Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.cer
File:                     4fb1e072b1b2c5dc6972e25a3b19063dc5466874.cer (raw, json)
Hash identifier:          uuuXoneQOhMT1Y681/0g+Hjy3MPKYw3GdkQsXERi5hg=
Subject key identifier:   F9:49:7C:85:E7:A0:DD:7C:CA:20:F2:66:62:19:B5:99:42:D3:B9:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CC4CE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Jul 2022 22:47:49 +0000
Certificate not after:    Fri 19 Jan 2024 18:12:52 +0000
Subordinate resources:    IP: 45.232.32.0/22
                          IP: 2803:4720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13389027 (0xcc4ce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  5 22:47:49 2022 GMT
            Not After : Jan 19 18:12:52 2024 GMT
        Subject: CN=4fb1e072b1b2c5dc6972e25a3b19063dc5466874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:b7:1b:d7:1b:b9:24:f0:71:7e:e9:72:00:
                    3c:30:12:8f:6b:5b:04:2f:38:3b:f3:d3:cb:58:6a:
                    33:cd:61:28:56:74:cf:92:81:28:9c:dd:de:6e:9e:
                    db:1f:28:a1:a8:3f:6b:74:73:a6:3a:79:b9:3c:77:
                    49:a2:6e:cb:20:9f:ae:59:e9:d9:2a:6d:3c:f7:c5:
                    73:b8:ac:b9:f6:ed:b6:17:40:7d:56:a0:b1:5d:f9:
                    5a:f2:aa:0f:01:f0:bf:8e:e9:f0:44:db:aa:98:fa:
                    3f:c5:0a:51:86:9d:8a:42:0d:56:ce:52:7b:03:51:
                    b4:26:7b:ee:3a:ed:c1:15:35:65:23:00:56:5a:ed:
                    33:05:9a:83:82:df:4b:d4:dd:01:42:7c:00:15:bc:
                    1b:a4:50:c5:22:88:81:92:93:b3:08:f0:f6:0e:61:
                    dc:a1:73:eb:ae:02:b4:32:34:4a:f4:8a:a7:02:e0:
                    d3:4d:6c:c0:05:f8:74:68:3c:61:0b:d8:df:53:12:
                    75:de:76:db:d9:ff:51:9f:ae:91:69:97:81:de:86:
                    b2:33:2c:d0:d9:ed:0b:b8:d0:e2:3a:ff:09:17:11:
                    10:ba:75:fb:11:c3:4a:ba:e2:eb:5e:64:51:2c:b2:
                    96:f5:0d:f9:27:82:00:14:5a:f2:6b:3f:35:8b:14:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:7C:85:E7:A0:DD:7C:CA:20:F2:66:62:19:B5:99:42:D3:B9:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.32.0/22
                IPv6:
                  2803:4720::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:30:92:25:55:04:5a:03:34:b4:71:77:5a:b4:5a:2c:62:94:
         a7:fe:b7:2c:05:4c:a1:8d:59:04:df:d4:c5:a8:c6:a6:6e:1f:
         15:c9:54:77:8f:ff:fb:4e:57:fa:dc:a4:45:18:7d:e7:42:91:
         9e:55:5e:18:c1:83:fe:4e:fd:4d:7f:85:c1:c5:f3:27:ae:6f:
         42:ce:4a:21:df:3c:d9:a2:f8:42:67:87:57:33:24:d7:38:39:
         f8:6f:44:73:c4:89:76:b6:65:d1:60:9e:55:ca:b6:c6:36:41:
         7d:e6:94:db:ac:0e:3a:ce:9d:b8:12:f1:02:11:44:18:63:95:
         4d:a5:f7:d4:94:3d:95:58:3a:9f:90:46:ba:24:64:0e:e0:4e:
         75:5c:14:af:a5:4e:51:fb:1c:0c:8b:fc:75:92:e3:79:40:35:
         17:26:bb:27:9c:11:03:85:a0:e3:05:c0:1e:43:fb:56:f1:13:
         40:0c:7b:96:e6:f9:e0:9a:0e:f5:cb:af:b7:c9:09:3f:80:5a:
         5c:b4:52:12:6c:dc:d8:13:60:6c:d2:ee:b1:c9:9b:af:aa:2e:
         dd:90:20:de:3b:b7:ea:40:89:ff:07:25:53:c1:81:ea:d5:fb:
         54:74:6f:1c:92:b7:84:af:97:8b:51:47:c1:f9:51:97:eb:fa:
         6e:88:55:b0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAMxM4zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDcwNTIyNDc0OVoXDTI0MDExOTE4MTI1
MlowMzExMC8GA1UEAxMoNGZiMWUwNzJiMWIyYzVkYzY5NzJlMjVhM2IxOTA2M2Rj
NTQ2Njg3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKDjtxvXG7kk
8HF+6XIAPDASj2tbBC84O/PTy1hqM81hKFZ0z5KBKJzd3m6e2x8ooag/a3Rzpjp5
uTx3SaJuyyCfrlnp2SptPPfFc7isufbtthdAfVagsV35WvKqDwHwv47p8ETbqpj6
P8UKUYadikINVs5SewNRtCZ77jrtwRU1ZSMAVlrtMwWag4LfS9TdAUJ8ABW8G6RQ
xSKIgZKTswjw9g5h3KFz664CtDI0SvSKpwLg001swAX4dGg8YQvY31MSdd5229n/
UZ+ukWmXgd6GsjMs0NntC7jQ4jr/CRcRELp1+xHDSrri615kUSyylvUN+SeCABRa
8ms/NYsUKZ8CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBT5SXyF56DdfMog8mZiGbWZ
QtO5uDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84M2ZkNzlkMi04YTk1
LTRlMjMtYjIwYS0wODRkNDc0MzhlOWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODNmZDc5ZDItOGE5NS00
ZTIzLWIyMGEtMDg0ZDQ3NDM4ZTliLzRmYjFlMDcyYjFiMmM1ZGM2OTcyZTI1YTNi
MTkwNjNkYzU0NjY4NzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oIDANBAIAAjAHAwUAKANHIDAN
BgkqhkiG9w0BAQsFAAOCAQEArzCSJVUEWgM0tHF3WrRaLGKUp/63LAVMoY1ZBN/U
xajGpm4fFclUd4//+05X+tykRRh950KRnlVeGMGD/k79TX+FwcXzJ65vQs5KId88
2aL4QmeHVzMk1zg5+G9Ec8SJdrZl0WCeVcq2xjZBfeaU26wOOs6duBLxAhFEGGOV
TaX31JQ9lVg6n5BGuiRkDuBOdVwUr6VOUfscDIv8dZLjeUA1Fya7J5wRA4Wg4wXA
HkP7VvETQAx7lub54JoO9cuvt8kJP4BaXLRSEmzc2BNgbNLuscmbr6ou3ZAg3ju3
6kCJ/wclU8GB6tX7VHRvHJK3hK+Xi1FHwflRl+v6bohVsA==
-----END CERTIFICATE-----