Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer
File:                     a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer (raw, json)
Hash identifier:          9npedU3YbRoI5ptekjYPn/PJGWM+Scj1mg7ixHE9RcA=
Subject key identifier:   E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D79180
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Oct 2021 16:06:19 +0000
Certificate not after:    Tue 19 Dec 2023 13:40:08 +0000
Subordinate resources:    AS: 271864
                          IP: 190.113.32.0/22
                          IP: 2803:b410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14127488 (0xd79180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  1 16:06:19 2021 GMT
            Not After : Dec 19 13:40:08 2023 GMT
        Subject: CN=a421ae9f935de1a361bde176bcfb6a5e99b7b1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:10:dd:d7:30:de:4a:e0:12:2f:3b:14:1a:
                    03:98:2d:13:a1:1e:c3:3d:09:dd:ee:02:1f:a0:18:
                    a5:41:78:1b:fd:9c:8c:60:c4:aa:8b:14:eb:46:30:
                    51:7c:c5:42:37:0c:22:ad:66:b3:88:7c:bd:40:b6:
                    e1:2d:37:80:13:99:1e:39:ea:3c:5d:8e:15:9d:30:
                    1a:8c:2d:04:ec:69:4b:a7:9b:2c:cc:15:c1:ad:5b:
                    d6:44:a1:98:81:c0:9e:60:ea:f0:48:79:64:8c:fe:
                    49:14:42:c4:08:22:11:16:b5:b7:96:e4:7b:05:35:
                    22:18:d3:80:6e:36:1c:16:83:0e:d6:33:28:cd:75:
                    16:05:87:e1:fe:ec:75:ed:8b:fe:09:d2:d8:e9:c8:
                    80:a0:0b:6a:ec:2c:53:e9:51:e6:f9:7e:7b:8e:36:
                    23:76:34:69:30:60:86:3a:06:e6:5e:37:52:45:c0:
                    35:ba:e7:07:3c:30:be:8e:a4:14:30:52:f8:25:01:
                    40:5f:64:76:ba:b3:fe:cb:6d:de:9f:73:fe:e9:10:
                    dd:5e:93:a9:1b:c8:25:aa:fe:5b:0c:af:c9:9b:d8:
                    06:ae:d9:08:e4:90:3a:ce:2f:77:0e:c3:f9:ef:c0:
                    af:fd:c0:c1:08:cf:5e:8c:7a:ad:78:2b:e8:71:79:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.32.0/22
                IPv6:
                  2803:b410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271864

    Signature Algorithm: sha256WithRSAEncryption
         58:40:b1:0d:1e:8a:06:2a:ac:b4:5a:2c:83:0d:6e:9c:80:6b:
         f7:0e:8b:5a:8a:9c:04:0d:e1:3d:bc:06:27:e5:ef:46:c3:7d:
         36:b2:73:1a:72:1f:ad:a9:b9:3f:d5:c4:18:c3:be:2e:80:28:
         c9:47:27:13:d8:40:4b:35:8a:15:12:7b:51:24:41:84:55:d6:
         81:a8:85:40:dc:4d:57:99:b2:39:f5:10:87:e4:bd:0c:fc:3d:
         30:fb:b4:21:5f:77:8f:d6:58:69:75:2c:5e:73:87:43:de:8f:
         36:ca:b9:85:d1:c0:ce:9d:49:4b:b8:e0:86:58:cb:d2:15:ac:
         e0:ac:d1:f1:32:6c:98:e2:48:5a:eb:17:50:81:1b:64:83:77:
         14:24:dc:98:e0:6c:ce:3f:12:36:0c:e1:71:70:72:6f:45:2a:
         37:fd:4e:1d:a1:e0:96:16:61:a0:b6:9c:57:d1:fe:a1:ee:a3:
         e0:66:4c:15:b3:bc:f1:cc:93:d0:2a:10:ec:5e:fe:1a:1a:41:
         ed:a5:c7:4c:39:8c:8c:dc:03:1a:eb:46:59:75:ae:6f:7d:cb:
         8a:9d:0d:68:c9:d5:82:bc:ba:57:12:4b:e5:7f:d1:fe:93:dc:
         99:54:53:3f:1a:50:d7:d9:61:d5:86:d4:5f:12:d6:1e:06:b9:
         8d:cd:8d:58
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANeRgDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAwMTE2MDYxOVoXDTIzMTIxOTEzNDAw
OFowMzExMC8GA1UEAxMoYTQyMWFlOWY5MzVkZTFhMzYxYmRlMTc2YmNmYjZhNWU5
OWI3YjFjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI68EN3XMN5K
4BIvOxQaA5gtE6Eewz0J3e4CH6AYpUF4G/2cjGDEqosU60YwUXzFQjcMIq1ms4h8
vUC24S03gBOZHjnqPF2OFZ0wGowtBOxpS6ebLMwVwa1b1kShmIHAnmDq8Eh5ZIz+
SRRCxAgiERa1t5bkewU1IhjTgG42HBaDDtYzKM11FgWH4f7sde2L/gnS2OnIgKAL
auwsU+lR5vl+e442I3Y0aTBghjoG5l43UkXANbrnBzwwvo6kFDBS+CUBQF9kdrqz
/stt3p9z/ukQ3V6TqRvIJar+WwyvyZvYBq7ZCOSQOs4vdw7D+e/Ar/3AwQjPXox6
rXgr6HF5RD8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBThjxuTQZOCaj3Tc7JCOrrY
354+fjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNTMyNzMxOC04ZTA0
LTQxZTQtODMxOS1hMGFmMmY4ZWY5YzYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzUzMjczMTgtOGUwNC00
MWU0LTgzMTktYTBhZjJmOGVmOWM2L2E0MjFhZTlmOTM1ZGUxYTM2MWJkZTE3NmJj
ZmI2YTVlOTliN2IxY2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5xIDANBAIAAjAHAwUAKAO0EDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJfgwDQYJKoZIhvcNAQELBQADggEBAFhA
sQ0eigYqrLRaLIMNbpyAa/cOi1qKnAQN4T28Bifl70bDfTaycxpyH62puT/VxBjD
vi6AKMlHJxPYQEs1ihUSe1EkQYRV1oGohUDcTVeZsjn1EIfkvQz8PTD7tCFfd4/W
WGl1LF5zh0PejzbKuYXRwM6dSUu44IZYy9IVrOCs0fEybJjiSFrrF1CBG2SDdxQk
3JjgbM4/EjYM4XFwcm9FKjf9Th2h4JYWYaC2nFfR/qHuo+BmTBWzvPHMk9AqEOxe
/hoaQe2lx0w5jIzcAxrrRll1rm99y4qdDWjJ1YK8ulcSS+V/0f6T3JlUUz8aUNfZ
YdWG1F8S1h4GuY3NjVg=
-----END CERTIFICATE-----