Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.cer
File:                     428f4bd526001b3f547ef3eecec9c54ff3efb3fb.cer (raw, json)
Hash identifier:          iC+DXxsdWzdwDvqDoAu6rYPygBqfSiz4J9UYZ3oWTbk=
Subject key identifier:   09:FD:6B:2D:7A:07:AC:0F:83:31:08:2F:26:FB:BE:AD:4E:BD:30:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7F163
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jul 2021 16:10:07 +0000
Certificate not after:    Sat 01 Jun 2024 17:26:49 +0000
Subordinate resources:    AS: 265834
                          IP: 164.163.120.0/22
                          IP: 2803:afc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15200611 (0xe7f163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 16:10:07 2021 GMT
            Not After : Jun  1 17:26:49 2024 GMT
        Subject: CN=428f4bd526001b3f547ef3eecec9c54ff3efb3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:5a:7c:4a:ef:4a:56:69:b5:e9:c6:7a:59:
                    8c:41:b6:e5:eb:9e:59:74:c1:57:07:41:81:92:01:
                    6c:38:b7:b0:cb:ca:e4:82:64:c2:38:09:25:07:dd:
                    19:04:84:5b:3f:b1:be:c4:e8:17:0e:43:3f:00:8d:
                    86:00:1d:3d:a4:0d:8f:49:ff:58:82:7d:a8:f4:b2:
                    e5:8f:b4:74:f0:02:2a:2f:75:89:97:29:26:ea:6d:
                    50:b2:44:6b:0d:b9:36:0f:6e:aa:30:f4:c2:12:8d:
                    54:b3:19:18:50:43:49:46:b0:68:c1:bf:ea:9f:82:
                    28:af:57:3c:ac:9f:fc:17:84:8f:d1:55:50:21:c2:
                    c8:6b:9a:8a:97:88:37:60:ee:61:51:79:3a:c1:97:
                    68:56:e8:5c:40:91:86:9e:e5:1f:4e:4a:e4:d6:ae:
                    f9:ce:24:d4:fa:33:e1:07:6b:37:86:fd:31:28:a7:
                    12:7c:05:49:39:42:d8:43:3d:24:2f:d7:1f:7b:36:
                    92:aa:41:63:63:47:c8:24:bf:c9:83:6a:93:e7:a3:
                    7a:55:c2:38:18:93:37:5f:48:cd:ea:71:ab:fd:48:
                    94:b7:73:02:bc:b4:f1:80:cc:66:34:bd:c0:53:14:
                    5a:9d:5f:6c:d8:d0:fa:6d:4f:87:71:45:33:f8:2b:
                    51:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:6B:2D:7A:07:AC:0F:83:31:08:2F:26:FB:BE:AD:4E:BD:30:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.120.0/22
                IPv6:
                  2803:afc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265834

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:7e:2d:39:a3:94:4c:e1:37:c2:1b:52:f4:36:ce:ff:de:
         b5:f3:18:e6:0c:c8:d8:cc:df:15:fd:7f:75:d0:69:dd:27:47:
         f8:18:57:3a:21:9a:36:17:61:20:34:71:81:c9:13:c8:c5:a5:
         cd:49:d9:e5:cf:55:20:e9:d1:fe:bb:5d:21:5d:c7:43:e6:f0:
         39:37:31:50:49:60:7e:0f:51:64:5b:07:3a:56:a6:43:56:ef:
         69:4e:a2:80:c3:a3:c0:93:15:a2:f4:78:13:8e:fd:fa:5c:cf:
         a5:7d:4c:4c:49:b5:80:fe:e5:43:0d:88:fb:25:c1:aa:6f:09:
         28:a3:79:ef:ec:16:ef:c0:27:ab:9d:f3:3f:a8:86:65:a8:d0:
         43:ca:c3:61:30:25:a4:00:5b:96:ef:9c:6b:6f:a6:97:58:7a:
         2d:33:21:f8:d4:50:84:01:80:e2:80:24:79:a0:35:7d:ed:10:
         f8:7e:1a:f8:32:15:bd:5e:08:40:cb:15:95:02:4f:77:31:5b:
         e7:a2:a7:75:05:20:71:9e:b6:a2:0a:b0:44:0c:57:da:be:43:
         d1:3b:75:62:36:c7:ce:eb:5a:2f:99:cd:23:79:b7:1f:d2:75:
         07:8d:bc:d3:a9:ed:7e:c7:a7:b7:a7:ab:71:8f:cd:05:57:e7:
         5e:1a:5c:10
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOfxYzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDcwMTE2MTAwN1oXDTI0MDYwMTE3MjY0
OVowMzExMC8GA1UEAxMoNDI4ZjRiZDUyNjAwMWIzZjU0N2VmM2VlY2VjOWM1NGZm
M2VmYjNmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGNWnxK70pW
abXpxnpZjEG25eueWXTBVwdBgZIBbDi3sMvK5IJkwjgJJQfdGQSEWz+xvsToFw5D
PwCNhgAdPaQNj0n/WIJ9qPSy5Y+0dPACKi91iZcpJuptULJEaw25Ng9uqjD0whKN
VLMZGFBDSUawaMG/6p+CKK9XPKyf/BeEj9FVUCHCyGuaipeIN2DuYVF5OsGXaFbo
XECRhp7lH05K5Nau+c4k1Poz4QdrN4b9MSinEnwFSTlC2EM9JC/XH3s2kqpBY2NH
yCS/yYNqk+ejelXCOBiTN19Izepxq/1IlLdzAry08YDMZjS9wFMUWp1fbNjQ+m1P
h3FFM/grUcECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQJ/WstegesD4MxCC8m+76t
Tr0wNjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81Y2NhNjM1OS0xZWI0
LTRjNzgtYmQxYy04NzM5MmQ0OGU3YjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWNjYTYzNTktMWViNC00
Yzc4LWJkMWMtODczOTJkNDhlN2IyLzQyOGY0YmQ1MjYwMDFiM2Y1NDdlZjNlZWNl
YzljNTRmZjNlZmIzZmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqSjeDANBAIAAjAHAwUAKAOvwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDmowDQYJKoZIhvcNAQELBQADggEBAIrS
fi05o5RM4TfCG1L0Ns7/3rXzGOYMyNjM3xX9f3XQad0nR/gYVzohmjYXYSA0cYHJ
E8jFpc1J2eXPVSDp0f67XSFdx0Pm8Dk3MVBJYH4PUWRbBzpWpkNW72lOooDDo8CT
FaL0eBOO/fpcz6V9TExJtYD+5UMNiPslwapvCSijee/sFu/AJ6ud8z+ohmWo0EPK
w2EwJaQAW5bvnGtvppdYei0zIfjUUIQBgOKAJHmgNX3tEPh+GvgyFb1eCEDLFZUC
T3cxW+eip3UFIHGetqIKsEQMV9q+Q9E7dWI2x87rWi+ZzSN5tx/SdQeNvNOp7X7H
p7enq3GPzQVX514aXBA=
-----END CERTIFICATE-----