Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
File:                     9d0eefbeed1a04984bf835792198e2b00880f6fa.cer (raw, json)
Hash identifier:          5x22frqqW49jSEmrnS2fu0Ao3XwteJ0YTg6WQAN96Dc=
Subject key identifier:   1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7AE40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Jan 2021 13:01:09 +0000
Certificate not after:    Wed 29 May 2024 18:32:23 +0000
Subordinate resources:    AS: 270072
                          IP: 131.0.132.0/22
                          IP: 2803:13e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15183424 (0xe7ae40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 28 13:01:09 2021 GMT
            Not After : May 29 18:32:23 2024 GMT
        Subject: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:81:0d:3e:7e:1d:71:06:36:32:86:90:64:0e:
                    2b:06:65:da:bd:a9:1c:f3:38:f5:f2:fc:df:ac:e2:
                    8e:4b:e6:3c:2c:02:ff:9a:ba:48:ed:92:52:39:e9:
                    dc:0d:c3:d5:a7:d9:9a:75:e6:fe:d2:ec:83:18:2f:
                    f4:94:d0:a7:5c:75:c0:31:d5:e4:27:70:96:63:49:
                    03:cd:2a:89:64:8d:1c:24:db:52:e4:84:63:35:19:
                    07:f1:96:d9:2a:9c:06:19:5c:da:b1:65:60:38:df:
                    79:fe:ad:99:2b:90:df:0e:a6:40:55:a7:d3:65:54:
                    5a:51:48:44:a7:26:a5:8e:66:0e:f5:5e:3a:ae:13:
                    11:e4:97:6a:db:e7:34:54:02:a5:55:18:5a:55:34:
                    79:eb:00:ff:fc:cc:4f:9c:02:4b:ba:82:86:86:ca:
                    30:b8:3d:a3:4f:80:d8:0b:30:58:5b:52:ac:74:d3:
                    5a:7c:95:8e:57:7d:fd:51:5b:5b:e2:cd:58:e5:0f:
                    63:9b:98:72:1e:59:61:c2:a6:39:36:a3:ac:89:f2:
                    94:54:66:e6:8b:d7:80:65:28:22:04:af:52:19:9b:
                    db:02:f2:b8:e7:4b:9a:ba:41:ed:35:01:58:97:67:
                    ff:95:bd:b3:0c:a4:b7:76:1d:cf:12:2e:0d:d6:58:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22
                IPv6:
                  2803:13e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270072

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:61:02:7f:f0:21:17:0f:d2:dd:e9:27:53:12:78:63:52:
         f7:68:f0:ee:f5:8a:a2:5e:42:10:e1:19:cf:ee:26:16:5f:1a:
         25:83:d8:4b:2b:87:7c:71:a1:8a:c4:52:6c:3f:b9:27:54:2a:
         59:ee:df:6f:13:bf:17:71:ec:8d:dc:f4:8b:b9:61:06:91:cb:
         92:3b:92:d0:44:cb:99:3b:8f:6a:bb:f7:97:05:94:27:62:0b:
         67:fe:53:8d:ac:8a:c5:84:92:b1:a0:1e:74:c8:3e:19:06:d3:
         96:42:9a:f6:ac:f1:f4:69:fe:1e:9f:e9:a3:ed:f0:24:2a:ae:
         2e:7f:b5:14:eb:ca:21:10:55:6a:0f:6f:54:b3:08:6a:16:e8:
         c1:a5:c2:d1:5e:d1:ab:67:8e:de:97:2a:84:9f:79:b1:8d:0d:
         5d:8d:f2:fc:44:43:c9:80:7d:dd:4f:2f:c7:fc:10:f6:23:2e:
         d9:ea:76:0e:89:72:60:d1:97:3d:3b:93:22:4b:1d:d8:c1:3b:
         bb:47:ff:db:23:03:82:22:ea:3c:c0:df:c3:5a:fa:26:aa:8c:
         10:6c:dc:30:07:d8:5e:f7:94:83:fa:c1:b2:2c:d2:0b:44:dc:
         85:ca:4c:57:77:ef:7a:f5:46:ba:01:10:47:5a:47:7d:e9:ef:
         c2:c1:0c:e3
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOeuQDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDEyODEzMDEwOVoXDTI0MDUyOTE4MzIy
M1owMzExMC8GA1UEAxMoOWQwZWVmYmVlZDFhMDQ5ODRiZjgzNTc5MjE5OGUyYjAw
ODgwZjZmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPCBDT5+HXEG
NjKGkGQOKwZl2r2pHPM49fL836zijkvmPCwC/5q6SO2SUjnp3A3D1afZmnXm/tLs
gxgv9JTQp1x1wDHV5CdwlmNJA80qiWSNHCTbUuSEYzUZB/GW2SqcBhlc2rFlYDjf
ef6tmSuQ3w6mQFWn02VUWlFIRKcmpY5mDvVeOq4TEeSXatvnNFQCpVUYWlU0eesA
//zMT5wCS7qChobKMLg9o0+A2AswWFtSrHTTWnyVjld9/VFbW+LNWOUPY5uYch5Z
YcKmOTajrInylFRm5ovXgGUoIgSvUhmb2wLyuOdLmrpB7TUBWJdn/5W9swykt3Yd
zxIuDdZYdv8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQbATplVgQJRXhoQVlKxB14
Qk18cDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xYzUzYWNjNC0xZDgx
LTQ3MjEtYjBmZi0wOTI0YTBjOGUxZTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWM1M2FjYzQtMWQ4MS00
NzIxLWIwZmYtMDkyNGEwYzhlMWU1LzlkMGVlZmJlZWQxYTA0OTg0YmY4MzU3OTIx
OThlMmIwMDg4MGY2ZmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoMAhDANBAIAAjAHAwUAKAMT4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHvgwDQYJKoZIhvcNAQELBQADggEBAHfB
YQJ/8CEXD9Ld6SdTEnhjUvdo8O71iqJeQhDhGc/uJhZfGiWD2Esrh3xxoYrEUmw/
uSdUKlnu328Tvxdx7I3c9Iu5YQaRy5I7ktBEy5k7j2q795cFlCdiC2f+U42sisWE
krGgHnTIPhkG05ZCmvas8fRp/h6f6aPt8CQqri5/tRTryiEQVWoPb1SzCGoW6MGl
wtFe0atnjt6XKoSfebGNDV2N8vxEQ8mAfd1PL8f8EPYjLtnqdg6JcmDRlz07kyJL
HdjBO7tH/9sjA4Ii6jzA38Na+iaqjBBs3DAH2F73lIP6wbIs0gtE3IXKTFd373r1
RroBEEdaR33p78LBDOM=
-----END CERTIFICATE-----