Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6580f34afc7743eafec378652f0294590304094f.cer
File:                     6580f34afc7743eafec378652f0294590304094f.cer (raw, json)
Hash identifier:          bFG6T5Bu7/ZPPDArsH1EmrBrvVYWxmm05LK5wQKgQbs=
Subject key identifier:   5B:25:34:CF:12:94:F8:A1:30:8D:84:36:1A:21:7B:19:AF:8A:3B:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAA91E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d77024a0-3ba0-40cf-aa99-add6c761a78c/6580f34afc7743eafec378652f0294590304094f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d77024a0-3ba0-40cf-aa99-add6c761a78c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Nov 2020 22:43:24 +0000
Certificate not after:    Fri 21 Jun 2024 19:41:16 +0000
Subordinate resources:    AS: 266889
                          IP: 45.161.132.0/22
                          IP: 2803:26a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15378718 (0xeaa91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 22:43:24 2020 GMT
            Not After : Jun 21 19:41:16 2024 GMT
        Subject: CN=6580f34afc7743eafec378652f0294590304094f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:6a:2b:b2:d1:10:0b:79:48:9a:3a:a8:95:
                    56:6a:bf:8b:21:01:fe:f3:16:d4:80:ce:ad:a5:18:
                    23:2f:27:17:0a:e9:d7:66:9b:43:45:a0:3d:1c:cd:
                    12:8b:43:06:55:67:fc:cb:60:98:82:f0:2e:29:91:
                    ea:7b:31:17:0f:51:60:25:b8:5f:9c:55:96:e9:ec:
                    c1:2b:4a:aa:c2:cf:86:e8:64:6c:6a:61:bd:f4:3a:
                    ec:49:c8:c8:d2:d8:20:51:3c:dd:46:f4:ed:51:88:
                    41:ac:d4:77:8e:89:38:0f:76:77:75:4a:9d:3f:cf:
                    26:96:4e:83:f2:93:f9:c1:f7:14:72:ed:6d:74:31:
                    9b:2a:51:a4:ad:17:cc:7b:ac:fb:2a:5a:13:f8:74:
                    67:3e:03:f6:1b:ec:1b:63:ce:7e:d1:8e:a9:6b:ea:
                    2f:52:29:0c:3a:18:38:1b:25:17:3a:11:69:82:88:
                    2a:6a:c9:d3:15:19:98:a2:39:cf:63:bb:30:9d:a5:
                    03:8b:5e:89:b1:d9:d7:19:2f:b3:a4:72:7c:c0:dc:
                    bd:ed:98:d5:59:6a:16:3e:f1:ec:59:8b:04:db:7c:
                    6e:19:27:f9:a9:9a:e3:c9:da:3e:4c:7a:de:fd:8f:
                    af:25:0e:70:d4:e7:e1:f9:59:15:8d:0f:0f:49:7d:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:25:34:CF:12:94:F8:A1:30:8D:84:36:1A:21:7B:19:AF:8A:3B:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d77024a0-3ba0-40cf-aa99-add6c761a78c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d77024a0-3ba0-40cf-aa99-add6c761a78c/6580f34afc7743eafec378652f0294590304094f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.132.0/22
                IPv6:
                  2803:26a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266889

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:2f:fb:d0:cc:37:e9:bb:02:f0:4b:1b:fe:ea:8d:49:75:
         43:57:b5:5f:c8:ba:fb:c2:ac:44:88:1a:34:6f:98:34:1c:9a:
         7d:61:3c:76:52:7a:71:d1:c8:50:76:cb:dd:d4:8c:b1:7f:0d:
         3d:83:c2:2b:9c:99:3c:75:cb:73:32:cb:b9:89:72:dd:ba:c3:
         b8:8b:87:80:c9:4c:d8:37:eb:c8:dd:41:77:50:df:ad:5b:20:
         05:97:c8:94:1b:12:05:7e:9a:d5:9a:79:69:33:9b:03:2f:51:
         fa:4a:a5:0c:36:c4:d3:ad:52:cd:4e:97:0a:fe:09:ce:e7:72:
         56:45:43:f3:fb:81:2c:3a:48:bf:b5:c2:ea:d3:53:36:bb:dd:
         34:40:0e:42:a8:fb:0e:d0:c6:08:9b:47:a9:9d:c8:77:9d:5d:
         68:c9:b6:1c:29:b3:b5:2c:4c:e6:4f:f1:4e:a2:b5:ba:ff:9b:
         e1:bc:7f:3c:52:02:da:cf:a9:84:b5:9d:e2:cf:99:17:85:ab:
         ca:4c:06:e6:63:52:de:67:91:3f:0e:6d:d4:7b:a5:ea:27:89:
         d1:54:26:9e:05:b0:9d:49:a2:8c:89:d4:e5:dd:a7:6d:62:ef:
         8d:09:74:34:c0:c9:94:9f:bd:5c:ad:60:d0:a1:89:bb:81:7c:
         fa:db:50:f1
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOqpHjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTEwNjIyNDMyNFoXDTI0MDYyMTE5NDEx
NlowMzExMC8GA1UEAxMoNjU4MGYzNGFmYzc3NDNlYWZlYzM3ODY1MmYwMjk0NTkw
MzA0MDk0ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJVEaiuy0RAL
eUiaOqiVVmq/iyEB/vMW1IDOraUYIy8nFwrp12abQ0WgPRzNEotDBlVn/MtgmILw
LimR6nsxFw9RYCW4X5xVlunswStKqsLPhuhkbGphvfQ67EnIyNLYIFE83Ub07VGI
QazUd46JOA92d3VKnT/PJpZOg/KT+cH3FHLtbXQxmypRpK0XzHus+ypaE/h0Zz4D
9hvsG2POftGOqWvqL1IpDDoYOBslFzoRaYKIKmrJ0xUZmKI5z2O7MJ2lA4teibHZ
1xkvs6RyfMDcve2Y1VlqFj7x7FmLBNt8bhkn+ama48naPkx63v2PryUOcNTn4flZ
FY0PD0l9BtUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRbJTTPEpT4oTCNhDYaIXsZ
r4o7ejAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNzcwMjRhMC0zYmEw
LTQwY2YtYWE5OS1hZGQ2Yzc2MWE3OGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDc3MDI0YTAtM2JhMC00
MGNmLWFhOTktYWRkNmM3NjFhNzhjLzY1ODBmMzRhZmM3NzQzZWFmZWMzNzg2NTJm
MDI5NDU5MDMwNDA5NGYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hhDANBAIAAjAHAwUAKAMmoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEokwDQYJKoZIhvcNAQELBQADggEBAD1Q
L/vQzDfpuwLwSxv+6o1JdUNXtV/IuvvCrESIGjRvmDQcmn1hPHZSenHRyFB2y93U
jLF/DT2DwiucmTx1y3Myy7mJct26w7iLh4DJTNg368jdQXdQ361bIAWXyJQbEgV+
mtWaeWkzmwMvUfpKpQw2xNOtUs1Olwr+Cc7nclZFQ/P7gSw6SL+1wurTUza73TRA
DkKo+w7QxgibR6mdyHedXWjJthwps7UsTOZP8U6itbr/m+G8fzxSAtrPqYS1neLP
mReFq8pMBuZjUt5nkT8ObdR7peonidFUJp4FsJ1JooyJ1OXdp21i740JdDTAyZSf
vVytYNChibuBfPrbUPE=
-----END CERTIFICATE-----