Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba98f92d75773ce486003b4ad13562a026abb7d.cer
File:                     aba98f92d75773ce486003b4ad13562a026abb7d.cer (raw, json)
Hash identifier:          AcJDQQPVGjtbfhowZu5VPlekGrLr3ZJjm31wQCpa1Jg=
Subject key identifier:   B8:74:DC:AD:16:7A:F2:9F:BD:95:C4:AB:16:7C:B1:C0:B3:82:09:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCD01B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/aba98f92d75773ce486003b4ad13562a026abb7d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Nov 2021 18:41:46 +0000
Certificate not after:    Fri 23 Feb 2024 00:27:03 +0000
Subordinate resources:    IP: 45.174.228.0/22
                          IP: 2806:32c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14471195 (0xdcd01b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 16 18:41:46 2021 GMT
            Not After : Feb 23 00:27:03 2024 GMT
        Subject: CN=aba98f92d75773ce486003b4ad13562a026abb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:51:69:5e:e5:07:69:20:b5:2b:f2:f4:7f:
                    11:48:db:39:99:17:7c:3b:d5:22:b0:a0:3d:12:50:
                    0d:ee:03:10:90:ad:41:63:bb:55:f6:06:0f:b7:4f:
                    c8:d5:e3:03:22:77:31:27:a5:bd:a0:de:2c:ea:d8:
                    ce:ac:09:a5:0e:f0:25:fb:3d:9a:b6:21:e8:27:03:
                    5a:5b:09:7c:a6:4d:66:ed:98:b1:96:be:24:e9:87:
                    fd:6d:01:bb:32:44:c8:96:84:a7:06:0e:27:86:5a:
                    28:2b:54:99:5d:b0:c2:52:9a:95:5c:4f:af:94:25:
                    90:cb:36:1f:97:64:bd:c7:65:ea:15:c4:66:33:aa:
                    80:f1:f7:7e:5c:01:cc:e7:2c:28:9e:44:05:e8:46:
                    1c:af:5c:b3:d0:7c:fd:1a:d6:8d:b2:18:5a:3f:50:
                    b2:58:84:6c:f8:9a:5b:ac:2c:43:b9:08:97:72:2f:
                    fe:1b:4d:3a:27:cb:8c:bf:3f:d7:3c:ca:aa:f5:08:
                    bb:55:54:d3:f5:ce:47:04:be:67:e9:0f:82:4b:ef:
                    10:b6:ea:c3:e9:ac:75:28:39:83:0d:9c:9d:43:a0:
                    69:3a:20:dd:e9:77:05:36:18:d9:b9:d5:7e:f6:e6:
                    c8:c2:d8:35:be:6f:d2:6c:eb:cf:56:cf:d1:32:c9:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:74:DC:AD:16:7A:F2:9F:BD:95:C4:AB:16:7C:B1:C0:B3:82:09:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/aba98f92d75773ce486003b4ad13562a026abb7d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.228.0/22
                IPv6:
                  2806:32c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:af:cb:f7:2f:3b:49:b1:13:75:46:5a:6a:66:86:b1:e9:c7:
         f9:cf:b4:fd:0a:b1:19:f0:9c:48:9d:30:93:9a:b7:c7:09:4d:
         f2:09:1a:2a:bb:95:53:e7:12:4f:60:66:38:e3:4f:ea:22:4c:
         24:79:34:84:fb:60:d8:fc:ba:ec:45:a4:74:c7:9d:8a:bb:1c:
         1f:15:19:3f:0f:4d:dc:b7:57:66:29:b2:64:aa:95:82:0a:d2:
         23:9b:9a:85:ff:48:8d:7d:2f:c3:5a:c4:d6:a3:d9:d4:28:14:
         59:b1:0b:56:a1:47:93:9d:86:fc:e1:9b:5c:bb:48:8e:cd:b3:
         30:b1:b0:22:61:69:64:a8:dc:de:c6:0f:21:53:60:41:96:d2:
         96:8a:be:4e:5c:f7:54:b2:b1:48:09:82:47:eb:25:0a:9e:ce:
         d3:b5:0a:bb:60:7a:5d:68:a8:29:7a:61:dc:1a:e4:27:1a:cd:
         ae:58:76:7d:ea:d1:3c:9d:1a:7b:4e:b0:8c:71:6a:1b:6b:82:
         07:88:3f:55:8a:e7:d1:a3:a0:51:95:18:b6:79:ec:f3:7c:cb:
         9b:d9:8d:0e:ce:3f:09:5f:99:ab:0a:cd:b6:c3:90:a0:6d:4c:
         0f:47:32:d4:2f:24:66:d2:80:cb:ed:70:d9:b0:02:38:44:24:
         1a:23:10:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEANzQGzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTExNjE4NDE0NloXDTI0MDIyMzAwMjcw
M1owMzExMC8GA1UEAxMoYWJhOThmOTJkNzU3NzNjZTQ4NjAwM2I0YWQxMzU2MmEw
MjZhYmI3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKF2UWle5Qdp
ILUr8vR/EUjbOZkXfDvVIrCgPRJQDe4DEJCtQWO7VfYGD7dPyNXjAyJ3MSelvaDe
LOrYzqwJpQ7wJfs9mrYh6CcDWlsJfKZNZu2YsZa+JOmH/W0BuzJEyJaEpwYOJ4Za
KCtUmV2wwlKalVxPr5QlkMs2H5dkvcdl6hXEZjOqgPH3flwBzOcsKJ5EBehGHK9c
s9B8/RrWjbIYWj9QsliEbPiaW6wsQ7kIl3Iv/htNOifLjL8/1zzKqvUIu1VU0/XO
RwS+Z+kPgkvvELbqw+msdSg5gw2cnUOgaTog3el3BTYY2bnVfvbmyMLYNb5v0mzr
z1bP0TLJLKsCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBS4dNytFnryn72VxKsWfLHA
s4IJyDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NjIzYzIzZC1hMDdl
LTQyODEtYmFmYi1mNDA3NDkyM2E3MzMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjYyM2MyM2QtYTA3ZS00
MjgxLWJhZmItZjQwNzQ5MjNhNzMzL2FiYTk4ZjkyZDc1NzczY2U0ODYwMDNiNGFk
MTM1NjJhMDI2YWJiN2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2u5DANBAIAAjAHAwUAKAYDLDAN
BgkqhkiG9w0BAQsFAAOCAQEAma/L9y87SbETdUZaamaGsenH+c+0/QqxGfCcSJ0w
k5q3xwlN8gkaKruVU+cST2BmOONP6iJMJHk0hPtg2Py67EWkdMedirscHxUZPw9N
3LdXZimyZKqVggrSI5uahf9IjX0vw1rE1qPZ1CgUWbELVqFHk52G/OGbXLtIjs2z
MLGwImFpZKjc3sYPIVNgQZbSloq+Tlz3VLKxSAmCR+slCp7O07UKu2B6XWioKXph
3BrkJxrNrlh2ferRPJ0ae06wjHFqG2uCB4g/VYrn0aOgUZUYtnns83zLm9mNDs4/
CV+ZqwrNtsOQoG1MD0cy1C8kZtKAy+1w2bACOEQkGiMQGg==
-----END CERTIFICATE-----