Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c868d54a1b5b08375343326e1339e2dd7e26a6d3.cer
File:                     c868d54a1b5b08375343326e1339e2dd7e26a6d3.cer (raw, json)
Hash identifier:          BfVqpp03ofXaOcoxIIprBYe+RTCp07y581HCgVxgSqA=
Subject key identifier:   2B:F8:54:3E:96:18:3C:7E:FE:62:73:77:9F:1D:A3:A4:15:AC:8E:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4543F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/808490ff-13ef-4b00-adab-1b0b42944f9c/c868d54a1b5b08375343326e1339e2dd7e26a6d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/808490ff-13ef-4b00-adab-1b0b42944f9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 11 Jun 2022 00:41:52 +0000
Certificate not after:    Sun 08 Sep 2024 17:36:13 +0000
Subordinate resources:    AS: 262250
                          IP: 200.115.17.0/24
                          IP: 2801:12::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16012351 (0xf4543f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 11 00:41:52 2022 GMT
            Not After : Sep  8 17:36:13 2024 GMT
        Subject: CN=c868d54a1b5b08375343326e1339e2dd7e26a6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:63:d7:44:af:43:a7:a7:63:96:f8:1d:e1:
                    e3:58:a4:2c:92:aa:8e:fd:ae:25:ec:c2:51:0d:73:
                    15:ab:f1:e5:d0:66:17:32:8e:3b:53:65:51:36:0e:
                    cc:6c:12:d2:62:99:6d:fb:8f:3e:30:c2:15:ed:27:
                    d0:c1:eb:32:27:3a:97:b6:97:94:2d:6f:a9:c5:3d:
                    98:47:48:73:5f:dd:a6:d9:9c:c2:47:04:91:8a:46:
                    0f:aa:17:d3:6d:77:10:c3:4e:60:46:5c:8d:b1:ea:
                    be:bd:f5:7c:dd:7d:85:fb:db:51:43:a7:f0:65:b7:
                    57:db:51:21:49:2a:8b:34:7c:0f:d9:14:02:2d:6a:
                    91:3c:1c:ff:63:e5:dd:74:b0:32:6f:d2:06:b6:83:
                    57:1c:0f:34:79:56:ee:c4:10:37:6c:ec:2a:eb:ab:
                    c4:ad:f7:3f:4e:0c:68:76:4e:15:9c:de:a7:69:76:
                    af:40:94:9b:38:a8:c6:02:f9:cc:ba:07:8d:06:5a:
                    34:42:79:3d:d3:b2:b3:56:7d:ce:b6:c5:d1:26:56:
                    0b:c4:3d:26:93:2f:d0:31:78:92:87:fd:f5:24:a2:
                    1a:99:e4:17:94:cd:91:db:6e:c9:dc:da:95:d8:31:
                    20:0e:0a:0f:e9:34:e2:0f:19:e3:d9:ca:b8:ae:24:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F8:54:3E:96:18:3C:7E:FE:62:73:77:9F:1D:A3:A4:15:AC:8E:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/808490ff-13ef-4b00-adab-1b0b42944f9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/808490ff-13ef-4b00-adab-1b0b42944f9c/c868d54a1b5b08375343326e1339e2dd7e26a6d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.17.0/24
                IPv6:
                  2801:12::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262250

    Signature Algorithm: sha256WithRSAEncryption
         52:07:dd:7c:ee:6c:f5:7b:b9:31:eb:15:3c:0f:73:5f:2b:7d:
         ce:39:46:76:38:4a:62:53:a7:a4:9c:60:7b:55:fc:c8:90:8c:
         09:5e:c0:0d:14:90:df:a3:07:bd:4d:5d:35:90:3c:26:17:7e:
         69:33:9d:70:3d:b3:56:d0:88:94:3d:7f:f0:96:b4:b0:f9:92:
         94:ef:c2:25:46:de:80:80:e3:0e:48:33:98:9e:26:97:3e:7a:
         d8:6f:a0:07:55:64:be:48:2d:95:c1:57:d7:51:c3:7a:3b:26:
         97:8b:b5:ff:23:21:2a:8f:7b:00:75:48:00:04:ed:06:b9:3e:
         f7:c7:a3:ab:a4:31:50:6d:75:6b:d6:4c:c3:c0:91:29:c2:03:
         1a:a4:2d:97:16:02:4f:c0:0f:42:72:d7:ea:a0:c0:40:b9:bb:
         ea:57:39:59:25:d5:0e:8d:5c:86:b1:ae:99:a4:92:bc:98:f3:
         e1:25:da:74:b4:25:dc:8a:57:69:9f:38:6a:ab:ca:d4:ca:5f:
         5a:af:71:de:1a:ec:e9:7b:34:fe:3e:ac:0e:06:25:26:58:e7:
         31:47:8d:fb:de:f3:c0:e9:ae:54:83:9a:30:70:24:b2:90:8c:
         67:4b:b1:74:7b:65:ee:6f:74:c3:a0:b2:54:25:22:ba:11:14:
         2d:fb:09:80
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAPRUPzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDYxMTAwNDE1MloXDTI0MDkwODE3MzYx
M1owMzExMC8GA1UEAxMoYzg2OGQ1NGExYjViMDgzNzUzNDMzMjZlMTMzOWUyZGQ3
ZTI2YTZkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOlyY9dEr0On
p2OW+B3h41ikLJKqjv2uJezCUQ1zFavx5dBmFzKOO1NlUTYOzGwS0mKZbfuPPjDC
Fe0n0MHrMic6l7aXlC1vqcU9mEdIc1/dptmcwkcEkYpGD6oX0213EMNOYEZcjbHq
vr31fN19hfvbUUOn8GW3V9tRIUkqizR8D9kUAi1qkTwc/2Pl3XSwMm/SBraDVxwP
NHlW7sQQN2zsKuurxK33P04MaHZOFZzep2l2r0CUmzioxgL5zLoHjQZaNEJ5PdOy
s1Z9zrbF0SZWC8Q9JpMv0DF4kof99SSiGpnkF5TNkdtuydzaldgxIA4KD+k04g8Z
49nKuK4kVS0CAwEAAaOCAwswggMHMB0GA1UdDgQWBBQr+FQ+lhg8fv5ic3efHaOk
FayOQzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MDg0OTBmZi0xM2Vm
LTRiMDAtYWRhYi0xYjBiNDI5NDRmOWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODA4NDkwZmYtMTNlZi00
YjAwLWFkYWItMWIwYjQyOTQ0ZjljL2M4NjhkNTRhMWI1YjA4Mzc1MzQzMzI2ZTEz
MzllMmRkN2UyNmE2ZDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMhzETAPBAIAAjAJAwcAKAEAEgAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAajANBgkqhkiG9w0BAQsFAAOCAQEA
UgfdfO5s9Xu5MesVPA9zXyt9zjlGdjhKYlOnpJxge1X8yJCMCV7ADRSQ36MHvU1d
NZA8Jhd+aTOdcD2zVtCIlD1/8Ja0sPmSlO/CJUbegIDjDkgzmJ4mlz562G+gB1Vk
vkgtlcFX11HDejsml4u1/yMhKo97AHVIAATtBrk+98ejq6QxUG11a9ZMw8CRKcID
GqQtlxYCT8APQnLX6qDAQLm76lc5WSXVDo1chrGumaSSvJjz4SXadLQl3IpXaZ84
aqvK1MpfWq9x3hrs6Xs0/j6sDgYlJljnMUeN+97zwOmuVIOaMHAkspCMZ0uxdHtl
7m90w6CyVCUiuhEULfsJgA==
-----END CERTIFICATE-----