Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d22c469602e89cd8cdb129d6b7a190189151a77.cer
File:                     7d22c469602e89cd8cdb129d6b7a190189151a77.cer (raw, json)
Hash identifier:          D0Hhv/v6I50aJoLWmMENo4gIRiAy4uZbsbduKU7+a1E=
Subject key identifier:   76:88:03:D5:3F:F6:44:62:E9:D9:96:C3:C9:7F:E1:0F:A4:1B:76:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F69635
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83fb1ec4-7acc-49f5-a60a-78bddcfc70c6/7d22c469602e89cd8cdb129d6b7a190189151a77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83fb1ec4-7acc-49f5-a60a-78bddcfc70c6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Feb 2021 17:30:12 +0000
Certificate not after:    Wed 25 Sep 2024 14:17:38 +0000
Subordinate resources:    AS: 263708
                          IP: 201.131.42.0/24
                          IP: 2801:15:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16160309 (0xf69635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 11 17:30:12 2021 GMT
            Not After : Sep 25 14:17:38 2024 GMT
        Subject: CN=7d22c469602e89cd8cdb129d6b7a190189151a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:5f:68:d9:0b:49:c5:97:37:71:a6:22:82:
                    dd:3a:60:ac:a2:da:2b:20:f9:21:79:f5:6a:ec:ac:
                    65:49:9b:2c:52:cd:94:0d:97:3b:fb:20:ab:57:cf:
                    ec:f0:3e:e1:e9:a1:bd:1b:3c:bc:57:41:58:81:ae:
                    5b:86:32:2a:cb:60:7a:05:ed:69:70:45:82:d1:2c:
                    b8:b1:9f:b1:85:27:61:07:bb:ef:95:97:fc:6c:5f:
                    48:af:bc:46:c8:39:8c:95:01:88:55:cc:58:08:1f:
                    a9:e2:98:ea:4b:26:62:29:04:eb:97:bd:87:a6:c5:
                    eb:5f:79:cc:94:ec:ff:10:2b:e0:4d:d0:5c:08:f6:
                    b5:2c:04:85:d3:f1:b7:4e:fa:4b:8c:ac:13:37:ba:
                    7e:0f:e2:cb:36:4c:81:87:bc:18:9e:6d:0c:89:ac:
                    4d:85:48:46:3f:62:71:03:1f:7f:76:b7:3a:76:76:
                    c5:f1:79:08:c1:04:f4:89:6e:c4:7d:9e:c1:a1:9d:
                    82:3e:65:6d:55:55:75:6d:79:80:3a:21:d6:c8:7d:
                    32:62:83:49:5a:80:3d:fb:9d:d3:e4:79:d0:84:ce:
                    b3:c1:66:43:4c:38:be:89:3a:4f:0c:27:47:74:ce:
                    de:cc:ed:e0:72:03:50:91:88:60:51:40:e2:e9:f6:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:03:D5:3F:F6:44:62:E9:D9:96:C3:C9:7F:E1:0F:A4:1B:76:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83fb1ec4-7acc-49f5-a60a-78bddcfc70c6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83fb1ec4-7acc-49f5-a60a-78bddcfc70c6/7d22c469602e89cd8cdb129d6b7a190189151a77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.42.0/24
                IPv6:
                  2801:15:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263708

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:fe:40:83:04:ef:1e:d0:ce:6b:44:6a:e4:02:74:e8:ba:
         06:ca:1c:9b:b5:72:e1:4f:1f:71:8a:c9:b9:80:0e:0b:2e:c3:
         dd:02:df:55:27:40:71:c0:fd:59:34:59:29:d8:67:cb:60:1c:
         6b:38:0a:bc:16:29:45:da:9d:b2:57:ec:2f:88:69:68:8b:e5:
         11:3f:79:ba:ee:8c:50:fb:f8:b2:3e:91:0a:e9:c9:79:f2:7b:
         cb:03:c7:49:a8:8b:8d:05:06:f2:28:4a:49:6f:f0:ed:d7:b5:
         02:23:d3:7d:9c:5b:c8:f6:70:59:8b:b2:11:c9:63:c3:ca:90:
         fc:b8:33:f9:fe:25:2d:74:2d:3d:54:30:6d:0b:3b:8a:58:c3:
         09:b5:6a:68:1f:60:6d:95:81:47:a1:6f:76:f4:3c:b7:40:23:
         e2:b2:11:d8:5c:a7:29:0e:44:48:53:13:c5:48:75:17:cf:ac:
         f7:3f:0f:80:66:b9:d7:0a:cb:ec:89:87:58:b8:3e:0a:0b:83:
         51:a6:cd:8f:39:76:2a:85:74:96:f6:77:7b:fc:f3:14:b6:db:
         71:c3:0d:ab:df:23:27:da:b6:10:a3:b1:0e:e5:8f:3e:0f:58:
         95:d3:b7:ba:95:53:6e:56:d4:99:31:89:72:6b:a2:47:ff:5e:
         70:f1:2a:12
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAPaWNTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIxMTE3MzAxMloXDTI0MDkyNTE0MTcz
OFowMzExMC8GA1UEAxMoN2QyMmM0Njk2MDJlODljZDhjZGIxMjlkNmI3YTE5MDE4
OTE1MWE3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAITVX2jZC0nF
lzdxpiKC3TpgrKLaKyD5IXn1auysZUmbLFLNlA2XO/sgq1fP7PA+4emhvRs8vFdB
WIGuW4YyKstgegXtaXBFgtEsuLGfsYUnYQe775WX/GxfSK+8Rsg5jJUBiFXMWAgf
qeKY6ksmYikE65e9h6bF6195zJTs/xAr4E3QXAj2tSwEhdPxt076S4ysEze6fg/i
yzZMgYe8GJ5tDImsTYVIRj9icQMff3a3OnZ2xfF5CMEE9IluxH2ewaGdgj5lbVVV
dW15gDoh1sh9MmKDSVqAPfud0+R50ITOs8FmQ0w4vok6TwwnR3TO3szt4HIDUJGI
YFFA4un2EHECAwEAAaOCAwswggMHMB0GA1UdDgQWBBR2iAPVP/ZEYunZlsPJf+EP
pBt2WzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84M2ZiMWVjNC03YWNj
LTQ5ZjUtYTYwYS03OGJkZGNmYzcwYzYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODNmYjFlYzQtN2FjYy00
OWY1LWE2MGEtNzhiZGRjZmM3MGM2LzdkMjJjNDY5NjAyZTg5Y2Q4Y2RiMTI5ZDZi
N2ExOTAxODkxNTFhNzcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMmDKjAPBAIAAjAJAwcAKAEAFWAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGHDANBgkqhkiG9w0BAQsFAAOCAQEA
S4b+QIME7x7QzmtEauQCdOi6Bsocm7Vy4U8fcYrJuYAOCy7D3QLfVSdAccD9WTRZ
Kdhny2AcazgKvBYpRdqdslfsL4hpaIvlET95uu6MUPv4sj6RCunJefJ7ywPHSaiL
jQUG8ihKSW/w7de1AiPTfZxbyPZwWYuyEcljw8qQ/Lgz+f4lLXQtPVQwbQs7iljD
CbVqaB9gbZWBR6FvdvQ8t0Aj4rIR2FynKQ5ESFMTxUh1F8+s9z8PgGa51wrL7ImH
WLg+CguDUabNjzl2KoV0lvZ3e/zzFLbbccMNq98jJ9q2EKOxDuWPPg9YldO3upVT
blbUmTGJcmuiR/9ecPEqEg==
-----END CERTIFICATE-----