Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36bd43ea6fc65700dbb8ceaf28c96bcc62a1239f.cer
File:                     36bd43ea6fc65700dbb8ceaf28c96bcc62a1239f.cer (raw, json)
Hash identifier:          p+/yp/W2yVNJTtYda0bndkzLABdEE8ue3ThbacooMRU=
Subject key identifier:   57:62:FF:3E:A0:CC:4E:3C:5E:F6:BC:FE:41:C7:CD:03:05:97:A9:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9CB95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/06649ad9-7a58-4d5e-bc36-767b91ebbf03/36bd43ea6fc65700dbb8ceaf28c96bcc62a1239f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/06649ad9-7a58-4d5e-bc36-767b91ebbf03/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 Dec 2020 20:11:24 +0000
Certificate not after:    Thu 17 Oct 2024 19:11:16 +0000
Subordinate resources:    IP: 2801:19:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16370581 (0xf9cb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 18 20:11:24 2020 GMT
            Not After : Oct 17 19:11:16 2024 GMT
        Subject: CN=36bd43ea6fc65700dbb8ceaf28c96bcc62a1239f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:bc:b1:11:28:13:bb:a1:a1:7c:24:e8:3a:
                    6c:5a:46:96:3d:a7:19:50:9d:db:0c:8a:ac:93:da:
                    6c:59:d7:a9:a3:09:90:61:84:ad:8d:4d:d9:b7:3e:
                    77:bf:1b:20:b7:5b:29:6a:65:3b:93:d3:4f:b7:c3:
                    bf:27:3c:12:fc:11:a5:a5:e9:be:15:bb:5d:8e:c5:
                    6c:ba:a3:3a:f0:dc:75:70:aa:f7:f2:73:b5:8e:64:
                    c0:05:db:b3:ab:35:3a:d5:56:67:0c:e0:9d:ad:10:
                    2c:96:5d:62:53:56:37:16:90:17:0f:41:81:78:25:
                    54:51:4c:97:07:04:58:e7:83:38:62:a2:2c:bc:44:
                    be:74:76:55:f7:12:53:43:3f:12:2d:13:81:4a:ca:
                    ea:7b:d1:12:57:6d:63:2f:f6:46:c6:b1:bf:1a:a0:
                    09:e1:68:4c:8d:0c:92:14:ec:5f:12:5d:88:8b:ce:
                    3f:91:a1:14:de:09:d1:62:24:4a:24:17:44:05:31:
                    ee:2e:50:70:38:4b:2c:61:2f:87:f3:ef:dd:cf:47:
                    92:b5:98:a5:e9:7a:2c:e6:11:95:d0:44:68:9e:e1:
                    ff:bc:58:27:c3:fd:cb:96:4b:33:97:c7:2b:03:e2:
                    bf:8c:96:bf:9c:58:32:5a:b0:7c:cb:29:a2:b8:6e:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:62:FF:3E:A0:CC:4E:3C:5E:F6:BC:FE:41:C7:CD:03:05:97:A9:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/06649ad9-7a58-4d5e-bc36-767b91ebbf03/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/06649ad9-7a58-4d5e-bc36-767b91ebbf03/36bd43ea6fc65700dbb8ceaf28c96bcc62a1239f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:a5:a1:46:3f:21:4d:dc:03:22:31:66:a2:25:24:57:03:
         39:39:2c:f4:0f:38:ff:a7:ba:40:07:1e:98:45:9c:d3:f9:89:
         bc:69:95:ba:d0:f7:a3:52:da:59:a3:3a:7f:c1:71:80:c0:d0:
         ae:9e:51:da:30:75:d8:b4:9d:88:bf:91:9e:3c:b0:67:7e:81:
         12:65:fa:91:81:e0:7e:ac:4e:b8:73:70:6b:b8:60:fd:43:95:
         50:8e:ed:7b:da:92:cf:90:be:c1:2e:09:4d:8f:93:5b:17:79:
         75:50:43:9e:4f:a7:2a:37:41:65:3c:ab:7d:08:92:0b:a7:b0:
         7a:33:52:65:de:9c:83:2c:0f:7a:67:7d:85:8a:16:e2:92:ec:
         f1:5a:53:20:bb:f1:7f:65:fc:6c:1f:54:1d:ea:69:20:83:80:
         aa:50:e3:af:12:99:de:f9:45:cc:f7:09:eb:19:fd:64:fa:3b:
         82:af:f8:3e:83:73:78:6d:60:cb:95:6d:0d:07:b8:0f:e1:83:
         39:a7:91:94:85:bb:d4:a0:bc:27:40:3d:fe:20:0f:2a:10:9e:
         cd:21:5a:5f:9d:d9:d9:50:d4:74:60:00:61:3b:dc:b5:81:4e:
         e1:13:be:1c:81:e6:70:66:9f:53:a1:2d:ea:76:44:16:a5:c4:
         b0:fd:28:5e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPnLlTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTIxODIwMTEyNFoXDTI0MTAxNzE5MTEx
NlowMzExMC8GA1UEAxMoMzZiZDQzZWE2ZmM2NTcwMGRiYjhjZWFmMjhjOTZiY2M2
MmExMjM5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIwYvLERKBO7
oaF8JOg6bFpGlj2nGVCd2wyKrJPabFnXqaMJkGGErY1N2bc+d78bILdbKWplO5PT
T7fDvyc8EvwRpaXpvhW7XY7FbLqjOvDcdXCq9/JztY5kwAXbs6s1OtVWZwzgna0Q
LJZdYlNWNxaQFw9BgXglVFFMlwcEWOeDOGKiLLxEvnR2VfcSU0M/Ei0TgUrK6nvR
EldtYy/2RsaxvxqgCeFoTI0MkhTsXxJdiIvOP5GhFN4J0WIkSiQXRAUx7i5QcDhL
LGEvh/Pv3c9HkrWYpel6LOYRldBEaJ7h/7xYJ8P9y5ZLM5fHKwPiv4yWv5xYMlqw
fMsporhuh/8CAwEAAaOCAuEwggLdMB0GA1UdDgQWBBRXYv8+oMxOPF72vP5Bx80D
BZepATAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNjY0OWFkOS03YTU4
LTRkNWUtYmMzNi03NjdiOTFlYmJmMDMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDY2NDlhZDktN2E1OC00
ZDVlLWJjMzYtNzY3YjkxZWJiZjAzLzM2YmQ0M2VhNmZjNjU3MDBkYmI4Y2VhZjI4
Yzk2YmNjNjJhMTIzOWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABloADANBgkqhkiG9w0BAQsF
AAOCAQEAIsuloUY/IU3cAyIxZqIlJFcDOTks9A84/6e6QAcemEWc0/mJvGmVutD3
o1LaWaM6f8FxgMDQrp5R2jB12LSdiL+RnjywZ36BEmX6kYHgfqxOuHNwa7hg/UOV
UI7te9qSz5C+wS4JTY+TWxd5dVBDnk+nKjdBZTyrfQiSC6ewejNSZd6cgywPemd9
hYoW4pLs8VpTILvxf2X8bB9UHeppIIOAqlDjrxKZ3vlFzPcJ6xn9ZPo7gq/4PoNz
eG1gy5VtDQe4D+GDOaeRlIW71KC8J0A9/iAPKhCezSFaX53Z2VDUdGAAYTvctYFO
4RO+HIHmcGafU6Et6nZEFqXEsP0oXg==
-----END CERTIFICATE-----