Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.cer
File:                     8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.cer (raw, json)
Hash identifier:          t+NlYOdDU1Hh8qXwVGyWGR3UEHi/hVYMogiV/34djJk=
Subject key identifier:   5B:98:D0:F7:54:24:AD:81:25:81:F6:98:38:FD:CB:43:3F:B2:9D:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F281EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Apr 2021 17:18:19 +0000
Certificate not after:    Wed 21 Aug 2024 16:38:14 +0000
Subordinate resources:    AS: 271816
                          IP: 45.7.140.0/22
                          IP: 2803:4810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15892972 (0xf281ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 17:18:19 2021 GMT
            Not After : Aug 21 16:38:14 2024 GMT
        Subject: CN=8aec635f7c32dec3e47f35d9bf70a3f73064cc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:96:e3:88:18:04:56:d1:b1:3e:d1:46:05:
                    54:e0:80:a6:2c:67:ef:5b:2c:e6:07:59:b0:20:f6:
                    2a:5a:9e:2c:d7:90:e6:de:4b:51:a7:4f:4f:b2:be:
                    47:bd:8e:9d:d1:1a:64:a3:fc:8c:11:1a:31:bf:5a:
                    f8:2c:7e:fc:42:13:b7:7e:f1:06:a8:4b:76:a8:f1:
                    1e:4c:ac:16:1e:b8:04:74:eb:00:c6:ab:cd:91:ad:
                    b3:87:79:b1:40:7a:74:8c:c0:d0:34:20:6c:84:cd:
                    3d:c8:55:f4:17:c4:78:1f:a9:e4:04:2f:fe:9d:0a:
                    19:ca:07:48:ba:d1:2f:06:6e:ab:14:4b:dc:38:c4:
                    4e:d2:9d:01:4c:fd:92:78:fd:fa:f6:74:19:95:d9:
                    2b:ce:df:fb:05:f4:57:c1:61:4b:90:d9:88:3c:00:
                    ea:93:b8:87:d3:b3:a2:bd:81:dc:2e:99:2b:a5:80:
                    cc:e0:dc:a4:e7:e8:68:77:91:c9:89:57:33:b7:82:
                    1b:8f:c3:03:d5:0e:dc:b1:44:fd:91:0f:76:45:72:
                    0c:a9:55:30:f9:52:82:9c:f0:0b:54:29:7e:35:d4:
                    91:77:9e:68:66:a8:28:d4:9b:af:84:69:03:d4:7b:
                    12:9e:03:27:19:a0:14:d4:ca:2e:3f:f2:e0:4f:0e:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:D0:F7:54:24:AD:81:25:81:F6:98:38:FD:CB:43:3F:B2:9D:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.140.0/22
                IPv6:
                  2803:4810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271816

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:bf:bd:ac:1e:72:0d:02:88:ad:75:63:91:4f:c1:2e:b9:
         4a:26:11:01:03:3e:9a:60:08:05:86:bc:4c:f4:2b:d3:e1:25:
         13:93:76:19:34:ae:f0:d1:c5:ee:cd:49:67:8f:a5:5c:af:31:
         09:83:6e:ef:ec:27:6b:10:37:c3:e5:9a:2b:b0:85:2e:48:48:
         1c:f8:6b:66:72:84:54:f1:79:24:d6:ec:a5:8f:c7:b9:a8:7d:
         32:42:6b:4c:8a:32:c4:69:02:7c:6a:24:30:61:0b:ea:6c:04:
         a8:f0:48:0d:e4:f4:de:2b:02:65:30:46:53:01:53:38:5a:74:
         05:8b:7e:e8:a0:58:78:de:a5:36:05:da:63:af:da:97:16:9e:
         e7:41:9c:57:46:50:6c:aa:32:da:aa:03:f5:ff:57:e7:b1:f4:
         d4:8b:f1:a9:16:8b:a7:22:5d:81:f4:fa:1b:e2:a7:9f:c0:3a:
         a0:f2:ec:68:a9:b7:3f:20:aa:0b:07:ba:be:8d:9a:0e:f7:b0:
         3f:5c:33:10:29:97:2c:84:e2:c3:a1:da:16:93:e9:e7:1e:5a:
         3c:2b:bb:03:33:c5:e1:88:14:35:59:d1:c2:49:bc:f7:d4:8e:
         82:ae:86:92:24:dd:4c:c5:f8:e4:26:9c:7c:29:15:5e:a3:e7:
         78:c0:d1:6d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPKB7DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQxMjE3MTgxOVoXDTI0MDgyMTE2Mzgx
NFowMzExMC8GA1UEAxMoOGFlYzYzNWY3YzMyZGVjM2U0N2YzNWQ5YmY3MGEzZjcz
MDY0Y2MxZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJBpluOIGARW
0bE+0UYFVOCApixn71ss5gdZsCD2KlqeLNeQ5t5LUadPT7K+R72OndEaZKP8jBEa
Mb9a+Cx+/EITt37xBqhLdqjxHkysFh64BHTrAMarzZGts4d5sUB6dIzA0DQgbITN
PchV9BfEeB+p5AQv/p0KGcoHSLrRLwZuqxRL3DjETtKdAUz9knj9+vZ0GZXZK87f
+wX0V8FhS5DZiDwA6pO4h9Ozor2B3C6ZK6WAzODcpOfoaHeRyYlXM7eCG4/DA9UO
3LFE/ZEPdkVyDKlVMPlSgpzwC1QpfjXUkXeeaGaoKNSbr4RpA9R7Ep4DJxmgFNTK
Lj/y4E8Ov68CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRbmND3VCStgSWB9pg4/ctD
P7KdiTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YWMxNzNkZC00NzIy
LTRmN2YtYTllYi1lZWI0YmI5OGFmZTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWFjMTczZGQtNDcyMi00
ZjdmLWE5ZWItZWViNGJiOThhZmUxLzhhZWM2MzVmN2MzMmRlYzNlNDdmMzVkOWJm
NzBhM2Y3MzA2NGNjMWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0HjDANBAIAAjAHAwUAKANIEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJcgwDQYJKoZIhvcNAQELBQADggEBAGs5
v72sHnINAoitdWORT8EuuUomEQEDPppgCAWGvEz0K9PhJROTdhk0rvDRxe7NSWeP
pVyvMQmDbu/sJ2sQN8PlmiuwhS5ISBz4a2ZyhFTxeSTW7KWPx7mofTJCa0yKMsRp
AnxqJDBhC+psBKjwSA3k9N4rAmUwRlMBUzhadAWLfuigWHjepTYF2mOv2pcWnudB
nFdGUGyqMtqqA/X/V+ex9NSL8akWi6ciXYH0+hvip5/AOqDy7Giptz8gqgsHur6N
mg73sD9cMxAplyyE4sOh2haT6eceWjwruwMzxeGIFDVZ0cJJvPfUjoKuhpIk3UzF
+OQmnHwpFV6j53jA0W0=
-----END CERTIFICATE-----