Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/880ae601d98f39fcfd69d15097881d485547be56.cer
File:                     880ae601d98f39fcfd69d15097881d485547be56.cer (raw, json)
Hash identifier:          vsE28O9Z+/VNoPE2DA5MaOxC06xiu73qmI+iKNlRxfE=
Subject key identifier:   4B:FD:DF:44:CE:93:A4:DF:C9:5B:09:BF:AF:ED:49:60:59:CD:1A:E5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3D2BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/80155113-0f8a-4df8-ade9-aea1361147e7/880ae601d98f39fcfd69d15097881d485547be56.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/80155113-0f8a-4df8-ade9-aea1361147e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Mar 2021 01:33:44 +0000
Certificate not after:    Mon 06 May 2024 15:58:57 +0000
Subordinate resources:    AS: 266843
                          IP: 45.238.220.0/22
                          IP: 2803:5ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14930618 (0xe3d2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 16 01:33:44 2021 GMT
            Not After : May  6 15:58:57 2024 GMT
        Subject: CN=880ae601d98f39fcfd69d15097881d485547be56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:92:3f:ce:a3:2e:3d:46:e0:ff:ec:d5:ae:
                    1a:b5:e5:59:5f:b5:68:8e:ee:bc:96:fa:12:78:62:
                    36:23:78:21:94:4b:bb:24:a1:7f:17:ab:0c:52:4b:
                    df:f2:a9:be:75:46:a7:de:a4:36:e9:7a:12:82:c1:
                    0d:13:ad:fe:bb:9a:95:40:89:6c:de:ef:34:ec:6e:
                    23:44:a1:5c:56:ba:15:75:09:3e:fa:06:54:f2:e8:
                    fb:1c:fa:2c:c7:3f:c4:b6:2d:33:3e:db:bf:c0:d2:
                    a5:3c:5c:27:d3:53:3c:c2:0a:98:d2:af:f2:bb:06:
                    71:c3:23:c9:aa:23:08:d0:38:0e:07:05:71:16:e6:
                    4d:3d:d0:e4:aa:f8:63:f2:ed:f9:b5:b6:3b:b9:9d:
                    18:8e:e3:b3:a9:cb:58:dc:92:3a:ba:9b:c1:7b:62:
                    c7:93:c0:6e:11:de:a1:3b:b3:33:33:57:1d:cf:28:
                    ca:30:27:44:bc:26:39:1d:16:a4:c7:27:93:66:25:
                    45:37:fa:1d:5e:97:d1:bd:ad:8d:70:ed:14:e4:db:
                    8e:ca:a8:01:01:17:db:a7:18:37:05:dd:5f:7e:5d:
                    a1:dd:b7:db:6e:38:7a:34:18:53:18:bf:79:2b:69:
                    e1:4c:34:a0:f0:a0:94:c3:4d:61:34:8f:d3:99:5c:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FD:DF:44:CE:93:A4:DF:C9:5B:09:BF:AF:ED:49:60:59:CD:1A:E5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/80155113-0f8a-4df8-ade9-aea1361147e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/80155113-0f8a-4df8-ade9-aea1361147e7/880ae601d98f39fcfd69d15097881d485547be56.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.220.0/22
                IPv6:
                  2803:5ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266843

    Signature Algorithm: sha256WithRSAEncryption
         10:01:14:fc:f1:9e:ae:97:e2:4c:36:d2:2a:c1:30:b9:15:76:
         85:61:fd:af:09:7d:d8:f4:b8:b1:a8:31:36:b3:15:93:a1:23:
         03:17:c0:e4:9b:31:3f:36:bb:a5:33:48:6c:9e:f3:58:f5:f6:
         66:e0:48:12:83:0a:65:94:7f:bd:ec:54:45:c8:e5:5a:bb:e1:
         5a:13:5a:fd:75:bc:b7:bb:23:3b:c7:29:80:19:cb:5b:f3:f3:
         91:3a:83:80:8b:6a:77:5b:b3:88:57:69:3c:7e:8a:6d:c7:b9:
         bb:ae:8b:e9:97:5f:4b:9d:28:34:52:39:16:4e:ff:da:5e:b0:
         c8:39:5c:7a:d8:2e:57:47:b6:5f:4e:eb:7a:43:01:de:e2:91:
         6f:0a:79:d7:f8:3b:0c:f9:cc:1c:79:12:90:d5:a7:9b:fd:c8:
         35:41:b9:bf:53:53:b0:85:82:e9:e5:a9:e6:29:1f:97:3d:e0:
         0a:12:b7:68:9f:41:64:ab:59:8f:76:1f:53:53:99:d4:27:50:
         e6:2e:4d:30:90:81:0a:db:a9:b4:fa:09:20:a3:d5:31:22:c4:
         9b:a3:75:b3:3f:9b:19:10:d7:ec:d3:5d:2b:2d:a8:ca:8a:d2:
         b0:aa:c9:3a:80:64:7e:3f:da:91:83:75:fe:7a:5a:a3:d6:ea:
         d3:0e:88:f7
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOPSujANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDMxNjAxMzM0NFoXDTI0MDUwNjE1NTg1
N1owMzExMC8GA1UEAxMoODgwYWU2MDFkOThmMzlmY2ZkNjlkMTUwOTc4ODFkNDg1
NTQ3YmU1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI3Ckj/Ooy49
RuD/7NWuGrXlWV+1aI7uvJb6EnhiNiN4IZRLuyShfxerDFJL3/KpvnVGp96kNul6
EoLBDROt/rualUCJbN7vNOxuI0ShXFa6FXUJPvoGVPLo+xz6LMc/xLYtMz7bv8DS
pTxcJ9NTPMIKmNKv8rsGccMjyaojCNA4DgcFcRbmTT3Q5Kr4Y/Lt+bW2O7mdGI7j
s6nLWNySOrqbwXtix5PAbhHeoTuzMzNXHc8oyjAnRLwmOR0WpMcnk2YlRTf6HV6X
0b2tjXDtFOTbjsqoAQEX26cYNwXdX35dod232244ejQYUxi/eStp4Uw0oPCglMNN
YTSP05lcp5UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRL/d9EzpOk38lbCb+v7Ulg
Wc0a5TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MDE1NTExMy0wZjhh
LTRkZjgtYWRlOS1hZWExMzYxMTQ3ZTcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODAxNTUxMTMtMGY4YS00
ZGY4LWFkZTktYWVhMTM2MTE0N2U3Lzg4MGFlNjAxZDk4ZjM5ZmNmZDY5ZDE1MDk3
ODgxZDQ4NTU0N2JlNTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3u3DANBAIAAjAHAwUAKANcoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEElswDQYJKoZIhvcNAQELBQADggEBABAB
FPzxnq6X4kw20irBMLkVdoVh/a8Jfdj0uLGoMTazFZOhIwMXwOSbMT82u6UzSGye
81j19mbgSBKDCmWUf73sVEXI5Vq74VoTWv11vLe7IzvHKYAZy1vz85E6g4CLandb
s4hXaTx+im3Hubuui+mXX0udKDRSORZO/9pesMg5XHrYLldHtl9O63pDAd7ikW8K
edf4Owz5zBx5EpDVp5v9yDVBub9TU7CFgunlqeYpH5c94AoSt2ifQWSrWY92H1NT
mdQnUOYuTTCQgQrbqbT6CSCj1TEixJujdbM/mxkQ1+zTXSstqMqK0rCqyTqAZH4/
2pGDdf56WqPW6tMOiPc=
-----END CERTIFICATE-----