Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
File:                     7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer (raw, json)
Hash identifier:          dQULIFntxfa2inIxLL1PVgBfdrDci5XK/9B9H325nOA=
Subject key identifier:   A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D1F49E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Sep 2022 16:56:30 +0000
Certificate not after:    Wed 17 Jan 2024 21:20:23 +0000
Subordinate resources:    AS: 265679
                          IP: 45.4.216.0/22
                          IP: 2803:c1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13759646 (0xd1f49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 16:56:30 2022 GMT
            Not After : Jan 17 21:20:23 2024 GMT
        Subject: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:be:ea:0f:f0:30:92:be:5f:69:8f:5e:7f:
                    46:fd:f0:65:5b:13:bf:84:c9:99:35:df:c0:55:54:
                    b1:50:d3:03:df:05:22:1f:50:2c:19:cc:21:41:b4:
                    aa:a9:a3:7e:4d:05:0e:38:3d:5b:c5:3a:08:ad:4b:
                    5e:6f:9b:59:37:c3:f5:67:bb:5d:d7:30:cc:c3:77:
                    62:6e:10:5a:46:5f:4e:77:a9:f1:c0:89:85:24:8e:
                    f6:5e:b9:2d:4c:ed:58:e2:04:31:c5:0e:d8:cf:74:
                    c4:b5:82:6c:ea:01:b5:30:c5:ea:d6:d4:a0:22:51:
                    bd:b6:7d:cc:1b:0f:7c:ee:42:34:a7:b9:1b:ef:10:
                    b8:d7:da:4c:e4:31:b0:6c:f8:42:ce:d0:06:02:6f:
                    12:36:5e:b6:ac:8b:77:26:7c:93:34:ac:ba:e0:81:
                    e6:9b:14:c4:b7:16:55:15:c8:d4:5f:80:e9:31:23:
                    fa:d4:4c:f3:4b:d2:67:32:e7:a1:10:87:b9:b1:7a:
                    01:55:c5:aa:05:94:85:e3:12:65:4f:1b:e3:14:74:
                    b4:13:fd:df:87:98:8a:f6:6b:d7:f3:6e:47:7a:9c:
                    e2:1a:00:45:97:71:fa:ae:dd:b9:28:23:f9:37:cf:
                    2f:19:7a:cb:b9:4f:0e:7b:e4:30:d7:23:bf:15:72:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22
                IPv6:
                  2803:c1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265679

    Signature Algorithm: sha256WithRSAEncryption
         37:58:d8:f6:b5:d9:fb:5a:1d:c9:7f:a3:69:5c:83:07:dd:c7:
         08:93:0d:98:63:16:a2:2b:66:0b:4e:20:60:ac:5e:71:41:8a:
         3a:f0:c6:de:6b:d9:be:67:17:95:b5:03:50:04:27:09:12:fc:
         34:57:17:48:4d:50:65:2b:e4:41:ce:59:79:f8:ee:b4:ba:5f:
         eb:ff:84:1b:81:64:2b:8b:85:ca:e5:36:a1:f1:04:32:3d:cc:
         35:96:84:a9:b5:b4:32:1b:2b:b8:d1:23:2f:b4:bb:4c:ca:1e:
         bf:74:98:5f:e8:77:92:ee:35:bc:41:b2:bd:a9:17:fc:da:5f:
         19:5a:d4:b5:46:ca:25:b8:73:2a:ec:ad:79:13:2a:45:2b:76:
         47:b1:a5:cf:55:25:50:32:57:56:c6:49:34:2e:af:01:a7:7a:
         c6:b7:56:af:fd:a0:84:d5:1f:c3:9a:c7:07:9b:9f:ce:91:49:
         cb:88:6b:7a:93:5b:0b:0e:26:83:c2:9e:61:af:fb:05:ad:41:
         13:61:67:f4:bb:bb:29:2c:3b:23:d2:34:59:ff:35:b5:7b:3c:
         5e:a6:cf:d3:07:da:14:dc:3d:a1:8f:b8:e9:d3:92:de:03:c9:
         2c:e5:ab:fa:b2:b3:89:1b:61:fc:66:54:5d:fa:22:b8:14:da:
         9b:b3:f1:1b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANH0njANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkxMjE2NTYzMFoXDTI0MDExNzIxMjAy
M1owMzExMC8GA1UEAxMoN2E4NmQ3YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEw
YWUxYWI1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0gvuoP8DCS
vl9pj15/Rv3wZVsTv4TJmTXfwFVUsVDTA98FIh9QLBnMIUG0qqmjfk0FDjg9W8U6
CK1LXm+bWTfD9We7XdcwzMN3Ym4QWkZfTnep8cCJhSSO9l65LUztWOIEMcUO2M90
xLWCbOoBtTDF6tbUoCJRvbZ9zBsPfO5CNKe5G+8QuNfaTOQxsGz4Qs7QBgJvEjZe
tqyLdyZ8kzSsuuCB5psUxLcWVRXI1F+A6TEj+tRM80vSZzLnoRCHubF6AVXFqgWU
heMSZU8b4xR0tBP934eYivZr1/NuR3qc4hoARZdx+q7duSgj+TfPLxl6y7lPDnvk
MNcjvxVyHYUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSkANN+dFb9KMyf4z4qz06b
ToS77zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iYTlkNWNhOC03Mzk3
LTQwM2MtYmI3YS0yNjU0YjAwODMyMTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmE5ZDVjYTgtNzM5Ny00
MDNjLWJiN2EtMjY1NGIwMDgzMjEwLzdhODZkN2IxMzhkOTc0YTFmMGM3MDgzOGVi
NmZiMmExMGFlMWFiNWIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0E2DANBAIAAjAHAwUAKAPBwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDc8wDQYJKoZIhvcNAQELBQADggEBADdY
2Pa12ftaHcl/o2lcgwfdxwiTDZhjFqIrZgtOIGCsXnFBijrwxt5r2b5nF5W1A1AE
JwkS/DRXF0hNUGUr5EHOWXn47rS6X+v/hBuBZCuLhcrlNqHxBDI9zDWWhKm1tDIb
K7jRIy+0u0zKHr90mF/od5LuNbxBsr2pF/zaXxla1LVGyiW4cyrsrXkTKkUrdkex
pc9VJVAyV1bGSTQurwGnesa3Vq/9oITVH8Oaxwebn86RScuIa3qTWwsOJoPCnmGv
+wWtQRNhZ/S7uyksOyPSNFn/NbV7PF6mz9MH2hTcPaGPuOnTkt4DySzlq/qys4kb
YfxmVF36IrgU2puz8Rs=
-----END CERTIFICATE-----