Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer
File:                     607fc82565ae5a4b66f47f984bbdb94c47122332.cer (raw, json)
Hash identifier:          8vm8HecHgYVgnD+Md0sGQKPQu6GGTk1IRryUxJmWihM=
Subject key identifier:   87:83:5D:5D:6F:E4:82:16:F9:60:AF:88:F7:61:B2:7A:3B:60:C1:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E367B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Mar 2021 14:00:33 +0000
Certificate not after:    Sat 04 May 2024 19:32:41 +0000
Subordinate resources:    AS: 61454
                          IP: 201.131.188.0/22
                          IP: 2803:8580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14903218 (0xe367b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 17 14:00:33 2021 GMT
            Not After : May  4 19:32:41 2024 GMT
        Subject: CN=607fc82565ae5a4b66f47f984bbdb94c47122332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:b4:43:08:ea:ad:ac:27:04:bc:f7:9e:94:
                    5f:02:57:31:20:0a:87:cc:39:94:9a:40:6a:d3:5d:
                    1e:1b:3e:70:b9:72:b7:a5:72:67:33:4e:4e:0a:6b:
                    1b:f9:ab:4c:31:2d:64:96:95:14:14:82:63:da:04:
                    e2:e3:15:61:d2:32:60:a3:e5:e3:34:e1:61:5d:e7:
                    74:89:10:de:85:62:73:e9:e1:d3:7b:be:a3:02:ad:
                    9b:e2:b1:5d:b9:4b:8e:18:02:58:4e:0c:ee:99:38:
                    4b:12:96:67:c2:38:08:e1:c2:30:bb:2f:9f:d2:25:
                    3a:0a:06:95:b3:25:48:50:5d:47:e9:04:69:69:59:
                    a0:ff:86:ea:a2:19:35:26:2b:06:2b:ee:c9:ef:b8:
                    55:58:b7:0a:d6:6a:bc:0d:75:11:ac:41:17:72:a9:
                    b4:8b:b0:8d:9a:8a:f6:d0:ed:65:90:7c:0f:cf:ec:
                    29:d7:3f:5a:2e:6b:64:6b:7e:43:38:18:03:c5:a8:
                    a3:0b:dd:20:ac:0f:60:23:9e:0d:fa:9e:02:92:41:
                    36:42:44:e0:95:d8:42:c3:64:f2:8c:c1:5c:79:5b:
                    f3:b6:37:f2:64:5c:ff:a2:70:4c:c2:c2:45:05:fd:
                    37:60:61:1f:a0:4a:f7:14:31:d8:e5:2c:0e:c1:24:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:5D:5D:6F:E4:82:16:F9:60:AF:88:F7:61:B2:7A:3B:60:C1:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.188.0/22
                IPv6:
                  2803:8580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61454

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:f8:69:2a:42:5b:8f:6c:65:17:4f:6d:38:bc:05:d6:1d:
         9b:fc:b9:d9:04:da:ac:21:69:83:21:49:97:55:ed:6c:25:70:
         53:b8:3c:74:8c:6c:5f:e0:0d:d3:be:02:78:36:1a:29:86:d9:
         b7:18:f0:f8:41:32:45:b1:44:7f:4c:ea:af:60:38:a9:94:99:
         70:90:ae:a1:0b:25:fe:41:50:47:4b:4f:54:96:b9:96:4e:68:
         d0:65:8f:d2:5f:d1:5a:10:74:8a:ff:74:f7:2f:de:de:af:9e:
         9a:ec:8c:80:45:69:0f:e1:3e:6f:8c:b7:be:29:fe:9b:76:2f:
         52:ec:11:9d:6f:94:c8:83:20:63:b1:9f:44:58:7b:ef:51:89:
         22:7a:54:2a:1b:ef:79:d2:24:e9:19:b1:56:aa:59:1d:75:7d:
         2b:1d:08:22:ed:db:f5:0d:06:5b:b8:27:bd:35:11:ee:b8:25:
         78:f7:a2:3a:bd:10:d2:8c:54:ce:35:b1:c4:5a:48:e8:40:b7:
         0b:38:c2:10:df:17:03:9e:f0:16:ad:6b:e2:aa:b3:60:93:ea:
         cb:a7:41:19:c1:9f:bf:15:0a:48:e6:8b:65:5e:4c:f0:e1:45:
         f7:fd:98:b3:01:6a:40:18:21:b3:cd:a3:b1:cf:0f:dc:b6:10:
         db:64:9b:cb
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAONnsjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDMxNzE0MDAzM1oXDTI0MDUwNDE5MzI0
MVowMzExMC8GA1UEAxMoNjA3ZmM4MjU2NWFlNWE0YjY2ZjQ3Zjk4NGJiZGI5NGM0
NzEyMjMzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkEtEMI6q2s
JwS8956UXwJXMSAKh8w5lJpAatNdHhs+cLlyt6VyZzNOTgprG/mrTDEtZJaVFBSC
Y9oE4uMVYdIyYKPl4zThYV3ndIkQ3oVic+nh03u+owKtm+KxXblLjhgCWE4M7pk4
SxKWZ8I4COHCMLsvn9IlOgoGlbMlSFBdR+kEaWlZoP+G6qIZNSYrBivuye+4VVi3
CtZqvA11EaxBF3KptIuwjZqK9tDtZZB8D8/sKdc/Wi5rZGt+QzgYA8WoowvdIKwP
YCOeDfqeApJBNkJE4JXYQsNk8ozBXHlb87Y38mRc/6JwTMLCRQX9N2BhH6BK9xQx
2OUsDsEkZhkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSHg11db+SCFvlgr4j3YbJ6
O2DBezAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mYTYwYzlkOC04YWIw
LTRlNGEtOTdjOC1hMjVjZDk2N2E5ODYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmE2MGM5ZDgtOGFiMC00
ZTRhLTk3YzgtYTI1Y2Q5NjdhOTg2LzYwN2ZjODI1NjVhZTVhNGI2NmY0N2Y5ODRi
YmRiOTRjNDcxMjIzMzIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsmDvDANBAIAAjAHAwUAKAOFgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8A4wDQYJKoZIhvcNAQELBQADggEBAKXg
+GkqQluPbGUXT204vAXWHZv8udkE2qwhaYMhSZdV7WwlcFO4PHSMbF/gDdO+Ang2
GimG2bcY8PhBMkWxRH9M6q9gOKmUmXCQrqELJf5BUEdLT1SWuZZOaNBlj9Jf0VoQ
dIr/dPcv3t6vnprsjIBFaQ/hPm+Mt74p/pt2L1LsEZ1vlMiDIGOxn0RYe+9RiSJ6
VCob73nSJOkZsVaqWR11fSsdCCLt2/UNBlu4J701Ee64JXj3ojq9ENKMVM41scRa
SOhAtws4whDfFwOe8Bata+Kqs2CT6sunQRnBn78VCkjmi2VeTPDhRff9mLMBakAY
IbPNo7HPD9y2ENtkm8s=
-----END CERTIFICATE-----