Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
File:                     8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer (raw, json)
Hash identifier:          Safg6cfzvjPZ2z+GJ1HsnhwCcnKKLNaKk1D8SV/dwJw=
Subject key identifier:   D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC0903
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Jun 2021 02:18:22 +0000
Certificate not after:    Mon 01 Jul 2024 21:56:27 +0000
Subordinate resources:    AS: 263833
                          AS: 264613
                          IP: 138.255.168.0/22
                          IP: 2803:8640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15468803 (0xec0903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  4 02:18:22 2021 GMT
            Not After : Jul  1 21:56:27 2024 GMT
        Subject: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:2c:f5:c8:f6:38:2d:72:23:4b:ca:d1:ac:
                    21:b9:74:4c:63:30:07:7a:2a:49:66:20:18:15:d7:
                    db:39:44:43:03:3a:11:6b:c9:b8:1c:b8:dd:d1:5e:
                    86:04:d5:5a:a9:27:b9:54:55:20:10:4e:31:f6:a0:
                    9e:fd:0d:aa:96:88:ba:b4:d1:90:a6:80:38:4e:bd:
                    31:55:8f:81:fa:fc:43:2c:fe:8d:20:e3:49:27:be:
                    53:2d:6d:21:c3:fa:05:07:58:d8:dc:1f:5e:6a:3f:
                    b9:81:96:f7:14:58:02:c5:23:66:db:e4:fa:4f:53:
                    56:f5:bf:2d:64:33:00:b3:55:c3:cc:30:7c:df:a1:
                    d3:5d:1a:8c:b8:56:c2:3f:53:9b:bf:21:34:60:39:
                    e8:c3:2d:66:3b:7f:60:5e:b0:97:86:ee:92:6d:dd:
                    76:ae:e6:92:ef:9a:23:92:db:41:fa:fa:91:e8:08:
                    79:09:af:da:99:53:d4:25:9d:d1:5f:1b:59:97:38:
                    03:4d:d2:63:0a:0c:0c:e7:04:3f:87:79:49:83:fb:
                    d1:0d:e3:9c:7e:85:61:1c:83:7e:a4:f8:88:05:c5:
                    7a:3a:98:ef:d7:aa:bd:8a:1e:15:3e:5b:36:1d:30:
                    c0:e2:f7:74:45:38:9c:61:f0:20:2b:8d:70:94:7c:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/22
                IPv6:
                  2803:8640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263833
                  264613

    Signature Algorithm: sha256WithRSAEncryption
         95:42:a9:35:f4:de:27:41:4b:59:e7:ab:d4:3f:06:58:70:08:
         7e:05:16:18:00:40:ca:7e:4a:09:32:94:13:95:06:78:4a:53:
         b5:8d:f9:5a:09:b0:38:96:01:32:07:4d:b6:c7:66:2d:ae:e9:
         27:9d:98:db:16:13:91:c9:5c:78:00:dc:41:38:58:08:ef:be:
         a1:35:bc:a8:16:4d:5f:49:1e:05:da:17:7c:a6:ac:ea:b0:b4:
         00:60:78:db:f9:4c:c5:08:66:78:46:aa:ed:13:d9:dd:d5:32:
         29:81:b6:9a:14:86:51:a7:de:c2:43:6a:e3:91:5d:54:25:2e:
         ba:e6:95:0a:7e:cc:19:a0:99:11:6c:1d:c8:b5:e0:eb:c3:ad:
         8e:66:16:39:06:47:86:54:55:a6:fc:e8:75:20:8f:65:02:b0:
         3e:0b:67:d8:d8:dd:4a:ac:a6:e9:81:3b:cf:0e:99:88:43:05:
         ef:49:59:9b:ef:ed:fb:58:f4:50:e6:26:7e:73:e6:99:d6:73:
         c3:cb:34:ed:3d:34:fd:a7:07:72:a6:a3:cc:21:c3:86:7c:d9:
         c9:67:91:36:8a:fd:23:74:a8:ed:75:3a:bb:2b:98:0b:93:22:
         cb:ec:d5:09:83:8c:66:60:17:45:51:75:23:a2:dd:0f:32:0f:
         32:1a:7e:7b
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAOwJAzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDYwNDAyMTgyMloXDTI0MDcwMTIxNTYy
N1owMzExMC8GA1UEAxMoOGQ1NWVjOTBlOGI2ZTVlY2E2YTQwNjBhOWExODUzMmZl
MWYzOTFiNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYjLPXI9jgt
ciNLytGsIbl0TGMwB3oqSWYgGBXX2zlEQwM6EWvJuBy43dFehgTVWqknuVRVIBBO
Mfagnv0NqpaIurTRkKaAOE69MVWPgfr8Qyz+jSDjSSe+Uy1tIcP6BQdY2NwfXmo/
uYGW9xRYAsUjZtvk+k9TVvW/LWQzALNVw8wwfN+h010ajLhWwj9Tm78hNGA56MMt
Zjt/YF6wl4bukm3ddq7mku+aI5LbQfr6kegIeQmv2plT1CWd0V8bWZc4A03SYwoM
DOcEP4d5SYP70Q3jnH6FYRyDfqT4iAXFejqY79eqvYoeFT5bNh0wwOL3dEU4nGHw
ICuNcJR8RckCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBTZW7dbzNaEgYIwkq/lp5Z3
nYkbYzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kZWJiNjFjMC02NDAw
LTQ2ZDItYTQxYy03MzQ2YTgwZmUwNWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZGViYjYxYzAtNjQwMC00
NmQyLWE0MWMtNzM0NmE4MGZlMDVjLzhkNTVlYzkwZThiNmU1ZWNhNmE0MDYwYTlh
MTg1MzJmZTFmMzkxYjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAor/qDANBAIAAjAHAwUAKAOGQDAf
BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEBpkCAwQJpTANBgkqhkiG9w0BAQsFAAOC
AQEAlUKpNfTeJ0FLWeer1D8GWHAIfgUWGABAyn5KCTKUE5UGeEpTtY35WgmwOJYB
MgdNtsdmLa7pJ52Y2xYTkclceADcQThYCO++oTW8qBZNX0keBdoXfKas6rC0AGB4
2/lMxQhmeEaq7RPZ3dUyKYG2mhSGUafewkNq45FdVCUuuuaVCn7MGaCZEWwdyLXg
68OtjmYWOQZHhlRVpvzodSCPZQKwPgtn2NjdSqym6YE7zw6ZiEMF70lZm+/t+1j0
UOYmfnPmmdZzw8s07T00/acHcqajzCHDhnzZyWeRNor9I3So7XU6uyuYC5Miy+zV
CYOMZmAXRVF1I6LdDzIPMhp+ew==
-----END CERTIFICATE-----