Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
File:                     3ead659559971c8e6c9735bc245323c57109fb64.cer (raw, json)
Hash identifier:          NjF/4anVpNyJPK3Dae9j1BW5bI2+/YIsqLqBLjEyGUg=
Subject key identifier:   FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CDCAD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 14:12:35 +0000
Certificate not after:    Sun 26 Nov 2023 15:15:12 +0000
Subordinate resources:    IP: 2801:1c8::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13486809 (0xcdcad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 22 14:12:35 2022 GMT
            Not After : Nov 26 15:15:12 2023 GMT
        Subject: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:f9:29:b7:16:a7:0d:46:70:14:3b:2f:60:
                    4c:32:5a:80:02:23:da:7e:ad:eb:6b:ac:05:4c:7c:
                    91:18:b6:96:bd:a2:47:f8:51:3c:4c:6a:01:9d:4b:
                    0d:32:5e:c6:64:df:27:a4:15:cb:34:4b:5b:06:85:
                    1e:94:30:15:fc:cd:0b:9d:19:1a:72:26:d8:d1:94:
                    8a:ff:c6:3a:48:69:0d:df:c9:98:13:4c:12:3e:6f:
                    d0:6e:5c:b3:0c:38:26:26:97:19:99:3e:b1:02:05:
                    f4:a3:51:0a:68:14:23:d5:ac:9f:c3:ed:df:11:84:
                    bd:cf:88:83:81:1c:64:3e:da:da:5c:9b:62:0a:94:
                    24:1d:fc:50:1e:12:06:5c:56:e4:51:0b:b0:59:48:
                    da:11:d1:1e:6d:34:79:48:a1:56:5a:aa:0e:97:a1:
                    ef:f2:7c:f7:a7:f2:f7:b5:ce:16:df:eb:be:25:07:
                    71:8b:53:61:72:76:70:d0:a5:4a:f5:ad:73:f8:d8:
                    c1:e5:d9:fb:fa:52:0a:49:1e:63:8f:9d:c9:e8:29:
                    f6:77:d1:7f:d7:2b:64:90:7a:52:c3:69:ae:c7:2a:
                    9a:63:22:fc:36:cc:bb:12:ff:54:fb:4f:3e:10:e7:
                    9c:ab:4c:ac:b5:67:10:aa:db:62:a8:93:5c:0d:54:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:81:48:e5:cd:da:26:44:7f:8a:9d:1e:b5:83:dd:1d:e1:
         75:79:e6:0a:ab:bd:ee:37:91:1c:83:b9:ca:b4:33:76:c8:9a:
         15:07:ed:31:c8:10:47:b1:75:4f:66:9f:2b:a6:0d:c8:75:43:
         e1:42:df:f7:e1:6d:84:2a:bb:9f:45:ac:d5:5b:d5:18:1e:b4:
         52:91:60:fa:1b:72:b0:49:ab:7d:68:bb:03:78:e2:9c:65:d9:
         fe:a2:33:4b:fb:af:ac:cd:22:b7:ab:09:b1:db:42:64:24:9d:
         a3:62:01:0d:2b:a6:95:02:41:36:b8:03:37:fa:5b:8f:a9:14:
         da:3e:74:9e:24:ac:82:72:1f:25:b1:7e:ae:24:0e:de:ed:0d:
         5f:85:c8:da:7d:5f:3e:6a:9b:df:29:e5:35:5b:a9:c3:05:2d:
         e7:ad:8e:b0:74:81:2e:73:e5:34:ba:db:c6:2a:0f:a5:e6:d8:
         cb:ea:53:79:7e:68:f9:f9:96:da:af:b8:eb:10:c2:4d:06:ff:
         99:8b:5f:43:22:b4:7a:ea:3b:22:16:5f:7b:9f:29:82:cc:48:
         63:28:88:d0:3a:66:32:ef:ec:d9:bc:95:48:7d:25:ab:d8:db:
         26:0d:01:17:19:11:e2:ca:33:ee:a2:a0:89:6e:d4:9a:a1:e6:
         ec:e0:af:18
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIEAM3K2TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDcyMjE0MTIzNVoXDTIzMTEyNjE1MTUx
MlowMzExMC8GA1UEAxMoM2VhZDY1OTU1OTk3MWM4ZTZjOTczNWJjMjQ1MzIzYzU3
MTA5ZmI2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3h+Sm3FqcN
RnAUOy9gTDJagAIj2n6t62usBUx8kRi2lr2iR/hRPExqAZ1LDTJexmTfJ6QVyzRL
WwaFHpQwFfzNC50ZGnIm2NGUiv/GOkhpDd/JmBNMEj5v0G5csww4JiaXGZk+sQIF
9KNRCmgUI9Wsn8Pt3xGEvc+Ig4EcZD7a2lybYgqUJB38UB4SBlxW5FELsFlI2hHR
Hm00eUihVlqqDpeh7/J896fy97XOFt/rviUHcYtTYXJ2cNClSvWtc/jYweXZ+/pS
CkkeY4+dyegp9nfRf9crZJB6UsNprscqmmMi/DbMuxL/VPtPPhDnnKtMrLVnEKrb
YqiTXA1UR6UCAwEAAaOCAuAwggLcMB0GA1UdDgQWBBT/VeCiExtZqPpvTCbiTFB4
kPjW2jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jM2MyOTllNy1hNjZl
LTRkM2YtYjVkNi1hNmMxYmNjOGMyMmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzNjMjk5ZTctYTY2ZS00
ZDNmLWI1ZDYtYTZjMWJjYzhjMjJmLzNlYWQ2NTk1NTk5NzFjOGU2Yzk3MzViYzI0
NTMyM2M1NzEwOWZiNjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgBAcgAMA0GCSqGSIb3DQEBCwUA
A4IBAQCnEoFI5c3aJkR/ip0etYPdHeF1eeYKq73uN5Ecg7nKtDN2yJoVB+0xyBBH
sXVPZp8rpg3IdUPhQt/34W2EKrufRazVW9UYHrRSkWD6G3KwSat9aLsDeOKcZdn+
ojNL+6+szSK3qwmx20JkJJ2jYgENK6aVAkE2uAM3+luPqRTaPnSeJKyCch8lsX6u
JA7e7Q1fhcjafV8+apvfKeU1W6nDBS3nrY6wdIEuc+U0utvGKg+l5tjL6lN5fmj5
+Zbar7jrEMJNBv+Zi19DIrR66jsiFl97nymCzEhjKIjQOmYy7+zZvJVIfSWr2Nsm
DQEXGRHiyjPuoqCJbtSaoebs4K8Y
-----END CERTIFICATE-----