Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer
File:                     32c356bf43c9220bb625d50596a7ec3c7542fb23.cer (raw, json)
Hash identifier:          DiMdEMi0NsNoy/onJgPzITXuIgajg6lLaI4Ojb2RdNg=
Subject key identifier:   68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F255FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Oct 2021 22:58:05 +0000
Certificate not after:    Mon 19 Aug 2024 18:09:37 +0000
Subordinate resources:    AS: 265850
                          IP: 45.224.252.0/22
                          IP: 2803:2a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15881725 (0xf255fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 22:58:05 2021 GMT
            Not After : Aug 19 18:09:37 2024 GMT
        Subject: CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:95:73:46:97:db:82:b5:88:2c:94:1e:d6:
                    ca:02:4c:49:99:29:f2:a8:03:a5:e0:36:29:ae:89:
                    91:72:51:30:ef:2e:1e:85:4e:d3:cc:28:45:a8:ab:
                    d4:cd:fa:8b:92:3d:c2:17:5b:24:0f:8e:8f:05:07:
                    55:ff:ee:82:de:1f:d2:b6:05:f0:57:3a:ea:04:76:
                    4b:ed:02:7f:96:af:88:91:06:c2:67:4c:fb:0f:59:
                    d8:dd:ab:5e:c6:35:65:30:9f:d6:b5:42:a2:3d:d5:
                    30:7e:fa:7c:c8:dd:a2:41:92:d0:0f:98:dd:cc:aa:
                    2f:01:0f:45:26:40:62:af:2d:ca:3e:df:21:b8:38:
                    be:f8:1e:8c:02:39:17:73:dc:04:c3:86:0a:b1:5b:
                    00:88:8b:46:ac:1b:72:b0:a7:72:48:5b:ea:cd:86:
                    61:45:ef:c7:b7:ae:d0:a8:ba:61:39:63:30:a0:bc:
                    1f:40:96:68:40:b7:9a:2b:97:8f:60:f8:90:e6:9c:
                    91:d9:8e:6a:5e:40:79:62:a8:6c:80:58:5b:f9:6a:
                    91:3e:9e:80:cb:8e:bc:71:09:66:9e:d0:c8:5e:6a:
                    d4:74:7e:ef:0d:ed:0a:fb:c4:35:b2:7a:7d:51:7f:
                    17:f8:d8:57:9a:f4:8c:60:ec:10:55:01:68:1e:9a:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.252.0/22
                IPv6:
                  2803:2a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265850

    Signature Algorithm: sha256WithRSAEncryption
         ae:ab:3f:66:52:31:bf:f8:43:50:c2:3d:56:b3:a0:01:27:41:
         74:40:0b:53:06:81:e1:7e:96:48:aa:5b:f2:4f:31:e3:4c:bf:
         0a:15:a8:b4:05:f8:8f:3f:57:99:7a:d5:e8:e6:3a:e1:fa:0e:
         cf:57:e0:80:0a:df:3e:e6:92:cc:21:64:73:27:2b:33:42:05:
         3d:f7:13:99:69:2f:c7:15:49:9b:b8:a8:d9:20:2c:18:85:35:
         47:29:cf:cf:9e:ea:0f:5f:5e:98:37:53:6c:60:25:fa:4a:0e:
         4e:8e:18:58:a5:db:bf:e6:a2:5b:bf:81:fa:d8:c1:b2:c7:15:
         47:cd:e9:6d:ba:0e:7b:6b:79:df:d0:6b:5f:f5:87:32:bb:19:
         44:f0:a7:ad:38:b8:7d:9a:e1:81:d3:e8:b3:e0:10:54:32:fe:
         25:c7:78:a9:41:cc:3b:bc:63:bf:07:0f:cf:89:fa:b4:e7:3a:
         02:41:ac:d5:d2:fb:ec:f0:11:19:a1:50:dd:b6:73:8f:84:2b:
         3d:e5:5e:cf:93:24:77:5f:8f:45:0b:53:59:d8:a9:35:c0:db:
         22:b1:95:fa:0b:4d:cf:98:72:00:8f:f7:29:6c:fd:9b:b0:fd:
         c7:ef:d6:e9:a8:51:0a:10:57:26:f0:d0:ca:83:f8:cc:f0:5d:
         f1:ca:d9:d4
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPJV/TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAwNDIyNTgwNVoXDTI0MDgxOTE4MDkz
N1owMzExMC8GA1UEAxMoMzJjMzU2YmY0M2M5MjIwYmI2MjVkNTA1OTZhN2VjM2M3
NTQyZmIyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIE/lXNGl9uC
tYgslB7WygJMSZkp8qgDpeA2Ka6JkXJRMO8uHoVO08woRair1M36i5I9whdbJA+O
jwUHVf/ugt4f0rYF8Fc66gR2S+0Cf5aviJEGwmdM+w9Z2N2rXsY1ZTCf1rVCoj3V
MH76fMjdokGS0A+Y3cyqLwEPRSZAYq8tyj7fIbg4vvgejAI5F3PcBMOGCrFbAIiL
RqwbcrCnckhb6s2GYUXvx7eu0Ki6YTljMKC8H0CWaEC3miuXj2D4kOackdmOal5A
eWKobIBYW/lqkT6egMuOvHEJZp7QyF5q1HR+7w3tCvvENbJ6fVF/F/jYV5r0jGDs
EFUBaB6aGccCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRo1fRa+/0Fclgw+uUwZpiR
IoEVATAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMmQ3NDcwNS00ZjJi
LTRjZTQtYmU4OS0yYmZkZjM2MDRlMjkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTJkNzQ3MDUtNGYyYi00
Y2U0LWJlODktMmJmZGYzNjA0ZTI5LzMyYzM1NmJmNDNjOTIyMGJiNjI1ZDUwNTk2
YTdlYzNjNzU0MmZiMjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3g/DANBAIAAjAHAwUAKAMqIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDnowDQYJKoZIhvcNAQELBQADggEBAK6r
P2ZSMb/4Q1DCPVazoAEnQXRAC1MGgeF+lkiqW/JPMeNMvwoVqLQF+I8/V5l61ejm
OuH6Ds9X4IAK3z7mkswhZHMnKzNCBT33E5lpL8cVSZu4qNkgLBiFNUcpz8+e6g9f
Xpg3U2xgJfpKDk6OGFil27/molu/gfrYwbLHFUfN6W26Dntred/Qa1/1hzK7GUTw
p604uH2a4YHT6LPgEFQy/iXHeKlBzDu8Y78HD8+J+rTnOgJBrNXS++zwERmhUN22
c4+EKz3lXs+TJHdfj0ULU1nYqTXA2yKxlfoLTc+YcgCP9yls/Zuw/cfv1umoUQoQ
Vybw0MqD+MzwXfHK2dQ=
-----END CERTIFICATE-----