Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.cer
File:                     6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.cer (raw, json)
Hash identifier:          l8SGaNftrdIVZttMRVV5U7yi30flIm5kx9oeZwhzoqk=
Subject key identifier:   29:25:C1:9E:CC:2E:79:42:B8:8F:09:64:E4:F0:D9:20:99:A4:93:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA3DBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Oct 2022 19:56:20 +0000
Certificate not after:    Mon 21 Oct 2024 02:46:45 +0000
Subordinate resources:    AS: 270158
                          IP: 45.168.236.0/22
                          IP: 2806:319::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16399803 (0xfa3dbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 18 19:56:20 2022 GMT
            Not After : Oct 21 02:46:45 2024 GMT
        Subject: CN=6ea89a9dcc4868890b0f382eb51070e3b10ddaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:b9:e7:e5:20:14:b0:47:e3:27:3e:89:21:
                    f0:29:61:3f:90:36:c7:15:6c:ca:01:86:ca:a0:af:
                    cf:3e:3b:1b:b9:f6:77:c5:6f:aa:fa:dc:25:02:b7:
                    0b:5e:c7:bf:d1:28:2f:79:8b:7c:e0:26:b5:1e:85:
                    ab:ec:72:c2:6b:e3:8a:cc:2a:68:f9:81:91:2e:37:
                    18:4e:d2:ce:3f:18:ec:e1:65:a0:3d:48:d3:c6:d9:
                    de:d7:0c:a1:ad:76:62:71:01:a9:09:71:08:ad:ea:
                    47:ba:42:58:b0:a8:f6:cc:74:5b:7f:9b:50:23:01:
                    52:1f:8b:60:73:21:18:58:a9:ef:97:f1:af:6a:aa:
                    2a:78:71:39:6f:51:62:9e:e5:1b:59:ba:62:f2:92:
                    dd:ed:95:98:0a:86:79:6f:6e:94:f7:96:2f:3c:0f:
                    cc:29:6a:8a:26:4b:76:2a:69:14:41:91:07:0f:f4:
                    5d:61:b6:7a:c4:20:70:be:5c:e4:11:bc:75:99:f2:
                    1a:cc:5a:f1:5e:12:6d:7a:3b:01:6b:32:ea:49:a1:
                    8b:46:ba:bf:02:c9:53:76:ba:82:6b:6a:5b:60:e1:
                    6a:1a:38:2e:4e:1c:d3:43:4a:d0:b2:5c:bc:cf:32:
                    bd:ac:42:43:9a:9e:1d:25:bc:29:22:e3:c9:65:c9:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:25:C1:9E:CC:2E:79:42:B8:8F:09:64:E4:F0:D9:20:99:A4:93:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.236.0/22
                IPv6:
                  2806:319::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270158

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:8e:6b:2e:6d:79:9a:ec:91:ce:10:53:36:76:09:8d:00:
         2f:b4:cc:65:b2:e3:6a:fe:02:f7:0b:ed:f5:07:a5:6b:1c:e4:
         a3:99:5f:83:84:fb:d7:f6:16:c8:fb:c5:f2:cb:8f:d3:66:34:
         59:3d:61:5b:a1:35:c2:c7:64:99:ba:82:ce:07:64:4d:ad:1d:
         e1:d9:0c:82:19:dd:9e:57:b7:93:48:63:45:5a:55:a8:59:55:
         21:3e:80:25:f2:3f:b8:b5:c1:01:fa:f0:fa:b5:bb:a9:ce:64:
         a9:63:25:76:a8:24:8b:46:9a:be:1a:0d:e3:e8:6c:67:87:09:
         33:97:71:d2:8d:38:c8:49:20:6d:a1:0e:cc:4b:6f:3c:19:96:
         dc:a1:50:a3:18:58:b4:3f:e5:04:a3:1e:99:fc:e6:32:50:f3:
         38:b6:5c:be:81:e0:da:fb:a3:2f:fa:ff:81:4c:40:bb:d6:4f:
         40:f9:d6:b6:02:7b:22:31:55:87:78:4d:22:3a:ea:4e:7b:7f:
         b3:c9:c5:36:c5:c6:2f:e4:dd:23:c0:8b:d3:c1:1e:55:7e:90:
         53:47:09:a7:53:6d:f2:c4:77:f1:37:41:14:de:8f:2d:b5:a1:
         a7:14:77:96:18:75:c8:1b:1b:1a:d5:95:c2:8d:10:04:ab:a7:
         c8:06:a7:08
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPo9uzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTAxODE5NTYyMFoXDTI0MTAyMTAyNDY0
NVowMzExMC8GA1UEAxMoNmVhODlhOWRjYzQ4Njg4OTBiMGYzODJlYjUxMDcwZTNi
MTBkZGFhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAITYueflIBSw
R+MnPokh8ClhP5A2xxVsygGGyqCvzz47G7n2d8VvqvrcJQK3C17Hv9EoL3mLfOAm
tR6Fq+xywmvjiswqaPmBkS43GE7Szj8Y7OFloD1I08bZ3tcMoa12YnEBqQlxCK3q
R7pCWLCo9sx0W3+bUCMBUh+LYHMhGFip75fxr2qqKnhxOW9RYp7lG1m6YvKS3e2V
mAqGeW9ulPeWLzwPzClqiiZLdippFEGRBw/0XWG2esQgcL5c5BG8dZnyGsxa8V4S
bXo7AWsy6kmhi0a6vwLJU3a6gmtqW2Dhaho4Lk4c00NK0LJcvM8yvaxCQ5qeHSW8
KSLjyWXJcLkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQpJcGezC55QriPCWTk8Nkg
maSTEjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMmRjMDJkNC00MjRj
LTQ3ZDAtYTVmNS0wZTcyZDNmMDBmMGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTJkYzAyZDQtNDI0Yy00
N2QwLWE1ZjUtMGU3MmQzZjAwZjBjLzZlYTg5YTlkY2M0ODY4ODkwYjBmMzgyZWI1
MTA3MGUzYjEwZGRhYWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2o7DANBAIAAjAHAwUAKAYDGTAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH04wDQYJKoZIhvcNAQELBQADggEBAJw2
jmsubXma7JHOEFM2dgmNAC+0zGWy42r+AvcL7fUHpWsc5KOZX4OE+9f2Fsj7xfLL
j9NmNFk9YVuhNcLHZJm6gs4HZE2tHeHZDIIZ3Z5Xt5NIY0VaVahZVSE+gCXyP7i1
wQH68Pq1u6nOZKljJXaoJItGmr4aDePobGeHCTOXcdKNOMhJIG2hDsxLbzwZltyh
UKMYWLQ/5QSjHpn85jJQ8zi2XL6B4Nr7oy/6/4FMQLvWT0D51rYCeyIxVYd4TSI6
6k57f7PJxTbFxi/k3SPAi9PBHlV+kFNHCadTbfLEd/E3QRTejy21oacUd5YYdcgb
GxrVlcKNEASrp8gGpwg=
-----END CERTIFICATE-----