Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer
File:                     3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer (raw, json)
Hash identifier:          +pPYO5H53DeIeBIoTuO/Yz4m8QKuUgmqcTw4bhfY2GU=
Subject key identifier:   85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6C322
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Nov 2022 12:57:17 +0000
Certificate not after:    Wed 26 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27994
                          IP: 200.59.176.0/21
                          IP: 2803:260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14074658 (0xd6c322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 12:57:17 2022 GMT
            Not After : Jun 26 15:00:00 2024 GMT
        Subject: CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fc:fa:a7:b7:b7:9b:3a:a1:30:fb:63:78:fd:
                    e2:97:c0:a7:b5:ff:82:00:2f:18:c9:ec:a6:6c:c9:
                    29:0b:78:ca:34:a2:bc:80:e0:e3:ad:62:1b:82:c5:
                    cb:5d:d1:0f:77:a2:5a:ec:89:51:37:29:0a:9b:75:
                    94:b6:fe:00:43:b2:9b:ac:72:5a:47:fc:78:66:28:
                    65:1d:6e:db:29:9f:d0:46:f4:20:05:0b:ba:96:35:
                    e2:d6:6b:78:d3:31:b8:ef:85:6e:28:4f:80:76:f1:
                    2a:bc:3e:de:9c:80:95:db:f5:5a:a4:b4:5f:f5:e0:
                    73:16:32:f5:2f:07:1d:97:46:63:a1:7a:ca:9a:3a:
                    81:82:8d:11:fc:0c:48:7b:da:1e:d1:17:d9:8a:2f:
                    38:56:78:79:7d:45:66:50:fa:41:a5:07:3d:43:04:
                    2e:6e:f4:8c:29:25:37:31:d6:8a:42:b0:6b:b7:5b:
                    3c:07:0b:fc:38:bf:a4:00:95:27:aa:15:62:a4:f0:
                    81:c0:6c:f6:09:ff:db:33:27:ec:e9:31:9c:9d:3a:
                    16:99:c1:50:58:8a:dc:1b:26:b7:77:48:d3:bb:24:
                    1c:83:c0:df:06:60:c8:33:f4:fc:83:58:4a:97:c5:
                    c3:d0:ad:2f:05:c9:af:79:d7:b9:52:29:f3:6b:e8:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.176.0/21
                IPv6:
                  2803:260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27994

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:3e:f3:55:e2:5f:b4:2f:85:34:61:af:2a:b9:c5:60:fa:
         cb:17:84:ee:f1:68:f2:6d:0d:4d:a6:20:57:5b:31:91:4b:42:
         d6:5f:1d:d0:50:f1:df:b7:0d:99:13:4a:d8:07:94:69:40:89:
         bd:f5:18:28:b2:ff:9f:34:e1:a9:12:c7:ea:bd:15:46:2f:ff:
         fe:21:c7:41:7f:2f:04:11:0a:72:9a:b6:dc:73:46:8c:1c:d8:
         33:49:67:54:ef:74:41:a5:f5:0c:dd:77:18:77:8f:e7:60:ad:
         64:6b:a8:a3:f7:4e:0a:7f:5d:86:be:67:db:8b:d6:91:7a:3e:
         53:04:aa:e8:11:fc:98:35:50:8f:82:2e:9f:09:59:20:4f:fe:
         99:09:87:2d:11:0a:65:9a:a0:9d:9a:7a:a4:39:27:da:b0:29:
         42:75:0c:8e:69:1c:9d:bb:1f:bd:32:09:b3:36:e1:dd:0f:4b:
         c0:a2:80:4a:90:93:a2:3f:ca:93:13:e5:7d:4c:42:15:2b:1e:
         19:ac:e7:a3:2a:e7:dc:fd:0e:b4:a8:c5:2f:ff:7d:a5:94:27:
         1a:f6:35:5b:a7:18:56:e8:23:b9:6a:e7:46:8a:da:3c:85:0a:
         24:2f:f9:09:bb:07:55:b0:61:7a:fa:31:c4:dc:3f:78:d7:a9:
         c8:57:50:8b
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEANbDIjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTEwNzEyNTcxN1oXDTI0MDYyNjE1MDAw
MFowMzExMC8GA1UEAxMoM2E5YjZiZjBlYTlmMGQ0NzM0MWI1NGEyMjE0YWFiYmNm
NzRkNDI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIn8+qe3t5s6
oTD7Y3j94pfAp7X/ggAvGMnspmzJKQt4yjSivIDg461iG4LFy13RD3eiWuyJUTcp
Cpt1lLb+AEOym6xyWkf8eGYoZR1u2ymf0Eb0IAULupY14tZreNMxuO+FbihPgHbx
Krw+3pyAldv1WqS0X/XgcxYy9S8HHZdGY6F6ypo6gYKNEfwMSHvaHtEX2YovOFZ4
eX1FZlD6QaUHPUMELm70jCklNzHWikKwa7dbPAcL/Di/pACVJ6oVYqTwgcBs9gn/
2zMn7OkxnJ06FpnBUFiK3Bsmt3dI07skHIPA3wZgyDP0/INYSpfFw9CtLwXJr3nX
uVIp82voft0CAwEAAaOCAwgwggMEMB0GA1UdDgQWBBSFKpq+Y/pos0Thzw0jW9Xz
TcRlITAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NjlkNmZhYy1jNTRk
LTQxNmEtODEwZi1lNDUwMDVhOTA5MDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTY5ZDZmYWMtYzU0ZC00
MTZhLTgxMGYtZTQ1MDA1YTkwOTAwLzNhOWI2YmYwZWE5ZjBkNDczNDFiNTRhMjIx
NGFhYmJjZjc0ZDQyNTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA8g7sDANBAIAAjAHAwUAKAMCYDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJtWjANBgkqhkiG9w0BAQsFAAOCAQEAE7w+
81XiX7QvhTRhryq5xWD6yxeE7vFo8m0NTaYgV1sxkUtC1l8d0FDx37cNmRNK2AeU
aUCJvfUYKLL/nzThqRLH6r0VRi///iHHQX8vBBEKcpq23HNGjBzYM0lnVO90QaX1
DN13GHeP52CtZGuoo/dOCn9dhr5n24vWkXo+UwSq6BH8mDVQj4IunwlZIE/+mQmH
LREKZZqgnZp6pDkn2rApQnUMjmkcnbsfvTIJszbh3Q9LwKKASpCToj/KkxPlfUxC
FSseGaznoyrn3P0OtKjFL/99pZQnGvY1W6cYVugjuWrnRoraPIUKJC/5CbsHVbBh
evoxxNw/eNepyFdQiw==
-----END CERTIFICATE-----