Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/891940c92e5962f377d7880042fabe9dcc03d089.cer
File:                     891940c92e5962f377d7880042fabe9dcc03d089.cer (raw, json)
Hash identifier:          1zW/Aq4E5WWPBz/5XGTUiC/dGC2enjLJ/ZmndWqMD98=
Subject key identifier:   CD:A0:A7:03:75:E8:B0:4F:33:54:57:5D:FB:2C:52:89:02:F4:B9:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFFD63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec31dcfb-d9c1-423f-b658-fa96ff1562aa/891940c92e5962f377d7880042fabe9dcc03d089.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec31dcfb-d9c1-423f-b658-fa96ff1562aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 13:49:11 +0000
Certificate not after:    Wed 19 Jun 2024 21:27:16 +0000
Subordinate resources:    AS: 264757
                          IP: 168.196.0.0/23
                          IP: 168.196.3.0/24
                          IP: 2803:80c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15727971 (0xeffd63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 13:49:11 2022 GMT
            Not After : Jun 19 21:27:16 2024 GMT
        Subject: CN=891940c92e5962f377d7880042fabe9dcc03d089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:e9:8e:61:aa:53:6a:43:b8:4c:9b:20:02:
                    eb:7b:87:11:70:c0:48:77:dc:54:58:26:50:e1:93:
                    5d:b2:a4:b3:17:25:88:02:35:44:88:29:1d:f6:c2:
                    d3:62:cb:a3:1e:36:20:52:7d:08:d7:d5:03:89:d4:
                    26:bf:ce:8f:6b:d2:10:13:32:c3:b9:3e:77:17:d6:
                    9c:2a:49:b3:3d:da:64:19:f4:2f:fe:65:13:db:c8:
                    ef:4a:2f:cb:b5:8e:71:d7:f9:94:1e:ce:c7:4d:1c:
                    33:46:55:67:2d:2f:99:b3:7c:75:0c:e3:c6:f8:dd:
                    c4:ee:65:fc:7b:bf:36:3c:02:4b:02:65:40:e1:04:
                    67:fd:32:3e:17:3b:50:c2:51:a0:ae:75:d0:ad:08:
                    c2:bf:53:97:83:69:31:9a:43:3e:c7:3d:d8:9d:e1:
                    e8:c8:7d:9d:0f:df:f2:04:39:5d:ab:6c:b6:e8:1e:
                    b2:f0:50:10:73:20:54:95:d7:93:44:ad:30:31:9c:
                    6d:93:bf:71:c3:9d:ec:9a:d6:31:c8:5e:f5:a5:65:
                    e4:34:71:7f:32:f2:1d:3b:5c:0d:bb:b5:9b:15:f3:
                    00:2f:aa:09:6b:7c:47:0e:49:59:21:88:f5:b6:6f:
                    6e:33:b1:cd:c6:b2:78:56:5a:30:40:3f:b2:f8:e9:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A0:A7:03:75:E8:B0:4F:33:54:57:5D:FB:2C:52:89:02:F4:B9:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec31dcfb-d9c1-423f-b658-fa96ff1562aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec31dcfb-d9c1-423f-b658-fa96ff1562aa/891940c92e5962f377d7880042fabe9dcc03d089.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.0.0/23
                  168.196.3.0/24
                IPv6:
                  2803:80c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264757

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:bf:ff:3c:cb:e4:fb:3d:00:86:bf:97:b1:0b:9f:7a:f4:
         18:0a:d3:fc:ff:25:c5:ca:fa:b5:af:23:16:39:cb:ad:c6:73:
         81:f8:56:4a:74:d4:70:78:43:ce:ea:70:d3:ef:83:5c:e0:a3:
         54:d9:a5:db:7a:1d:ad:46:0a:53:f1:18:81:a2:02:7b:aa:b9:
         11:72:a9:32:72:ac:d9:f7:f3:d0:22:bd:69:bf:f8:9f:59:5a:
         d5:c3:f8:40:da:a3:74:46:16:04:80:2c:f3:d8:96:b9:35:52:
         b5:61:cc:53:11:f6:b7:d1:ae:0a:e6:ba:e3:1e:08:c8:1f:85:
         d2:29:a5:2d:4e:e8:be:59:b5:06:52:68:ed:f8:cd:82:52:d2:
         8c:f5:03:16:02:93:e8:2a:76:be:b3:9c:ea:62:b1:4d:dc:5a:
         a4:a0:8a:7a:ca:73:36:e0:7c:fd:4f:08:1e:1f:34:2a:00:42:
         fa:4b:bc:28:96:72:75:03:3d:03:12:29:bc:cc:bc:1d:18:51:
         7e:fa:2b:67:4f:bb:80:18:c4:51:b9:42:3d:f9:88:af:71:2f:
         42:7d:fd:c5:03:72:8a:98:1a:e3:ab:18:f6:b3:01:47:44:12:
         56:0c:36:05:45:a7:30:a2:b4:e6:d7:e1:8a:40:09:ec:68:7f:
         6c:b8:3a:69
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAO/9YzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTAwNjEzNDkxMVoXDTI0MDYxOTIxMjcx
NlowMzExMC8GA1UEAxMoODkxOTQwYzkyZTU5NjJmMzc3ZDc4ODAwNDJmYWJlOWRj
YzAzZDA4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJXh6Y5hqlNq
Q7hMmyAC63uHEXDASHfcVFgmUOGTXbKksxcliAI1RIgpHfbC02LLox42IFJ9CNfV
A4nUJr/Oj2vSEBMyw7k+dxfWnCpJsz3aZBn0L/5lE9vI70ovy7WOcdf5lB7Ox00c
M0ZVZy0vmbN8dQzjxvjdxO5l/Hu/NjwCSwJlQOEEZ/0yPhc7UMJRoK510K0Iwr9T
l4NpMZpDPsc92J3h6Mh9nQ/f8gQ5XatstugesvBQEHMgVJXXk0StMDGcbZO/ccOd
7JrWMche9aVl5DRxfzLyHTtcDbu1mxXzAC+qCWt8Rw5JWSGI9bZvbjOxzcayeFZa
MEA/svjpVocCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTNoKcDdeiwTzNUV137LFKJ
AvS5ajAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYzMxZGNmYi1kOWMx
LTQyM2YtYjY1OC1mYTk2ZmYxNTYyYWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWMzMWRjZmItZDljMS00
MjNmLWI2NTgtZmE5NmZmMTU2MmFhLzg5MTk0MGM5MmU1OTYyZjM3N2Q3ODgwMDQy
ZmFiZTlkY2MwM2QwODkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAajEAAMEAKjEAzANBAIAAjAHAwUA
KAOAwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECjUwDQYJKoZIhvcNAQELBQAD
ggEBAE2Jv/88y+T7PQCGv5exC5969BgK0/z/JcXK+rWvIxY5y63Gc4H4Vkp01HB4
Q87qcNPvg1zgo1TZpdt6Ha1GClPxGIGiAnuquRFyqTJyrNn389AivWm/+J9ZWtXD
+EDao3RGFgSALPPYlrk1UrVhzFMR9rfRrgrmuuMeCMgfhdIppS1O6L5ZtQZSaO34
zYJS0oz1AxYCk+gqdr6znOpisU3cWqSginrKczbgfP1PCB4fNCoAQvpLvCiWcnUD
PQMSKbzMvB0YUX76K2dPu4AYxFG5Qj35iK9xL0J9/cUDcoqYGuOrGPazAUdEElYM
NgVFpzCitObX4YpACexof2y4Omk=
-----END CERTIFICATE-----