Bc4RWssgoNwbzNMbudvzFi+aV8cSBABKhZIA2Nls=
Subject key identifier:   4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF7865
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3065f6a5a133325f3e525bfe0703a202498f6a21.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Apr 2021 16:43:37 +0000
Certificate not after:    Sun 24 Mar 2024 19:04:40 +0000
Subordinate resources:    IP: 45.7.132.0/22
                          IP: 2803:3dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14645349 (0xdf7865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 15 16:43:37 2021 GMT
            Not After : Mar 24 19:04:40 2024 GMT
        Subject: CN=3065f6a5a133325f3e525bfe0703a202498f6a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:74:a4:ff:fa:1e:0d:ad:27:55:3a:fe:c3:e4:
                    fd:86:15:e0:bd:f0:ff:29:54:04:87:77:1d:cb:e1:
                    fd:d1:25:b7:47:d8:9f:1d:22:11:66:6d:e5:74:89:
                    9f:03:68:fb:6e:d6:2b:9d:78:52:f2:9a:bc:ac:b3:
                    03:e1:11:cb:bf:25:3a:35:c5:55:79:3e:cc:44:60:
                    e7:68:03:f4:15:b8:1e:7f:42:02:90:3e:6f:8a:11:
                    b0:c6:1a:5b:ec:70:77:97:43:84:32:2c:58:da:87:
                    91:89:68:b8:df:1b:e7:cf:fc:03:5b:dd:86:bd:19:
                    48:15:3c:8f:86:b8:19:e0:9d:cc:8f:9c:37:e4:68:
                    ae:a1:69:d8:96:5b:c8:bb:de:24:43:d6:00:2b:3b:
                    d6:2e:a1:ec:74:c4:38:e2:e9:d4:ce:1c:ba:44:86:
                    e8:fe:04:5f:67:dd:2c:9e:0c:40:01:fb:c3:c3:49:
                    a9:e6:ab:ad:1a:2e:8c:ef:2e:02:77:0b:4f:ad:49:
                    66:7f:2b:d5:2a:9b:b0:28:b6:cb:41:18:fc:80:73:
                    16:47:50:6a:dd:7f:ac:c9:a1:dd:12:56:af:7a:e3:
                    b7:68:87:87:d1:c4:cb:86:70:62:0f:86:09:a6:d7:
                    81:03:4a:1c:c8:41:b7:e0:1c:bd:ed:88:59:56:10:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3065f6a5a133325f3e525bfe0703a202498f6a21.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.132.0/22
                IPv6:
                  2803:3dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:86:75:1d:9b:1e:8c:06:65:e0:7c:15:52:20:e6:0d:66:8c:
         a6:ba:5e:38:5d:02:b7:b1:89:c2:76:bc:87:8c:d2:85:fb:5a:
         e7:d5:39:87:75:b4:62:ea:bd:15:04:1e:44:8c:88:75:cd:ab:
         fd:64:00:43:55:6b:50:0a:79:33:02:8a:68:ba:e2:4c:18:44:
         f3:3b:4f:1c:fb:82:43:08:e4:aa:47:82:0d:55:a7:06:22:f2:
         aa:5c:51:4b:69:3a:10:da:90:3f:ca:c6:73:e8:a4:7d:39:d1:
         ba:71:4e:f7:57:f7:12:2e:f2:e8:cf:e6:b4:ed:cc:b6:d5:43:
         bd:5a:99:f8:07:3a:e4:49:5e:3c:a7:99:b4:5c:d8:51:cf:2a:
         56:e1:8d:3a:95:31:30:ca:d5:f9:03:8a:f5:41:ee:ea:6a:f4:
         e8:47:13:82:de:2d:e6:7f:e6:4c:9c:2d:03:2d:f0:b0:9b:0f:
         56:9f:b6:cf:0e:50:fd:6f:5c:a0:45:7e:5a:72:5b:40:40:54:
         6a:ce:15:19:b2:0e:ff:86:4a:61:43:ec:18:47:d8:92:ec:f9:
         01:91:fa:d8:67:4f:2c:70:05:89:29:42:c3:ce:3c:c7:ec:6b:
         8f:cf:59:ac:cc:36:aa:3b:de:1b:89:f5:ea:a9:72:9f:a3:48:
         1c:d3:2c:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAN94ZTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQxNTE2NDMzN1oXDTI0MDMyNDE5MDQ0
MFowMzExMC8GA1UEAxMoMzA2NWY2YTVhMTMzMzI1ZjNlNTI1YmZlMDcwM2EyMDI0
OThmNmEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJZ0pP/6Hg2t
J1U6/sPk/YYV4L3w/ylUBId3Hcvh/dElt0fYnx0iEWZt5XSJnwNo+27WK514UvKa
vKyzA+ERy78lOjXFVXk+zERg52gD9BW4Hn9CApA+b4oRsMYaW+xwd5dDhDIsWNqH
kYlouN8b58/8A1vdhr0ZSBU8j4a4GeCdzI+cN+RorqFp2JZbyLveJEPWACs71i6h
7HTEOOLp1M4cukSG6P4EX2fdLJ4MQAH7w8NJqearrRoujO8uAncLT61JZn8r1Sqb
sCi2y0EY/IBzFkdQat1/rMmh3RJWr3rjt2iHh9HEy4ZwYg+GCabXgQNKHMhBt+Ac
ve2IWVYQtqMCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBROabl0WCPxudYfCvuNy4uG
iHC6hzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mZWVmOWU4Zi03MDVj
LTQ0ODEtODcxYS00NmE5NzU5MTM3MzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmVlZjllOGYtNzA1Yy00
NDgxLTg3MWEtNDZhOTc1OTEzNzM3LzMwNjVmNmE1YTEzMzMyNWYzZTUyNWJmZTA3
MDNhMjAyNDk4ZjZhMjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0HhDANBAIAAjAHAwUAKAM9wDAN
BgkqhkiG9w0BAQsFAAOCAQEApYZ1HZsejAZl4HwVUiDmDWaMprpeOF0Ct7GJwna8
h4zShfta59U5h3W0Yuq9FQQeRIyIdc2r/WQAQ1VrUAp5MwKKaLriTBhE8ztPHPuC
QwjkqkeCDVWnBiLyqlxRS2k6ENqQP8rGc+ikfTnRunFO91f3Ei7y6M/mtO3MttVD
vVqZ+Ac65ElePKeZtFzYUc8qVuGNOpUxMMrV+QOK9UHu6mr06EcTgt4t5n/mTJwt
Ay3wsJsPVp+2zw5Q/W9coEV+WnJbQEBUas4VGbIO/4ZKYUPsGEfYkuz5AZH62GdP
LHAFiSlCw848x+xrj89ZrMw2qjveG4n16qlyn6NIHNMspA==
-----END CERTIFICATE-----