Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41145cf73cb5131f722225203b5434540f5f373f.cer
File:                     41145cf73cb5131f722225203b5434540f5f373f.cer (raw, json)
Hash identifier:          htT4OFw8QkEGkxbGBeQcfncnfwXQy4ambb2FfQ07Z9g=
Subject key identifier:   CB:5A:97:57:85:81:0B:73:F6:99:67:01:A9:CB:B1:85:3D:D8:7A:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F13EE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41145cf73cb5131f722225203b5434540f5f373f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Nov 2020 14:52:48 +0000
Certificate not after:    Sat 10 Aug 2024 17:53:44 +0000
Subordinate resources:    AS: 61496
                          IP: 131.221.0.0/22
                          IP: 2801:18:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15810272 (0xf13ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 24 14:52:48 2020 GMT
            Not After : Aug 10 17:53:44 2024 GMT
        Subject: CN=41145cf73cb5131f722225203b5434540f5f373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:e4:09:9d:2d:15:66:15:d4:23:87:5b:4c:
                    ff:55:fc:7d:50:38:0d:f0:01:51:6d:54:50:dd:5a:
                    17:f9:35:7c:b3:be:07:87:bc:c5:38:ce:e0:17:ed:
                    dc:99:45:dd:ac:05:20:0c:e1:e7:7d:9a:bf:6f:7a:
                    62:36:91:36:99:42:65:7f:52:5e:10:56:0c:95:e7:
                    a6:f2:6b:64:70:7c:48:41:ad:90:a5:d2:a6:56:14:
                    5e:c9:07:a8:38:dc:d7:5e:18:fd:0b:ad:e0:99:24:
                    fb:69:a3:99:6c:5d:f6:89:49:ae:63:bd:4e:38:ed:
                    2b:da:bb:ab:6c:fe:a1:c9:d8:ee:5c:a8:8b:93:1a:
                    81:69:36:e1:d0:5d:96:c9:08:49:31:92:d2:1a:77:
                    b6:f0:08:eb:7f:c1:8b:4b:61:4e:7c:36:e3:82:82:
                    7e:24:88:a6:e1:8c:8f:3b:e9:1a:2f:73:99:5e:cc:
                    96:dd:e5:44:47:e3:d3:e8:82:ba:19:2c:f8:43:e8:
                    00:3a:80:dc:be:bb:a6:a6:33:59:b3:08:fd:e3:35:
                    c7:d6:88:18:8f:e1:2c:53:de:2f:2e:d1:39:db:36:
                    39:8a:4a:6c:12:4c:b0:f5:57:83:ac:bf:a6:84:cb:
                    83:1c:0b:8e:e2:e3:a5:20:d5:79:cc:89:02:ce:24:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5A:97:57:85:81:0B:73:F6:99:67:01:A9:CB:B1:85:3D:D8:7A:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41145cf73cb5131f722225203b5434540f5f373f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.0.0/22
                IPv6:
                  2801:18:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61496

    Signature Algorithm: sha256WithRSAEncryption
         05:f4:59:23:81:6b:4b:51:2e:3a:d5:12:d9:a5:b7:9c:b3:c5:
         e1:a2:4e:d6:6b:56:5d:21:56:79:df:b3:11:88:dd:b7:0c:32:
         78:d6:bb:c3:76:0c:e4:23:2f:f9:82:35:6d:00:34:79:c5:9f:
         71:85:25:e9:67:bc:d8:74:c2:70:42:2d:0a:8a:9d:cd:a7:bf:
         26:27:81:ac:43:c7:a9:3e:d2:37:9f:97:f0:63:6a:d8:ff:68:
         cb:fd:30:05:df:6e:4f:2a:cd:ad:c7:04:d1:a7:04:ad:fc:b9:
         21:47:45:93:9b:49:65:ff:35:43:fb:d0:61:42:d1:9d:5a:a5:
         f1:70:23:2f:5e:b1:bd:f6:b2:81:f2:4e:8e:4b:15:9b:7e:c4:
         87:dc:a2:86:ff:01:37:8c:74:7b:7e:12:69:e5:37:7d:00:eb:
         44:dc:96:fd:0e:e6:f0:e1:06:0d:0b:68:e9:b5:ec:24:c0:0b:
         1f:19:05:0b:36:b8:a8:7f:a5:a1:8f:bf:63:ff:84:6f:0c:65:
         ee:b6:7b:7a:f4:01:5d:30:d2:86:7d:81:6a:bd:45:81:d3:14:
         02:54:09:f1:af:15:6a:3d:bb:6f:80:64:e3:98:ad:13:7a:a9:
         b7:e8:70:ad:41:80:0a:4a:da:df:34:53:0c:70:50:c9:da:c7:
         66:32:33:ec
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAPE+4DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTEyNDE0NTI0OFoXDTI0MDgxMDE3NTM0
NFowMzExMC8GA1UEAxMoNDExNDVjZjczY2I1MTMxZjcyMjIyNTIwM2I1NDM0NTQw
ZjVmMzczZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJBw5AmdLRVm
FdQjh1tM/1X8fVA4DfABUW1UUN1aF/k1fLO+B4e8xTjO4Bft3JlF3awFIAzh532a
v296YjaRNplCZX9SXhBWDJXnpvJrZHB8SEGtkKXSplYUXskHqDjc114Y/Qut4Jkk
+2mjmWxd9olJrmO9TjjtK9q7q2z+ocnY7lyoi5MagWk24dBdlskISTGS0hp3tvAI
63/Bi0thTnw244KCfiSIpuGMjzvpGi9zmV7Mlt3lREfj0+iCuhks+EPoADqA3L67
pqYzWbMI/eM1x9aIGI/hLFPeLy7ROds2OYpKbBJMsPVXg6y/poTLgxwLjuLjpSDV
ecyJAs4kcckCAwEAAaOCAwswggMHMB0GA1UdDgQWBBTLWpdXhYELc/aZZwGpy7GF
Pdh6MzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYWQ4YzQ0ZS0zZmJj
LTQwMjYtOGFhNy0yZjYzMWU0ZGU1Y2IvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmFkOGM0NGUtM2ZiYy00
MDI2LThhYTctMmY2MzFlNGRlNWNiLzQxMTQ1Y2Y3M2NiNTEzMWY3MjIyMjUyMDNi
NTQzNDU0MGY1ZjM3M2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAoPdADAPBAIAAjAJAwcAKAEAGGAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwODANBgkqhkiG9w0BAQsFAAOCAQEA
BfRZI4FrS1EuOtUS2aW3nLPF4aJO1mtWXSFWed+zEYjdtwwyeNa7w3YM5CMv+YI1
bQA0ecWfcYUl6We82HTCcEItCoqdzae/JieBrEPHqT7SN5+X8GNq2P9oy/0wBd9u
TyrNrccE0acErfy5IUdFk5tJZf81Q/vQYULRnVql8XAjL16xvfaygfJOjksVm37E
h9yihv8BN4x0e34SaeU3fQDrRNyW/Q7m8OEGDQto6bXsJMALHxkFCza4qH+loY+/
Y/+Ebwxl7rZ7evQBXTDShn2Bar1FgdMUAlQJ8a8Vaj27b4Bk45itE3qpt+hwrUGA
Ckra3zRTDHBQydrHZjIz7A==
-----END CERTIFICATE-----