Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
File:                     374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer (raw, json)
Hash identifier:          a/0LkBoW3zvSxILJfIIxl/9TjYylKXXCbriIbYMYiEs=
Subject key identifier:   61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7A1AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Dec 2020 14:27:32 +0000
Certificate not after:    Wed 07 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 272992
                          IP: 131.221.40.0/22
                          IP: 2803:8b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15180203 (0xe7a1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 16 14:27:32 2020 GMT
            Not After : Aug  7 06:00:00 2024 GMT
        Subject: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:4b:da:c2:fc:cc:55:79:ec:89:79:f3:c4:
                    34:5c:86:aa:62:d9:ba:40:a0:7e:4f:fb:0c:1f:41:
                    ca:7b:11:d9:72:96:fe:23:79:1a:53:2c:56:b4:c6:
                    76:58:c2:de:98:7d:ef:2e:c0:bb:d3:f5:a1:b1:c1:
                    bd:59:16:4a:6b:0f:f5:9c:42:60:4d:dd:b7:cc:0a:
                    cb:79:48:3d:a1:ec:87:d8:43:f3:50:e1:94:b8:2c:
                    da:01:9a:7b:0d:f2:97:a7:87:df:8c:98:f4:6f:83:
                    9c:a9:f1:11:f1:9e:86:04:ce:01:b7:6d:fc:f4:9c:
                    42:ff:f2:38:06:76:f1:34:35:cd:63:93:50:ac:4a:
                    d0:29:bf:f5:95:40:c2:7c:a9:8e:86:0c:75:56:98:
                    cc:9d:36:da:a8:08:5f:df:75:6e:61:b7:32:60:ab:
                    72:84:35:21:a6:20:6c:ed:5c:54:64:37:eb:ea:41:
                    95:f6:c1:99:0f:c8:e5:b0:91:23:e7:a2:3b:3b:0d:
                    05:73:f0:fe:44:70:c2:39:7e:13:13:b8:47:37:c4:
                    b6:18:01:9d:31:f2:36:d6:71:6d:9b:82:b5:2d:26:
                    8c:27:e8:21:4b:91:4d:63:4e:97:eb:8b:cd:32:98:
                    09:51:2b:f3:0b:cd:28:92:a1:ef:f8:f6:6a:d2:8f:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.40.0/22
                IPv6:
                  2803:8b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272992

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:cf:51:1a:1c:4b:d0:79:4d:0f:7e:df:f6:8e:fc:01:b5:
         c3:9e:48:d5:11:95:88:91:a6:dc:dd:f7:9d:83:86:49:cc:f1:
         7f:1a:02:ca:9f:84:d8:01:0b:56:f4:2e:a2:a6:e0:b5:52:30:
         51:cc:79:5e:74:8d:ce:3a:f8:d8:8b:bb:b6:7b:1f:21:3b:61:
         02:98:24:87:09:43:b5:4c:29:20:79:5d:5d:b4:a8:5a:ba:4a:
         4d:7f:d4:6e:08:69:f4:ed:7b:2f:5e:99:20:ee:54:9b:9a:55:
         34:22:5b:4a:2e:b8:b5:9d:1a:bb:bb:f3:50:58:11:73:12:88:
         b5:d9:1f:17:85:b5:fb:e0:42:0e:f8:0b:0e:1a:2e:94:19:e0:
         35:df:15:3c:25:88:f7:88:59:db:7c:c1:f8:49:24:5e:04:d8:
         5a:c9:e7:f0:be:51:2a:c9:c8:80:ec:ea:ec:65:f4:5b:6c:4f:
         c9:21:f7:60:73:18:c4:ef:73:59:9a:42:45:fe:97:97:ae:38:
         be:e8:92:bc:cf:0f:fc:a0:19:90:a6:a2:31:30:e9:55:89:0d:
         aa:77:17:06:ad:ea:17:ce:37:a9:e0:1a:4c:8f:5e:f4:34:a7:
         30:dd:53:3f:af:a4:8b:37:4e:7a:d5:ea:85:b3:ff:38:07:98:
         f7:a9:51:e4
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOehqzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTIxNjE0MjczMloXDTI0MDgwNzA2MDAw
MFowMzExMC8GA1UEAxMoMzc0ZTBjN2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNk
MDQ1OGY2YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKmhS9rC/MxV
eeyJefPENFyGqmLZukCgfk/7DB9BynsR2XKW/iN5GlMsVrTGdljC3ph97y7Au9P1
obHBvVkWSmsP9ZxCYE3dt8wKy3lIPaHsh9hD81DhlLgs2gGaew3yl6eH34yY9G+D
nKnxEfGehgTOAbdt/PScQv/yOAZ28TQ1zWOTUKxK0Cm/9ZVAwnypjoYMdVaYzJ02
2qgIX991bmG3MmCrcoQ1IaYgbO1cVGQ36+pBlfbBmQ/I5bCRI+eiOzsNBXPw/kRw
wjl+ExO4RzfEthgBnTHyNtZxbZuCtS0mjCfoIUuRTWNOl+uLzTKYCVEr8wvNKJKh
7/j2atKPf9sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRh7sb9wswvztzg9yxyx1Qs
kw32xTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wOTg1ZTY2Ny1kYTlm
LTRmMTUtYWNmZi01OWEzNjY2MDM3YmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDk4NWU2NjctZGE5Zi00
ZjE1LWFjZmYtNTlhMzY2NjAzN2JlLzM3NGUwYzdjMTBlM2NhMmU3ZDE5NDVlYWQ2
YTllZTRjZDA0NThmNmMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoPdKDANBAIAAjAHAwUAKAOLgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKmAwDQYJKoZIhvcNAQELBQADggEBAEsY
z1EaHEvQeU0Pft/2jvwBtcOeSNURlYiRptzd952DhknM8X8aAsqfhNgBC1b0LqKm
4LVSMFHMeV50jc46+NiLu7Z7HyE7YQKYJIcJQ7VMKSB5XV20qFq6Sk1/1G4IafTt
ey9emSDuVJuaVTQiW0ouuLWdGru781BYEXMSiLXZHxeFtfvgQg74Cw4aLpQZ4DXf
FTwliPeIWdt8wfhJJF4E2FrJ5/C+USrJyIDs6uxl9FtsT8kh92BzGMTvc1maQkX+
l5euOL7okrzPD/ygGZCmojEw6VWJDap3Fwat6hfON6ngGkyPXvQ0pzDdUz+vpIs3
TnrV6oWz/zgHmPepUeQ=
-----END CERTIFICATE-----