Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer
File:                     36a6485e1a54ec808a146215bd1372815d55a3ec.cer (raw, json)
Hash identifier:          KYesXCDepluIcVK5j+uwRQ9sOI4J5cbIsWReYu/4VDM=
Subject key identifier:   37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01064BAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/36a6485e1a54ec808a146215bd1372815d55a3ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Oct 2021 19:35:12 +0000
Certificate not after:    Wed 20 Aug 2025 15:04:48 +0000
Subordinate resources:    AS: 272009
                          IP: 45.226.59.0/24
                          IP: 2803:910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17189803 (0x1064bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 20 19:35:12 2021 GMT
            Not After : Aug 20 15:04:48 2025 GMT
        Subject: CN=36a6485e1a54ec808a146215bd1372815d55a3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:80:a1:44:b2:0a:26:44:83:ff:c8:5c:51:
                    b9:87:58:b7:a6:5f:f5:f8:44:0c:a5:c8:ba:1f:d4:
                    e4:54:b9:61:11:f2:72:1c:bb:38:f6:fb:11:1e:47:
                    e3:8b:b2:38:bc:60:bb:d7:43:05:b6:ca:e6:39:d2:
                    d4:33:61:0b:36:db:06:df:cd:4c:ee:c9:95:07:89:
                    06:e6:06:7b:df:d3:e8:a8:89:73:6c:05:a7:c3:e6:
                    73:e5:bb:79:d5:46:17:7d:fd:8e:43:eb:fa:43:6f:
                    de:81:cc:b4:56:b8:b0:8d:da:cd:46:8b:02:6e:25:
                    aa:cb:91:39:80:db:e0:b3:d4:3b:d2:f2:22:a5:c3:
                    c0:79:d5:b7:9a:40:8a:97:3a:ce:de:a9:92:f6:56:
                    93:6b:80:31:cf:86:a4:35:be:2f:6e:e4:55:b4:35:
                    5b:ba:35:ed:c1:13:77:09:31:fc:a0:e2:98:17:d3:
                    04:95:4c:b5:09:45:f4:0b:1d:f7:cd:bb:f3:9c:5a:
                    5c:7b:f8:55:39:46:c2:84:06:1b:3d:33:22:fc:2f:
                    a7:98:96:b1:41:35:1e:1b:a9:61:00:64:69:b5:13:
                    fe:15:75:dd:d9:3d:51:ca:c2:97:38:ad:ee:58:ac:
                    3f:b4:03:e5:da:88:36:13:4f:84:4b:6b:88:72:49:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/36a6485e1a54ec808a146215bd1372815d55a3ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24
                IPv6:
                  2803:910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272009

    Signature Algorithm: sha256WithRSAEncryption
         66:66:03:3e:5c:5a:da:7b:ff:03:5b:15:87:26:b5:70:55:a5:
         93:21:0d:35:c0:6c:a6:fb:11:77:ab:48:76:f8:ee:f6:31:76:
         cb:7d:1c:ea:1c:19:ad:10:e6:c9:51:21:18:35:e4:1a:0a:57:
         a1:c0:4f:4c:19:1a:55:92:04:f3:36:37:0e:4d:19:d8:ac:2c:
         de:c4:fb:53:53:88:52:78:b1:c9:31:00:a6:8a:2c:17:8b:6a:
         94:ce:69:41:55:ea:5f:11:44:2b:2c:2f:7e:f2:53:8c:52:3c:
         62:8b:04:08:55:53:1d:04:f9:fe:7e:83:5a:d6:0c:f2:2c:a2:
         f8:40:8f:ab:cc:20:0b:c0:2a:54:ec:b8:42:5d:c9:00:9a:cb:
         cb:ca:e4:11:39:05:27:c0:68:c1:82:4d:95:5e:50:98:a3:fb:
         3f:b8:9c:49:39:9c:47:5b:00:96:99:df:68:1b:2b:7b:ed:d3:
         2a:e6:c7:29:2a:7b:a0:26:e7:80:f6:45:aa:7a:fa:87:10:81:
         e5:94:db:c6:06:84:2d:46:6f:a6:29:f6:c0:5e:f5:41:67:f8:
         b1:e7:94:a2:07:33:fe:f1:6c:84:45:81:cd:f8:46:61:15:1d:
         03:64:51:b2:f2:98:86:a2:99:bf:c6:80:66:9a:9c:c5:90:bd:
         44:46:1d:60
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQZLqzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAyMDE5MzUxMloXDTI1MDgyMDE1MDQ0
OFowMzExMC8GA1UEAxMoMzZhNjQ4NWUxYTU0ZWM4MDhhMTQ2MjE1YmQxMzcyODE1
ZDU1YTNlYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIgygKFEsgom
RIP/yFxRuYdYt6Zf9fhEDKXIuh/U5FS5YRHychy7OPb7ER5H44uyOLxgu9dDBbbK
5jnS1DNhCzbbBt/NTO7JlQeJBuYGe9/T6KiJc2wFp8Pmc+W7edVGF339jkPr+kNv
3oHMtFa4sI3azUaLAm4lqsuROYDb4LPUO9LyIqXDwHnVt5pAipc6zt6pkvZWk2uA
Mc+GpDW+L27kVbQ1W7o17cETdwkx/KDimBfTBJVMtQlF9Asd982785xaXHv4VTlG
woQGGz0zIvwvp5iWsUE1HhupYQBkabUT/hV13dk9UcrClzit7lisP7QD5dqINhNP
hEtriHJJtikCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQ3Dmiq1fXJM4JuqPT+fSpI
AY/QBzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ZDFmOTgwZS1hMjc3
LTRmZWEtYWI4MS1hNmY4NzcyZjgzNDQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGQxZjk4MGUtYTI3Ny00
ZmVhLWFiODEtYTZmODc3MmY4MzQ0LzM2YTY0ODVlMWE1NGVjODA4YTE0NjIxNWJk
MTM3MjgxNWQ1NWEzZWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC3iOzANBAIAAjAHAwUAKAMJEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJokwDQYJKoZIhvcNAQELBQADggEBAGZm
Az5cWtp7/wNbFYcmtXBVpZMhDTXAbKb7EXerSHb47vYxdst9HOocGa0Q5slRIRg1
5BoKV6HAT0wZGlWSBPM2Nw5NGdisLN7E+1NTiFJ4sckxAKaKLBeLapTOaUFV6l8R
RCssL37yU4xSPGKLBAhVUx0E+f5+g1rWDPIsovhAj6vMIAvAKlTsuEJdyQCay8vK
5BE5BSfAaMGCTZVeUJij+z+4nEk5nEdbAJaZ32gbK3vt0yrmxykqe6Am54D2Rap6
+ocQgeWU28YGhC1Gb6Yp9sBe9UFn+LHnlKIHM/7xbIRFgc34RmEVHQNkUbLymIai
mb/GgGaanMWQvURGHWA=
-----END CERTIFICATE-----