Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
File:                     d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer (raw, json)
Hash identifier:          G3v2NssHKXwYb9GUYpbgh708H2RxzmjngZ5idp4fEUI=
Subject key identifier:   42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCC6B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Dec 2020 13:52:02 +0000
Certificate not after:    Thu 22 Feb 2024 17:56:48 +0000
Subordinate resources:    AS: 267789
                          IP: 161.22.32.0/21
                          IP: 2803:6680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14468784 (0xdcc6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 22 13:52:02 2020 GMT
            Not After : Feb 22 17:56:48 2024 GMT
        Subject: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:23:57:93:bf:79:00:50:bc:36:f7:47:94:
                    5b:c8:70:d7:01:95:62:89:c7:ea:97:1a:32:87:b9:
                    83:98:a9:7e:0b:dc:68:e9:57:d2:61:00:74:c8:fa:
                    c3:f7:58:28:53:27:f1:f5:85:b1:07:62:ca:93:89:
                    91:6a:ca:0a:30:67:a1:15:e4:30:77:e4:fd:39:a2:
                    b4:2b:87:99:2d:31:74:c0:ce:f2:d2:db:ee:35:78:
                    69:29:d5:3c:08:2e:bd:b4:02:29:59:d6:6a:ba:e4:
                    6c:b3:27:aa:27:f7:72:29:4c:09:71:60:11:82:b6:
                    5b:b1:97:2b:6c:bf:48:21:bd:32:3a:69:2d:cb:5d:
                    94:6f:c5:7f:ea:61:85:fe:63:50:ed:c4:5e:7c:5f:
                    80:b9:cc:b5:ff:bc:53:09:28:56:47:1b:d9:c6:30:
                    be:a9:23:6d:e6:87:1f:b4:02:e0:b2:d0:52:86:e5:
                    3f:46:d4:fc:22:c4:ea:d6:b3:3f:ac:76:da:60:4a:
                    47:49:0c:72:30:86:d2:92:f2:5d:3f:c3:f2:c2:d7:
                    75:b6:f4:4c:94:9d:eb:32:f9:a4:3d:e1:17:44:6b:
                    77:d5:cf:a2:fa:5d:cb:88:1c:39:9e:71:d8:e1:16:
                    d0:ee:92:bc:5f:ae:72:3e:ac:96:04:f6:a7:64:58:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.32.0/21
                IPv6:
                  2803:6680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267789

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:6b:84:20:0e:98:56:a1:ec:cd:f1:8a:93:be:a1:76:4c:
         06:60:a0:5d:97:e3:53:83:fe:e0:b6:23:e5:3f:7d:58:34:1c:
         83:87:22:b0:b6:b1:31:19:51:69:36:d3:4e:fa:30:6a:9f:b1:
         07:88:7e:4d:e2:9d:2b:22:32:e6:0f:9d:07:15:da:03:5b:22:
         38:10:85:14:43:1c:c7:41:c0:05:75:f6:cf:de:dc:c2:7e:5b:
         ac:5c:47:ea:91:1a:ca:2d:cb:fa:4a:be:71:54:ec:fd:47:5f:
         fc:57:f4:94:22:f7:5e:ef:50:8a:7e:e2:11:dd:43:c4:a8:f4:
         4c:84:82:ce:77:cb:57:ff:8a:1d:e6:56:87:bf:97:8d:e8:65:
         b2:aa:32:27:06:de:47:20:be:5a:9b:bd:c9:93:a3:bf:8e:f5:
         96:b3:1f:d9:19:9c:de:6b:30:da:2e:b8:df:ef:21:25:29:55:
         a9:ca:25:ae:db:80:75:00:53:a6:a7:f5:30:92:00:66:00:e4:
         aa:51:5f:e2:2e:d2:66:0c:e5:9c:a6:cb:e8:89:57:65:97:2b:
         45:71:0f:88:ac:39:ff:27:1b:3f:3c:55:f6:9c:bf:ac:15:d2:
         80:8b:12:a7:e8:8a:46:46:e6:36:3a:70:43:bb:b0:ba:70:6e:
         30:27:9b:36
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANzGsDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTIyMjEzNTIwMloXDTI0MDIyMjE3NTY0
OFowMzExMC8GA1UEAxMoZDBmNTllNGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5
MzE3OTU5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALs/I1eTv3kA
ULw290eUW8hw1wGVYonH6pcaMoe5g5ipfgvcaOlX0mEAdMj6w/dYKFMn8fWFsQdi
ypOJkWrKCjBnoRXkMHfk/TmitCuHmS0xdMDO8tLb7jV4aSnVPAguvbQCKVnWarrk
bLMnqif3cilMCXFgEYK2W7GXK2y/SCG9MjppLctdlG/Ff+phhf5jUO3EXnxfgLnM
tf+8UwkoVkcb2cYwvqkjbeaHH7QC4LLQUoblP0bU/CLE6tazP6x22mBKR0kMcjCG
0pLyXT/D8sLXdbb0TJSd6zL5pD3hF0Rrd9XPovpdy4gcOZ5x2OEW0O6SvF+ucj6s
lgT2p2RYdL8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRC7Mys+IlryLD/KnRpVs9W
iQvIGDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMDViNjg0Yy1kZDAw
LTQ4NDEtOTkyOS0xYWI3NTA5NDY3OWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTA1YjY4NGMtZGQwMC00
ODQxLTk5MjktMWFiNzUwOTQ2NzliL2QwZjU5ZTRkMGY0ZGQ2NmQxZTgwY2I0ZmY3
NmU2YWIyOTMxNzk1OTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA6EWIDANBAIAAjAHAwUAKANmgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFg0wDQYJKoZIhvcNAQELBQADggEBAEw/
a4QgDphWoezN8YqTvqF2TAZgoF2X41OD/uC2I+U/fVg0HIOHIrC2sTEZUWk20076
MGqfsQeIfk3inSsiMuYPnQcV2gNbIjgQhRRDHMdBwAV19s/e3MJ+W6xcR+qRGsot
y/pKvnFU7P1HX/xX9JQi917vUIp+4hHdQ8So9EyEgs53y1f/ih3mVoe/l43oZbKq
MicG3kcgvlqbvcmTo7+O9ZazH9kZnN5rMNouuN/vISUpVanKJa7bgHUAU6an9TCS
AGYA5KpRX+Iu0mYM5Zymy+iJV2WXK0VxD4isOf8nGz88Vfacv6wV0oCLEqfoikZG
5jY6cEO7sLpwbjAnmzY=
-----END CERTIFICATE-----