Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36db2a9dc7f54f37a110e0c2fb87e02babea4634.cer
File:                     36db2a9dc7f54f37a110e0c2fb87e02babea4634.cer (raw, json)
Hash identifier:          Y00Q+2Qczv/9gcqgCgDPmP7kvAXRLx1TaVQgtzurMTs=
Subject key identifier:   AD:1E:18:01:5D:B9:7A:96:FA:44:6D:6F:FE:CE:11:50:A8:02:E9:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDE2A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/36db2a9dc7f54f37a110e0c2fb87e02babea4634.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 11 Apr 2021 18:16:29 +0000
Certificate not after:    Thu 07 Mar 2024 18:01:58 +0000
Subordinate resources:    AS: 28398
                          IP: 138.99.148.0/22
                          IP: 2806:206::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14541481 (0xdde2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 18:16:29 2021 GMT
            Not After : Mar  7 18:01:58 2024 GMT
        Subject: CN=36db2a9dc7f54f37a110e0c2fb87e02babea4634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:cc:c2:8f:00:c0:be:f5:56:d7:ae:b1:53:
                    f6:0c:3b:f2:e9:f6:db:f4:96:d8:a2:0c:09:cf:ce:
                    3f:2e:d8:79:40:eb:78:2f:e2:22:55:45:5f:93:dd:
                    91:fc:f3:b2:e9:aa:a6:a6:2d:ef:10:78:c5:ac:5d:
                    2c:d5:60:13:fc:d6:ff:4e:b5:43:54:c0:0e:0c:fb:
                    51:ac:51:7b:fc:23:bd:3c:ef:a3:37:d5:91:c2:de:
                    9f:17:6f:e1:5b:1f:d5:08:dc:89:6b:f0:3c:fe:9f:
                    81:46:86:80:e6:b9:e3:7f:3a:04:cc:cf:21:1a:e5:
                    3c:de:48:cb:ab:83:d0:08:ba:d4:26:ae:4a:00:96:
                    36:30:13:d4:db:eb:6e:f8:2e:11:40:5f:ab:f4:65:
                    86:4d:db:75:00:3d:80:7e:4d:ad:5a:17:01:54:f2:
                    6d:af:cc:17:c0:bc:f3:a3:20:88:a5:59:33:24:e0:
                    49:90:13:ae:83:bf:3e:45:a3:28:48:51:5a:f4:2f:
                    7c:3e:84:02:1d:91:70:e5:ed:d6:63:20:b1:98:33:
                    ba:e5:a3:57:5e:9f:a8:b4:ea:54:53:a8:e1:24:e2:
                    06:83:fb:83:66:af:cd:12:e2:cc:0e:28:68:df:55:
                    6a:2e:b7:b7:b6:fd:ce:b2:80:3b:01:f5:96:6b:99:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1E:18:01:5D:B9:7A:96:FA:44:6D:6F:FE:CE:11:50:A8:02:E9:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/36db2a9dc7f54f37a110e0c2fb87e02babea4634.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.148.0/22
                IPv6:
                  2806:206::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28398

    Signature Algorithm: sha256WithRSAEncryption
         83:61:78:40:2e:00:d3:6a:87:06:65:82:28:bb:46:7f:f6:28:
         f6:f2:7b:11:1e:6e:2b:73:bf:a8:aa:2f:62:bb:a3:48:48:62:
         09:09:90:e5:07:6a:ec:de:2e:3a:ba:a9:53:ab:05:09:60:3e:
         5c:97:4b:1a:9e:92:e1:97:28:88:63:b8:f2:0d:f4:1b:da:91:
         36:c0:50:8e:0f:e6:40:bd:ff:04:35:83:c8:58:ec:fb:96:f2:
         b8:51:ce:0a:b4:51:b0:ed:44:4e:c8:7a:2e:c5:3a:03:76:c5:
         84:91:57:a2:46:ca:08:51:51:5b:83:7b:08:f2:6f:77:97:81:
         a9:91:d6:ac:f1:16:6a:9e:e8:60:55:b6:b5:ad:e5:c8:c6:9c:
         14:2c:4f:00:d5:08:72:48:56:99:1e:cb:d0:b5:f8:60:d6:0a:
         1f:d5:eb:21:5c:45:e4:ac:c6:2e:09:a9:e8:c9:c2:70:1d:ef:
         bd:35:df:81:a9:7a:f9:16:50:51:b1:c2:f3:74:2d:90:70:b6:
         72:e2:aa:b3:11:02:dd:3f:ac:93:7b:26:79:42:01:04:ed:ba:
         6a:f8:0e:2e:53:62:8f:a0:1b:b8:d1:6a:4e:6b:b9:3a:b0:a9:
         64:ef:c7:3b:cf:2b:9a:c8:8d:78:1e:a4:9c:cf:1d:0d:2f:d9:
         93:f2:05:d5
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAN3iqTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQxMTE4MTYyOVoXDTI0MDMwNzE4MDE1
OFowMzExMC8GA1UEAxMoMzZkYjJhOWRjN2Y1NGYzN2ExMTBlMGMyZmI4N2UwMmJh
YmVhNDYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIxMzMKPAMC+
9VbXrrFT9gw78un22/SW2KIMCc/OPy7YeUDreC/iIlVFX5PdkfzzsumqpqYt7xB4
xaxdLNVgE/zW/061Q1TADgz7UaxRe/wjvTzvozfVkcLenxdv4Vsf1QjciWvwPP6f
gUaGgOa54386BMzPIRrlPN5Iy6uD0Ai61CauSgCWNjAT1NvrbvguEUBfq/Rlhk3b
dQA9gH5NrVoXAVTyba/MF8C886MgiKVZMyTgSZATroO/PkWjKEhRWvQvfD6EAh2R
cOXt1mMgsZgzuuWjV16fqLTqVFOo4STiBoP7g2avzRLizA4oaN9Vai63t7b9zrKA
OwH1lmuZbq8CAwEAAaOCAwgwggMEMB0GA1UdDgQWBBStHhgBXbl6lvpEbW/+zhFQ
qALpSDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OTNmZThkYy05Mzgx
LTRiNjUtOTI0Yy1lMzdkN2ZjODQ3YWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkzZmU4ZGMtOTM4MS00
YjY1LTkyNGMtZTM3ZDdmYzg0N2FkLzM2ZGIyYTlkYzdmNTRmMzdhMTEwZTBjMmZi
ODdlMDJiYWJlYTQ2MzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAopjlDANBAIAAjAHAwUAKAYCBjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJu7jANBgkqhkiG9w0BAQsFAAOCAQEAg2F4
QC4A02qHBmWCKLtGf/Yo9vJ7ER5uK3O/qKovYrujSEhiCQmQ5Qdq7N4uOrqpU6sF
CWA+XJdLGp6S4ZcoiGO48g30G9qRNsBQjg/mQL3/BDWDyFjs+5byuFHOCrRRsO1E
Tsh6LsU6A3bFhJFXokbKCFFRW4N7CPJvd5eBqZHWrPEWap7oYFW2ta3lyMacFCxP
ANUIckhWmR7L0LX4YNYKH9XrIVxF5KzGLgmp6MnCcB3vvTXfgal6+RZQUbHC83Qt
kHC2cuKqsxEC3T+sk3smeUIBBO26avgOLlNij6AbuNFqTmu5OrCpZO/HO88rmsiN
eB6knM8dDS/Zk/IF1Q==
-----END CERTIFICATE-----