Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer
File:                     9d5f7256141d4f6ae5e5a02600389ee713736db9.cer (raw, json)
Hash identifier:          zInhN4ivmKsz0GOMyEeZSYVX6uREy9bQYFoYJrLqTak=
Subject key identifier:   1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB7BD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/9d5f7256141d4f6ae5e5a02600389ee713736db9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Nov 2021 15:43:26 +0000
Certificate not after:    Thu 27 Jun 2024 18:39:47 +0000
Subordinate resources:    IP: 131.108.4.0/22
                          IP: 2803:bd80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15432664 (0xeb7bd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 15:43:26 2021 GMT
            Not After : Jun 27 18:39:47 2024 GMT
        Subject: CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:af:96:e4:35:c7:b7:95:e3:41:8f:34:79:
                    27:8c:f7:bd:a4:47:3a:21:4e:e9:dd:61:bc:5b:d3:
                    bf:4a:c1:f9:d9:87:82:39:20:04:ff:4c:23:00:42:
                    98:d3:b4:76:24:5b:73:6f:a7:40:d0:a4:75:a8:d0:
                    6b:31:dc:b2:93:2f:f7:39:cf:1d:f3:4a:d9:7b:68:
                    94:38:fa:10:fc:84:ad:12:6b:3d:21:b2:f7:ae:b4:
                    1b:10:9a:8f:f8:47:f9:a6:b7:f9:b7:fb:2c:56:3f:
                    3c:d7:06:33:3e:68:78:c0:55:37:2b:05:ff:46:bf:
                    e1:1a:07:14:51:54:8d:f3:f3:bd:99:6e:6b:04:b5:
                    02:74:5e:76:b4:09:8b:d0:dd:d9:ab:fb:e4:70:bb:
                    b8:97:74:84:8d:bf:e1:6c:e5:ad:f3:bc:5a:a0:dd:
                    44:db:6a:51:d6:ef:d3:bc:2f:d0:f4:85:5a:bf:fb:
                    34:99:ec:b7:17:55:b6:38:e0:79:82:30:11:b4:6c:
                    06:da:f0:9e:a3:35:f2:a4:d6:b6:ed:22:75:b6:65:
                    cf:96:08:96:a7:14:d4:6e:a2:b8:c6:fa:5b:05:af:
                    9a:96:29:66:2a:2c:46:21:0c:9c:fe:45:2b:ae:d6:
                    11:ab:90:6e:f0:91:72:11:b5:2f:d5:67:08:28:ff:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/9d5f7256141d4f6ae5e5a02600389ee713736db9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:49:21:51:bb:92:c9:29:c3:66:f9:37:8f:11:3a:c5:be:
         de:7b:85:d1:2f:30:88:88:48:d8:3a:ed:a8:44:83:9b:df:9c:
         9e:20:0a:d1:c2:b5:32:2c:d5:4d:d5:4b:7f:47:f2:fb:75:17:
         ab:bf:61:ca:0f:b9:60:c4:6a:65:e0:68:b7:1a:b9:b5:00:b2:
         7b:e1:4d:16:9b:4a:d9:b7:43:a4:97:98:91:68:37:2c:77:02:
         78:14:f9:e4:b4:09:d3:0d:fd:11:58:29:f5:3e:af:18:28:39:
         1f:d9:6a:62:d4:92:be:12:00:36:99:06:8e:ff:7d:a5:7c:fb:
         d3:37:de:d2:c3:fc:3b:13:47:93:b2:b0:6a:a0:70:f1:eb:d4:
         be:ac:4f:78:7c:a2:90:cd:bf:08:59:b8:7b:a6:20:5b:a4:da:
         62:7c:1a:07:3a:0d:6e:ef:31:4c:64:ce:f0:81:18:dc:62:7d:
         b0:0c:17:51:12:ce:dc:e2:b6:8b:0b:4d:3e:82:84:5b:80:f8:
         b3:4f:6d:38:32:5f:0b:3f:b1:74:46:d4:6d:63:f7:b6:f9:6d:
         e4:c4:5b:0a:a8:58:0a:68:07:bc:66:08:93:a8:9c:7c:ae:dc:
         f1:db:4b:e3:6b:5c:8f:78:98:30:0b:e4:ef:2f:19:83:f1:41:
         50:63:61:75
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOt72DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTExMTE1NDMyNloXDTI0MDYyNzE4Mzk0
N1owMzExMC8GA1UEAxMoOWQ1ZjcyNTYxNDFkNGY2YWU1ZTVhMDI2MDAzODllZTcx
MzczNmRiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIfIr5bkNce3
leNBjzR5J4z3vaRHOiFO6d1hvFvTv0rB+dmHgjkgBP9MIwBCmNO0diRbc2+nQNCk
dajQazHcspMv9znPHfNK2XtolDj6EPyErRJrPSGy9660GxCaj/hH+aa3+bf7LFY/
PNcGMz5oeMBVNysF/0a/4RoHFFFUjfPzvZluawS1AnRedrQJi9Dd2av75HC7uJd0
hI2/4WzlrfO8WqDdRNtqUdbv07wv0PSFWr/7NJnstxdVtjjgeYIwEbRsBtrwnqM1
8qTWtu0idbZlz5YIlqcU1G6iuMb6WwWvmpYpZiosRiEMnP5FK67WEauQbvCRchG1
L9VnCCj/IZ8CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQftYJa3B9fhIo1siGK2eyU
XI62oDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMzRhYjEwNy0wOTgx
LTRhYTctYjFlYi1jOTM0ZjVmY2YxMGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTM0YWIxMDctMDk4MS00
YWE3LWIxZWItYzkzNGY1ZmNmMTBlLzlkNWY3MjU2MTQxZDRmNmFlNWU1YTAyNjAw
Mzg5ZWU3MTM3MzZkYjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoNsBDANBAIAAjAHAwUAKAO9gDAN
BgkqhkiG9w0BAQsFAAOCAQEArdtJIVG7kskpw2b5N48ROsW+3nuF0S8wiIhI2Drt
qESDm9+cniAK0cK1MizVTdVLf0fy+3UXq79hyg+5YMRqZeBotxq5tQCye+FNFptK
2bdDpJeYkWg3LHcCeBT55LQJ0w39EVgp9T6vGCg5H9lqYtSSvhIANpkGjv99pXz7
0zfe0sP8OxNHk7KwaqBw8evUvqxPeHyikM2/CFm4e6YgW6TaYnwaBzoNbu8xTGTO
8IEY3GJ9sAwXURLO3OK2iwtNPoKEW4D4s09tODJfCz+xdEbUbWP3tvlt5MRbCqhY
CmgHvGYIk6icfK7c8dtL42tcj3iYMAvk7y8Zg/FBUGNhdQ==
-----END CERTIFICATE-----