Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer
File:                     385854f9fee954935903b58b4043860f6a590865.cer (raw, json)
Hash identifier:          jhRsjEvGb5gxwM6wzY58NoyE5l/7MWu14rxZPSgBByg=
Subject key identifier:   4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2E9A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/385854f9fee954935903b58b4043860f6a590865.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Nov 2021 21:35:06 +0000
Certificate not after:    Tue 30 Apr 2024 02:01:46 +0000
Subordinate resources:    IP: 201.150.116.0/22
                          IP: 2806:3bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14870948 (0xe2e9a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 21:35:06 2021 GMT
            Not After : Apr 30 02:01:46 2024 GMT
        Subject: CN=385854f9fee954935903b58b4043860f6a590865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:cc:4d:e6:41:8a:a9:e0:bd:fc:29:d9:ed:
                    6a:67:76:5f:a5:de:f8:b2:b4:f0:8f:c7:35:76:a6:
                    fa:36:77:f3:da:ae:d7:da:fc:1f:3c:20:f9:ac:80:
                    22:7d:92:3f:b8:56:e9:29:51:ac:47:01:69:ed:83:
                    dc:7e:e0:78:3a:02:f3:21:88:8d:8b:03:f5:d9:0b:
                    c4:7f:32:09:cf:07:1f:ef:b5:ad:ec:cb:35:80:33:
                    1d:90:b4:36:6c:8e:4d:17:1f:33:22:1b:55:f2:0d:
                    dd:97:68:cf:bf:b1:fb:84:55:e1:3d:28:ab:eb:70:
                    d1:f6:f9:93:63:10:19:be:56:a0:71:40:17:59:5d:
                    59:3a:10:11:ec:6c:41:8a:14:d0:0f:0a:1d:91:fe:
                    25:3c:db:ad:80:f3:35:6f:e9:0a:ea:77:70:20:0e:
                    4e:b6:28:57:f0:e3:57:5d:d3:a6:1f:9f:28:84:52:
                    3e:a1:f6:69:d6:60:95:82:1a:51:da:a7:fb:95:ef:
                    b4:b1:c2:d1:bb:44:1c:04:f4:8c:83:c6:08:71:06:
                    02:f2:46:18:9f:b0:3e:38:66:1e:c8:71:21:17:40:
                    ee:c7:92:f7:f4:b0:77:57:cb:60:89:2f:4f:d1:0a:
                    86:b6:59:93:4a:72:b7:e4:e4:6d:bc:4e:c2:21:2f:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/385854f9fee954935903b58b4043860f6a590865.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.116.0/22
                IPv6:
                  2806:3bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:a5:0f:99:26:dc:3e:5e:db:f5:43:dd:45:4d:17:53:ab:aa:
         3f:d1:41:fa:89:04:7a:fe:a3:4a:8b:7f:af:1c:12:c2:a2:2d:
         d9:d6:cb:2a:75:28:62:46:29:1f:db:60:c9:bd:7e:47:0d:ed:
         33:b7:a3:05:09:1c:f1:55:bf:05:ce:ed:08:52:da:89:d7:b8:
         8a:80:60:67:01:2c:65:32:8f:b0:7d:f7:3c:a7:83:b9:10:41:
         98:e5:f1:09:e9:ba:71:de:22:40:67:86:e7:87:42:9d:4b:34:
         35:4f:17:89:f1:a5:aa:c4:93:11:35:4e:85:a1:c4:f8:a2:7d:
         6a:e5:6f:50:f0:2f:74:3c:95:ca:48:d6:8c:3c:6f:3f:34:2c:
         ee:b0:01:53:ec:ff:41:e3:a6:80:b4:bb:2b:c8:ca:c5:83:c6:
         58:3b:bb:98:66:5f:f5:45:c4:62:99:6d:1e:bf:7b:50:5b:66:
         cc:0e:a6:18:43:19:78:2b:df:3c:74:25:7c:d9:ad:98:45:c1:
         ca:ea:bc:e5:b9:b1:ce:aa:c6:64:13:78:8b:2c:67:c9:18:0c:
         c6:fe:e6:00:49:a2:2e:5c:4d:87:a0:b6:58:96:ef:e7:97:34:
         6c:53:96:c0:46:3f:28:b6:74:de:88:32:04:cc:43:29:6c:a8:
         3b:47:c5:0c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOLppDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTEwNjIxMzUwNloXDTI0MDQzMDAyMDE0
NlowMzExMC8GA1UEAxMoMzg1ODU0ZjlmZWU5NTQ5MzU5MDNiNThiNDA0Mzg2MGY2
YTU5MDg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKnvzE3mQYqp
4L38Kdntamd2X6Xe+LK08I/HNXam+jZ389qu19r8Hzwg+ayAIn2SP7hW6SlRrEcB
ae2D3H7geDoC8yGIjYsD9dkLxH8yCc8HH++1rezLNYAzHZC0NmyOTRcfMyIbVfIN
3Zdoz7+x+4RV4T0oq+tw0fb5k2MQGb5WoHFAF1ldWToQEexsQYoU0A8KHZH+JTzb
rYDzNW/pCup3cCAOTrYoV/DjV13Tph+fKIRSPqH2adZglYIaUdqn+5XvtLHC0btE
HAT0jIPGCHEGAvJGGJ+wPjhmHshxIRdA7seS9/Swd1fLYIkvT9EKhrZZk0pyt+Tk
bbxOwiEvSPcCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRLQk3VCuGovMrUXAMTB6bf
h/M7bTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMDQzNGRkYy0wYjRl
LTQ2NTctYTg2Yy1lM2Q5NWM3NDk3MTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDA0MzRkZGMtMGI0ZS00
NjU3LWE4NmMtZTNkOTVjNzQ5NzE5LzM4NTg1NGY5ZmVlOTU0OTM1OTAzYjU4YjQw
NDM4NjBmNmE1OTA4NjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsmWdDANBAIAAjAHAwUAKAYDvDAN
BgkqhkiG9w0BAQsFAAOCAQEAq6UPmSbcPl7b9UPdRU0XU6uqP9FB+okEev6jSot/
rxwSwqIt2dbLKnUoYkYpH9tgyb1+Rw3tM7ejBQkc8VW/Bc7tCFLaide4ioBgZwEs
ZTKPsH33PKeDuRBBmOXxCem6cd4iQGeG54dCnUs0NU8XifGlqsSTETVOhaHE+KJ9
auVvUPAvdDyVykjWjDxvPzQs7rABU+z/QeOmgLS7K8jKxYPGWDu7mGZf9UXEYplt
Hr97UFtmzA6mGEMZeCvfPHQlfNmtmEXByuq85bmxzqrGZBN4iyxnyRgMxv7mAEmi
LlxNh6C2WJbv55c0bFOWwEY/KLZ03ogyBMxDKWyoO0fFDA==
-----END CERTIFICATE-----