Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91d676ceb241b8e6b81173c637573a1e5a9f5482.cer
File:                     91d676ceb241b8e6b81173c637573a1e5a9f5482.cer (raw, json)
Hash identifier:          5I9mVk1DUxiJWuU4JyQQP7tES8C78MJC4TmzpgdvqnU=
Subject key identifier:   B5:D9:DA:3E:A4:F0:C4:FE:E4:70:5D:1E:CD:E1:E9:61:6E:98:00:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1ACCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/91d676ceb241b8e6b81173c637573a1e5a9f5482.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Feb 2021 19:23:10 +0000
Certificate not after:    Tue 13 Aug 2024 16:59:36 +0000
Subordinate resources:    AS: 64099
                          IP: 143.202.144.0/22
                          IP: 2803:1e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15838412 (0xf1accc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 11 19:23:10 2021 GMT
            Not After : Aug 13 16:59:36 2024 GMT
        Subject: CN=91d676ceb241b8e6b81173c637573a1e5a9f5482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:a2:e0:4c:28:1c:4b:d4:06:6f:12:fe:c6:
                    b3:01:a0:e1:6d:6b:6e:8d:20:77:16:07:40:ef:ee:
                    91:03:bb:32:88:59:28:47:3c:0a:6c:4c:84:62:b5:
                    7c:d4:09:1e:8b:e9:af:20:94:71:00:4a:7d:d8:17:
                    6a:bf:62:ba:e2:e1:4f:d5:35:3f:52:f2:05:aa:ca:
                    07:22:4c:7c:5b:39:ab:53:57:94:1b:f8:21:46:62:
                    7b:e7:3d:2f:42:ba:52:d0:26:b7:a6:1a:d9:d0:b3:
                    fa:28:03:d6:3c:da:63:09:a6:17:67:b3:d2:1f:19:
                    6d:e2:c2:54:bc:8c:ce:98:08:70:73:ad:b3:a6:9d:
                    f0:0c:4c:34:06:19:39:28:94:58:2a:9c:35:f4:63:
                    04:c4:2c:8d:1d:99:dd:ad:6b:f0:93:ee:20:64:b8:
                    ed:58:6c:87:e7:f2:94:a0:6d:80:11:df:fa:3b:27:
                    91:1b:ef:bc:0a:0f:8c:fd:e8:24:5e:f3:32:4c:1a:
                    f8:40:56:3e:64:48:5d:d1:14:fb:7c:a1:78:8f:d0:
                    0c:fb:ed:33:4e:72:39:54:fa:97:42:d1:42:ff:fc:
                    a5:42:36:f7:31:cd:17:38:5e:22:6b:df:4d:f0:50:
                    00:42:f2:3f:99:63:1e:86:c2:51:89:b5:9e:18:96:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D9:DA:3E:A4:F0:C4:FE:E4:70:5D:1E:CD:E1:E9:61:6E:98:00:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/91d676ceb241b8e6b81173c637573a1e5a9f5482.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.144.0/22
                IPv6:
                  2803:1e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64099

    Signature Algorithm: sha256WithRSAEncryption
         86:57:b5:3c:69:ba:4b:8d:11:6a:79:b8:dd:4b:0d:46:19:66:
         df:01:86:3b:af:b2:f7:d5:9a:d5:4f:f5:a5:dc:c6:72:f0:40:
         ef:97:d7:2a:a4:28:38:5a:43:4b:53:07:3b:ea:8d:fd:ce:12:
         ec:88:2e:f3:75:62:e5:e8:e6:79:bb:a8:cc:88:fb:0a:09:f0:
         82:bc:6b:7f:10:51:74:c3:28:d1:4f:4e:82:bf:2c:3c:bb:50:
         fc:72:4f:38:ff:92:ad:b6:c7:9e:f1:49:12:11:fe:c6:b8:37:
         fc:26:09:6e:b5:cd:19:7f:08:38:4e:be:ac:ee:e3:68:99:11:
         a1:b8:8f:8a:4b:89:97:b6:7d:47:10:d5:91:c6:fb:6b:60:fd:
         23:fb:2b:30:07:9a:16:91:75:11:51:71:ec:77:34:35:05:d4:
         8b:36:40:bb:c8:b1:b9:0f:50:d4:f1:1c:ff:57:fc:77:a1:34:
         76:7b:57:1e:72:26:54:9f:f7:a8:c9:7b:1b:49:f5:35:31:29:
         29:44:7b:81:2a:ce:e8:be:f3:6d:7e:66:db:cc:43:3e:72:03:
         0c:12:f2:7b:51:15:08:f6:83:27:90:7a:01:e5:f8:c2:f6:69:
         b4:bf:f9:42:0f:e9:22:da:17:34:4a:5d:de:fc:a1:ba:28:fe:
         56:a3:6d:8a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPGszDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIxMTE5MjMxMFoXDTI0MDgxMzE2NTkz
NlowMzExMC8GA1UEAxMoOTFkNjc2Y2ViMjQxYjhlNmI4MTE3M2M2Mzc1NzNhMWU1
YTlmNTQ4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCxouBMKBxL
1AZvEv7GswGg4W1rbo0gdxYHQO/ukQO7MohZKEc8CmxMhGK1fNQJHovpryCUcQBK
fdgXar9iuuLhT9U1P1LyBarKByJMfFs5q1NXlBv4IUZie+c9L0K6UtAmt6Ya2dCz
+igD1jzaYwmmF2ez0h8ZbeLCVLyMzpgIcHOts6ad8AxMNAYZOSiUWCqcNfRjBMQs
jR2Z3a1r8JPuIGS47Vhsh+fylKBtgBHf+jsnkRvvvAoPjP3oJF7zMkwa+EBWPmRI
XdEU+3yheI/QDPvtM05yOVT6l0LRQv/8pUI29zHNFzheImvfTfBQAELyP5ljHobC
UYm1nhiWZCECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS12do+pPDE/uRwXR7N4elh
bpgAgDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNWI0YjAzZC0wODgw
LTQ4M2YtYjQ5ZS05NGM5Mzk3ODVkNWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjViNGIwM2QtMDg4MC00
ODNmLWI0OWUtOTRjOTM5Nzg1ZDVhLzkxZDY3NmNlYjI0MWI4ZTZiODExNzNjNjM3
NTczYTFlNWE5ZjU0ODIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo/KkDANBAIAAjAHAwUAKAMeQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+mMwDQYJKoZIhvcNAQELBQADggEBAIZX
tTxpukuNEWp5uN1LDUYZZt8BhjuvsvfVmtVP9aXcxnLwQO+X1yqkKDhaQ0tTBzvq
jf3OEuyILvN1YuXo5nm7qMyI+woJ8IK8a38QUXTDKNFPToK/LDy7UPxyTzj/kq22
x57xSRIR/sa4N/wmCW61zRl/CDhOvqzu42iZEaG4j4pLiZe2fUcQ1ZHG+2tg/SP7
KzAHmhaRdRFRcex3NDUF1Is2QLvIsbkPUNTxHP9X/HehNHZ7Vx5yJlSf96jJextJ
9TUxKSlEe4Eqzui+821+ZtvMQz5yAwwS8ntRFQj2gyeQegHl+ML2abS/+UIP6SLa
FzRKXd78oboo/lajbYo=
-----END CERTIFICATE-----