Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
File:                     d0615608a5f64a875e5be0a66c710b668ecb0886.cer (raw, json)
Hash identifier:          DmoCB2+2v2lECx2sDQdEVttCFxdJI5MoP0HS0EfasEc=
Subject key identifier:   C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E64AAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 11 Apr 2021 18:26:50 +0000
Certificate not after:    Mon 20 May 2024 19:36:10 +0000
Subordinate resources:    IP: 164.163.188.0/22
                          IP: 2806:2ed::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15092394 (0xe64aaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 18:26:50 2021 GMT
            Not After : May 20 19:36:10 2024 GMT
        Subject: CN=d0615608a5f64a875e5be0a66c710b668ecb0886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:65:e3:dc:69:ca:8e:a0:29:58:3f:a7:c1:
                    a7:ee:fe:49:fe:72:b2:ec:84:82:69:fb:35:f6:64:
                    1f:eb:0d:61:b4:4d:8a:b8:79:28:94:2e:9c:08:b1:
                    4b:9a:ef:da:53:25:83:11:04:c1:c9:f8:22:d6:67:
                    d4:53:1c:02:79:c4:03:0f:67:b0:d4:0c:4a:58:84:
                    af:6d:e2:79:fe:40:11:e9:81:44:07:2b:14:6c:2c:
                    0a:dc:48:d1:6a:91:e9:ec:2d:f7:00:8e:16:1e:3a:
                    e6:bb:a4:88:36:39:54:67:d6:b8:4e:9a:92:76:69:
                    af:68:cb:a5:2b:82:bb:e4:77:0a:09:fb:dd:aa:44:
                    20:f6:bc:51:1c:5b:f7:20:a2:41:9d:c4:03:14:e2:
                    3b:47:de:cf:a2:3b:d6:d9:a8:c1:de:0c:d8:1c:8a:
                    6b:ed:30:2e:af:f4:b6:bf:b9:2a:af:fe:a5:d5:14:
                    4e:52:a0:39:84:23:49:fc:30:53:1c:7f:78:77:c1:
                    d7:84:02:71:5e:55:25:20:01:b8:6e:48:56:79:80:
                    87:3a:22:e1:ed:53:3c:bb:bc:57:e9:53:ae:5f:ef:
                    76:48:f4:d7:fa:f0:ca:3d:43:3e:c4:ce:85:b7:44:
                    c2:92:ce:ae:36:6e:94:f6:a2:6d:fe:d0:f2:4d:07:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.188.0/22
                IPv6:
                  2806:2ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:10:de:f2:9b:32:03:4d:4d:36:f3:88:49:f4:11:88:b0:1e:
         c4:9a:04:6f:28:f7:c0:82:a2:a6:ae:17:d5:b4:e9:f3:02:65:
         39:2d:4e:0a:e4:d1:06:20:bc:5e:df:e0:5b:76:d6:a9:6f:ec:
         5a:2d:c1:9d:fc:2a:c1:eb:64:81:a5:07:19:16:2a:20:f7:60:
         6b:3b:39:a1:39:f9:0e:70:cc:4a:33:e8:70:a7:ba:c8:c2:a4:
         ce:6e:6f:b9:0e:27:ae:81:24:ef:43:ce:69:17:9d:bd:61:39:
         ea:9d:de:d3:70:bb:82:3a:f4:9c:3d:37:0e:c5:fc:80:af:6b:
         97:aa:e9:f6:bd:85:00:cc:0d:0c:14:d7:8f:9c:1b:2d:06:8b:
         ad:50:f3:c8:35:21:cb:72:3d:61:a3:08:cd:6b:13:91:af:6e:
         fa:de:2c:2d:d8:e0:1f:5e:13:de:61:3c:ac:56:62:cd:a0:6d:
         45:fa:23:91:74:27:13:22:74:b1:0f:47:79:fa:df:87:01:30:
         bf:a0:1d:37:64:6e:82:e8:cc:2c:d1:bb:5f:b5:de:fd:83:66:
         74:9f:2d:ec:5c:a4:09:d8:76:d1:8e:89:51:94:02:1b:52:91:
         c5:a8:21:b3:8c:4d:a1:ea:8e:25:51:59:85:fa:e4:f1:10:c3:
         1a:ea:c8:e9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOZKqjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQxMTE4MjY1MFoXDTI0MDUyMDE5MzYx
MFowMzExMC8GA1UEAxMoZDA2MTU2MDhhNWY2NGE4NzVlNWJlMGE2NmM3MTBiNjY4
ZWNiMDg4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJcAZePcacqO
oClYP6fBp+7+Sf5ysuyEgmn7NfZkH+sNYbRNirh5KJQunAixS5rv2lMlgxEEwcn4
ItZn1FMcAnnEAw9nsNQMSliEr23ief5AEemBRAcrFGwsCtxI0WqR6ewt9wCOFh46
5rukiDY5VGfWuE6aknZpr2jLpSuCu+R3Cgn73apEIPa8URxb9yCiQZ3EAxTiO0fe
z6I71tmowd4M2ByKa+0wLq/0tr+5Kq/+pdUUTlKgOYQjSfwwUxx/eHfB14QCcV5V
JSABuG5IVnmAhzoi4e1TPLu8V+lTrl/vdkj01/rwyj1DPsTOhbdEwpLOrjZulPai
bf7Q8k0HG2sCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTDK9WXfZrxTfJTy+usx9Ii
KkFnlzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85YjNlY2EzNC03ZTVi
LTQ2YjAtYjgwYi01Zjc0NWE1MTBkNjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWIzZWNhMzQtN2U1Yi00
NmIwLWI4MGItNWY3NDVhNTEwZDYyL2QwNjE1NjA4YTVmNjRhODc1ZTViZTBhNjZj
NzEwYjY2OGVjYjA4ODYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqSjvDANBAIAAjAHAwUAKAYC7TAN
BgkqhkiG9w0BAQsFAAOCAQEAchDe8psyA01NNvOISfQRiLAexJoEbyj3wIKipq4X
1bTp8wJlOS1OCuTRBiC8Xt/gW3bWqW/sWi3BnfwqwetkgaUHGRYqIPdgazs5oTn5
DnDMSjPocKe6yMKkzm5vuQ4nroEk70POaRedvWE56p3e03C7gjr0nD03DsX8gK9r
l6rp9r2FAMwNDBTXj5wbLQaLrVDzyDUhy3I9YaMIzWsTka9u+t4sLdjgH14T3mE8
rFZizaBtRfojkXQnEyJ0sQ9HefrfhwEwv6AdN2RugujMLNG7X7Xe/YNmdJ8t7Fyk
Cdh20Y6JUZQCG1KRxaghs4xNoeqOJVFZhfrk8RDDGurI6Q==
-----END CERTIFICATE-----