Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.cer
File:                     5c657c326adeece70c1e8bb9038ff79bc5e67ae6.cer (raw, json)
Hash identifier:          O3ncg0WKO4/uUoxfoOqV1FEydjU2Iv/Q/Qpau5ejlkM=
Subject key identifier:   BA:88:1C:E9:05:6D:44:63:2F:CE:98:92:2D:F9:F6:30:CF:D9:17:6C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1C822
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 14 Feb 2021 04:45:08 +0000
Certificate not after:    Wed 14 Aug 2024 14:44:29 +0000
Subordinate resources:    AS: 271822
                          IP: 186.209.212.0/22
                          IP: 2803:810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15845410 (0xf1c822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 04:45:08 2021 GMT
            Not After : Aug 14 14:44:29 2024 GMT
        Subject: CN=5c657c326adeece70c1e8bb9038ff79bc5e67ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:1a:6f:25:f3:24:fb:f5:95:6e:fd:7a:8e:
                    43:86:d6:47:9f:d1:5c:40:d0:2c:88:db:08:0d:7c:
                    16:39:53:23:1e:5d:bb:50:14:75:bd:79:50:6a:4c:
                    1d:f0:b3:9e:29:44:9b:07:b1:f0:51:80:45:ad:34:
                    02:a9:a2:3f:33:50:45:33:f0:81:02:cf:a2:30:40:
                    e1:59:36:ec:a0:6b:c3:50:7f:11:3c:66:7e:17:e4:
                    0f:1f:b7:9c:77:7a:4c:3d:42:f8:13:00:ff:21:ee:
                    a8:64:1b:1c:91:9b:ed:50:5f:9a:0a:2e:45:ff:3e:
                    65:52:ec:69:fa:d7:30:2e:15:6f:ca:2d:ad:ba:23:
                    1c:1b:27:3a:cc:38:c7:d2:d4:ff:86:1c:a5:cb:a5:
                    e0:9b:cc:79:7e:3e:f4:28:3c:32:13:ea:b4:52:8e:
                    6a:e2:0d:0c:3e:cf:7e:04:e0:f9:40:1e:f2:36:4f:
                    b7:c8:3b:b6:7e:62:01:20:4c:07:a6:77:05:b5:2f:
                    f5:84:ee:46:5b:66:d9:3a:a9:e0:de:66:c5:8b:dd:
                    71:64:12:15:00:3e:b0:00:3f:89:e7:c3:14:e6:78:
                    06:ad:d8:5b:14:df:06:9f:01:70:a9:d5:3e:13:db:
                    b6:ad:4d:e7:a1:7a:94:f2:48:aa:2e:87:d2:1f:17:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:88:1C:E9:05:6D:44:63:2F:CE:98:92:2D:F9:F6:30:CF:D9:17:6C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.212.0/22
                IPv6:
                  2803:810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271822

    Signature Algorithm: sha256WithRSAEncryption
         01:29:a3:69:36:1c:65:78:fe:09:cb:d4:c9:44:8d:c7:1f:9b:
         85:c7:53:03:e2:ca:11:ec:a4:e8:ff:ca:41:31:1c:ac:db:ed:
         c8:68:04:d9:93:19:8c:54:ed:07:ef:b8:30:11:d8:17:b4:e0:
         94:54:a6:e5:d2:ad:25:0a:bb:97:51:92:97:fc:70:5a:6d:34:
         69:67:2d:c3:f9:01:54:e0:a7:a6:ff:66:e8:fa:b5:bb:8a:f6:
         cc:d7:b3:25:e6:a0:5a:97:11:37:1b:c0:11:4b:ee:11:b4:80:
         ae:16:ba:fb:d1:f5:a9:93:44:90:5a:c4:23:c8:13:f4:bc:84:
         47:3d:e1:5d:3a:40:c5:47:5f:54:1a:e2:02:17:8d:15:3b:7b:
         ac:bb:0f:c7:12:c7:5c:1b:2c:1a:62:c2:34:bb:c9:20:d0:3d:
         ca:5a:d2:c0:6a:dc:69:7c:32:82:9c:8e:be:fb:44:a8:e8:86:
         54:7d:79:8d:41:86:37:e9:40:7f:80:65:05:a2:ec:6c:bb:87:
         34:32:a7:76:3d:50:65:a6:7e:e2:74:59:ce:10:ed:2a:6f:0a:
         44:5e:70:6c:0b:69:fa:5f:ff:c7:c8:b7:bb:66:81:13:59:81:
         57:42:d4:04:11:e9:a2:0f:3c:8f:34:47:37:d4:ab:83:98:24:
         34:07:34:19
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPHIIjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIxNDA0NDUwOFoXDTI0MDgxNDE0NDQy
OVowMzExMC8GA1UEAxMoNWM2NTdjMzI2YWRlZWNlNzBjMWU4YmI5MDM4ZmY3OWJj
NWU2N2FlNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJQDGm8l8yT7
9ZVu/XqOQ4bWR5/RXEDQLIjbCA18FjlTIx5du1AUdb15UGpMHfCznilEmwex8FGA
Ra00AqmiPzNQRTPwgQLPojBA4Vk27KBrw1B/ETxmfhfkDx+3nHd6TD1C+BMA/yHu
qGQbHJGb7VBfmgouRf8+ZVLsafrXMC4Vb8otrbojHBsnOsw4x9LU/4Ycpcul4JvM
eX4+9Cg8MhPqtFKOauINDD7PfgTg+UAe8jZPt8g7tn5iASBMB6Z3BbUv9YTuRltm
2Tqp4N5mxYvdcWQSFQA+sAA/iefDFOZ4Bq3YWxTfBp8BcKnVPhPbtq1N56F6lPJI
qi6H0h8XL30CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS6iBzpBW1EYy/OmJIt+fYw
z9kXbDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81Zjk4MjIyMi0wZWY3
LTRjMjktOTU4Ny1kYTA0MzcwODk4YjEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWY5ODIyMjItMGVmNy00
YzI5LTk1ODctZGEwNDM3MDg5OGIxLzVjNjU3YzMyNmFkZWVjZTcwYzFlOGJiOTAz
OGZmNzliYzVlNjdhZTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArrR1DANBAIAAjAHAwUAKAMIEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJc4wDQYJKoZIhvcNAQELBQADggEBAAEp
o2k2HGV4/gnL1MlEjccfm4XHUwPiyhHspOj/ykExHKzb7choBNmTGYxU7QfvuDAR
2Be04JRUpuXSrSUKu5dRkpf8cFptNGlnLcP5AVTgp6b/Zuj6tbuK9szXsyXmoFqX
ETcbwBFL7hG0gK4WuvvR9amTRJBaxCPIE/S8hEc94V06QMVHX1Qa4gIXjRU7e6y7
D8cSx1wbLBpiwjS7ySDQPcpa0sBq3Gl8MoKcjr77RKjohlR9eY1BhjfpQH+AZQWi
7Gy7hzQyp3Y9UGWmfuJ0Wc4Q7SpvCkRecGwLafpf/8fIt7tmgRNZgVdC1AQR6aIP
PI80RzfUq4OYJDQHNBk=
-----END CERTIFICATE-----