Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a2c661fed44aca27b04cd7286b07d9802f1c227.cer
File:                     9a2c661fed44aca27b04cd7286b07d9802f1c227.cer (raw, json)
Hash identifier:          t8pzm12xl0JfcDa30N5ruqvuBLc92O7l9l18/BsLM1E=
Subject key identifier:   9D:01:0E:EC:94:19:BF:7C:B8:3D:CF:6E:AB:D8:99:87:A0:C2:4A:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1559F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/9a2c661fed44aca27b04cd7286b07d9802f1c227.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Sep 2021 00:47:00 +0000
Certificate not after:    Fri 12 Apr 2024 22:23:47 +0000
Subordinate resources:    AS: 270033
                          IP: 177.200.236.0/23
                          IP: 2801:15:2800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14767519 (0xe1559f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 00:47:00 2021 GMT
            Not After : Apr 12 22:23:47 2024 GMT
        Subject: CN=9a2c661fed44aca27b04cd7286b07d9802f1c227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:b3:27:93:d2:c4:04:c1:de:47:90:e5:76:
                    cc:38:de:06:b2:42:78:5d:3c:3e:3c:e7:2e:4c:80:
                    b6:a2:64:17:f5:6f:03:62:9b:60:2f:5d:b3:a3:77:
                    98:dc:91:f3:9f:36:e4:55:0c:50:23:03:7f:68:b2:
                    dd:5e:9c:66:46:28:4e:a8:27:f1:ef:19:5e:41:3a:
                    6c:68:9b:7c:51:85:86:12:3b:57:58:0e:7d:9e:25:
                    8d:60:fe:b8:b1:a2:04:27:84:22:cb:90:b8:50:62:
                    13:5b:0f:c1:a4:64:04:fe:d9:3f:66:24:e7:d7:f5:
                    1e:3d:d8:fa:eb:9f:cd:c3:ea:09:03:36:77:24:30:
                    48:53:a7:e6:9e:10:68:99:b4:e0:78:d0:65:d1:f2:
                    03:a8:ea:47:60:0e:dd:b0:c6:63:13:36:1d:c4:cd:
                    77:92:8d:ed:f9:70:23:da:93:3c:81:36:3c:e3:5b:
                    85:f6:6e:f8:93:12:7f:39:79:8e:89:c1:eb:1c:62:
                    cc:69:ff:38:7f:12:ce:61:33:0f:db:81:80:58:f4:
                    af:b2:87:c4:51:71:31:9e:ec:6a:c1:94:25:97:77:
                    5e:c9:01:29:99:c7:36:f9:b2:7a:25:25:7b:67:0b:
                    62:63:4a:c5:62:eb:11:1d:33:40:f5:02:eb:a1:c4:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:0E:EC:94:19:BF:7C:B8:3D:CF:6E:AB:D8:99:87:A0:C2:4A:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/9a2c661fed44aca27b04cd7286b07d9802f1c227.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.236.0/23
                IPv6:
                  2801:15:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270033

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:5a:0b:f7:07:f2:a7:bc:8d:5f:a7:14:e8:c4:7a:c3:92:
         06:aa:d6:6c:0a:92:21:df:3c:01:c2:11:dc:44:4d:98:c6:5e:
         73:ad:74:70:e7:45:c6:11:37:79:4c:e9:ed:64:df:ce:2e:aa:
         21:32:72:f1:92:db:01:bb:c6:de:bd:78:47:39:e4:1b:e1:91:
         f2:ee:d0:cb:17:b5:5c:c2:e4:17:ce:41:7c:49:a0:f6:21:d6:
         9a:23:77:24:be:df:47:d0:19:12:c7:12:1a:f8:fc:f9:03:62:
         ca:0b:b2:6d:c6:60:3e:68:3f:46:4e:54:24:44:cc:1f:7e:2a:
         a8:28:0c:66:be:1c:56:77:de:78:9d:e0:29:48:0c:18:df:5d:
         cf:53:90:be:a9:5c:a5:46:7b:fb:5b:ea:e5:75:fa:a9:7d:b8:
         e0:b7:ba:59:db:87:0e:58:7e:a2:4d:76:2f:9f:72:97:dd:98:
         72:11:49:f9:e9:d8:9d:6f:c2:c2:1f:71:4e:aa:26:00:a9:21:
         c3:aa:8c:50:37:de:c8:cf:bb:2a:7d:c0:80:6e:a6:7c:37:ab:
         49:98:c0:ca:ed:4d:13:f0:4e:b2:91:4e:23:62:d3:35:c1:28:
         54:39:bf:27:e3:78:ae:d6:11:b1:22:0e:51:86:b6:64:9f:c8:
         89:6d:67:81
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOFVnzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDkyMjAwNDcwMFoXDTI0MDQxMjIyMjM0
N1owMzExMC8GA1UEAxMoOWEyYzY2MWZlZDQ0YWNhMjdiMDRjZDcyODZiMDdkOTgw
MmYxYzIyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbJsyeT0sQE
wd5HkOV2zDjeBrJCeF08PjznLkyAtqJkF/VvA2KbYC9ds6N3mNyR85825FUMUCMD
f2iy3V6cZkYoTqgn8e8ZXkE6bGibfFGFhhI7V1gOfZ4ljWD+uLGiBCeEIsuQuFBi
E1sPwaRkBP7ZP2Yk59f1Hj3Y+uufzcPqCQM2dyQwSFOn5p4QaJm04HjQZdHyA6jq
R2AO3bDGYxM2HcTNd5KN7flwI9qTPIE2PONbhfZu+JMSfzl5jonB6xxizGn/OH8S
zmEzD9uBgFj0r7KHxFFxMZ7sasGUJZd3XskBKZnHNvmyeiUle2cLYmNKxWLrER0z
QPUC66HE8ssCAwEAAaOCAwswggMHMB0GA1UdDgQWBBSdAQ7slBm/fLg9z26r2JmH
oMJK0DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84NjA1MzNkYS00NDQx
LTRkNGQtOGY2MC1mYzgxZWZkMDRhMTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODYwNTMzZGEtNDQ0MS00
ZDRkLThmNjAtZmM4MWVmZDA0YTE5LzlhMmM2NjFmZWQ0NGFjYTI3YjA0Y2Q3Mjg2
YjA3ZDk4MDJmMWMyMjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAbHI7DAPBAIAAjAJAwcAKAEAFSgA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQe0TANBgkqhkiG9w0BAQsFAAOCAQEA
R6ZaC/cH8qe8jV+nFOjEesOSBqrWbAqSId88AcIR3ERNmMZec610cOdFxhE3eUzp
7WTfzi6qITJy8ZLbAbvG3r14RznkG+GR8u7Qyxe1XMLkF85BfEmg9iHWmiN3JL7f
R9AZEscSGvj8+QNiyguybcZgPmg/Rk5UJETMH34qqCgMZr4cVnfeeJ3gKUgMGN9d
z1OQvqlcpUZ7+1vq5XX6qX244Le6WduHDlh+ok12L59yl92YchFJ+enYnW/Cwh9x
TqomAKkhw6qMUDfeyM+7Kn3AgG6mfDerSZjAyu1NE/BOspFOI2LTNcEoVDm/J+N4
rtYRsSIOUYa2ZJ/IiW1ngQ==
-----END CERTIFICATE-----