Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
File:                     603e7d46b70d7d73178e8bdda798f182daa1be7f.cer (raw, json)
Hash identifier:          GaYz1ObVPKOnJ2KUenuplEjFXf/K2boA68xye/0mHvY=
Subject key identifier:   70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010270B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/603e7d46b70d7d73178e8bdda798f182daa1be7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 May 2021 19:12:45 +0000
Certificate not after:    Sat 16 Aug 2025 16:21:25 +0000
Subordinate resources:    AS: 52493
                          IP: 168.90.72.0/22
                          IP: 179.60.228.0/22
                          IP: 2803:5880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16937141 (0x10270b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 14 19:12:45 2021 GMT
            Not After : Aug 16 16:21:25 2025 GMT
        Subject: CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:5a:2b:06:4f:d1:99:24:ff:47:49:55:d8:
                    75:4a:98:93:2a:20:2f:71:b9:62:51:2c:4a:fb:3e:
                    f9:37:5c:02:c8:ba:c4:5e:56:86:cf:ae:1a:70:99:
                    b1:15:60:3c:0a:3d:b9:96:30:be:a3:1e:66:27:e2:
                    f7:63:73:a0:11:5d:38:44:24:3d:26:32:4f:12:06:
                    cc:51:aa:0d:24:ef:f4:81:a5:4f:f1:0b:db:2b:a1:
                    3c:09:04:fe:89:10:df:31:1c:9d:48:8b:fb:59:9d:
                    08:f4:25:8d:eb:98:99:41:8b:47:c1:2d:17:9c:c8:
                    3c:7d:58:0d:2f:97:2c:19:58:b9:37:43:d8:ce:c3:
                    62:9c:5e:93:29:c6:ff:32:e6:9d:9b:f2:b2:ff:8f:
                    ba:a5:2b:95:be:16:3e:79:80:47:87:df:21:20:6f:
                    5e:1a:82:1e:12:4e:06:af:df:89:b9:c2:4e:fe:18:
                    95:b3:4b:21:24:a0:59:52:d1:63:c5:d5:5c:e3:a9:
                    55:70:86:91:56:eb:a9:6c:92:d3:74:9a:aa:06:9c:
                    7c:83:e0:99:10:84:10:96:00:0f:ee:2f:2e:ff:da:
                    3f:51:ed:dd:00:98:40:0e:d6:3d:9e:2c:95:c6:00:
                    83:3a:99:6b:f5:94:74:b2:5b:b2:ed:36:b7:7a:13:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/603e7d46b70d7d73178e8bdda798f182daa1be7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/22
                  179.60.228.0/22
                IPv6:
                  2803:5880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52493

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:0a:9a:33:1f:79:b3:d1:80:b5:e8:51:c4:a5:4d:31:6b:
         fd:d2:5e:84:44:e1:ab:41:c1:a8:26:f3:29:1d:5c:99:6f:3f:
         5f:ba:d3:02:b7:11:8e:cf:95:1e:94:67:8c:be:af:28:09:b0:
         36:28:f8:af:4d:da:76:57:d7:89:27:17:f7:43:be:a3:11:00:
         7e:b7:f2:6e:0e:f1:78:7d:7b:5e:ba:62:0a:fd:63:dc:a4:40:
         74:74:fc:c3:37:32:a7:aa:57:61:39:d8:7a:e7:1f:34:1d:82:
         34:f3:47:e5:a5:d6:b0:0e:ec:90:33:da:e1:88:36:95:5f:b7:
         36:42:18:ce:c4:16:31:d1:8b:31:25:e7:81:cb:36:c9:bc:fa:
         6b:98:e3:6f:58:6f:a2:2b:8b:95:81:53:46:c4:41:e8:e3:fb:
         71:65:11:d7:da:1a:dd:2a:07:55:17:99:42:22:29:e3:39:76:
         2a:fe:9e:b7:61:8b:72:86:cd:06:25:4e:ad:18:f4:b5:2f:07:
         38:be:97:89:41:ed:04:59:9e:72:6e:b1:a5:b6:3d:de:22:0d:
         1f:86:9b:0a:3a:f9:0f:70:96:5a:2d:eb:62:b6:a9:1d:31:c2:
         57:08:36:4f:16:b5:cf:4c:40:69:e3:a4:03:d8:78:d4:97:55:
         a0:92:9e:d6
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAQJwtTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUxNDE5MTI0NVoXDTI1MDgxNjE2MjEy
NVowMzExMC8GA1UEAxMoNjAzZTdkNDZiNzBkN2Q3MzE3OGU4YmRkYTc5OGYxODJk
YWExYmU3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKBaWisGT9GZ
JP9HSVXYdUqYkyogL3G5YlEsSvs++TdcAsi6xF5Whs+uGnCZsRVgPAo9uZYwvqMe
Zifi92NzoBFdOEQkPSYyTxIGzFGqDSTv9IGlT/EL2yuhPAkE/okQ3zEcnUiL+1md
CPQljeuYmUGLR8EtF5zIPH1YDS+XLBlYuTdD2M7DYpxekynG/zLmnZvysv+PuqUr
lb4WPnmAR4ffISBvXhqCHhJOBq/fibnCTv4YlbNLISSgWVLRY8XVXOOpVXCGkVbr
qWyS03SaqgacfIPgmRCEEJYAD+4vLv/aP1Ht3QCYQA7WPZ4slcYAgzqZa/WUdLJb
su02t3oTQ7kCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRw362k66fiMvlhhy5FTNDm
DYF56zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MDkzNDc3NS1jODc4
LTQ0MzktYTE4NC1mNTU1MjY1MTlmZGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTA5MzQ3NzUtYzg3OC00
NDM5LWExODQtZjU1NTI2NTE5ZmRjLzYwM2U3ZDQ2YjcwZDdkNzMxNzhlOGJkZGE3
OThmMTgyZGFhMWJlN2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqhaSAMEArM85DANBAIAAjAHAwUA
KANYgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzQ0wDQYJKoZIhvcNAQELBQAD
ggEBAF3oCpozH3mz0YC16FHEpU0xa/3SXoRE4atBwagm8ykdXJlvP1+60wK3EY7P
lR6UZ4y+rygJsDYo+K9N2nZX14knF/dDvqMRAH638m4O8Xh9e166Ygr9Y9ykQHR0
/MM3MqeqV2E52HrnHzQdgjTzR+Wl1rAO7JAz2uGINpVftzZCGM7EFjHRizEl54HL
Nsm8+muY429Yb6Iri5WBU0bEQejj+3FlEdfaGt0qB1UXmUIiKeM5dir+nrdhi3KG
zQYlTq0Y9LUvBzi+l4lB7QRZnnJusaW2Pd4iDR+Gmwo6+Q9wllot62K2qR0xwlcI
Nk8Wtc9MQGnjpAPYeNSXVaCSntY=
-----END CERTIFICATE-----