Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
File:                     d136d4512330eb81fb319acf25ade2d4a9466d72.cer (raw, json)
Hash identifier:          qzO8tAL2WMWvePzE8V1NUPWqkzwN2WYFS8CFkSshO6g=
Subject key identifier:   BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA1E87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Apr 2022 14:36:19 +0000
Certificate not after:    Sun 20 Oct 2024 14:03:13 +0000
Subordinate resources:    AS: 272026
                          IP: 167.250.236.0/23
                          IP: 177.11.254.0/23
                          IP: 2803:6510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16391815 (0xfa1e87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  1 14:36:19 2022 GMT
            Not After : Oct 20 14:03:13 2024 GMT
        Subject: CN=d136d4512330eb81fb319acf25ade2d4a9466d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:66:3b:f9:3f:6b:4e:63:39:9b:a8:ee:da:
                    bc:e3:86:b8:68:af:08:32:79:fc:e6:c5:dd:16:ae:
                    72:cc:10:d0:64:e7:5c:2f:e3:b2:3a:cd:bc:e7:7e:
                    6b:99:2c:1b:3e:89:b6:15:bf:0d:a3:55:6a:56:ab:
                    61:60:c5:aa:e9:b6:eb:30:46:3b:6c:b1:cf:5c:6b:
                    8f:85:f1:bb:22:0f:c7:0c:f9:fa:11:f0:45:10:cd:
                    b0:1c:2d:4e:9e:22:bb:89:18:96:d3:20:66:03:1c:
                    38:1b:1b:57:20:0b:86:5d:bc:cf:59:f2:0e:2f:85:
                    9c:58:c0:a5:29:e8:9a:d8:3f:6f:2d:08:a6:f7:0d:
                    fa:77:b7:62:73:23:13:57:43:7c:bd:1c:06:15:9f:
                    f2:e2:1e:1c:bc:d1:b9:a6:5a:33:8e:50:29:ac:51:
                    65:b1:4a:0c:0f:0b:31:01:ab:09:3e:bc:fe:4d:06:
                    9b:6b:fa:f1:84:8f:70:7f:9d:23:70:bb:c7:e2:7e:
                    04:48:48:db:b0:b0:fb:66:e7:98:1e:6e:0c:89:a2:
                    8e:16:79:e9:56:14:58:78:6f:3c:f7:3c:de:55:de:
                    9d:55:73:7c:fa:f8:46:37:c3:2a:73:c0:c9:87:f9:
                    2e:5a:2a:d6:80:6e:cf:d1:87:ae:79:e6:bc:03:70:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/23
                  177.11.254.0/23
                IPv6:
                  2803:6510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272026

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:2e:ea:18:31:09:10:c6:7f:c6:07:75:36:52:a8:ce:10:
         ea:d2:17:ac:6f:fb:82:e4:97:37:f0:12:73:9e:90:84:e9:a1:
         e8:4b:b0:08:ca:31:c4:8b:2d:1d:d8:78:c4:8c:48:91:02:f9:
         b7:c6:21:86:c6:96:78:39:72:bb:47:54:7a:71:55:03:18:97:
         c8:2b:b1:ea:5c:c6:78:cc:85:9c:94:b6:ca:ec:a9:af:85:df:
         09:de:14:9a:7a:5b:65:7b:92:53:5f:5c:75:3e:b5:be:3f:1e:
         ba:bb:89:6d:c6:1e:63:66:82:ce:22:44:36:3b:04:87:35:d2:
         d0:1d:6b:2a:c9:23:c7:98:16:58:c5:bd:f2:de:f4:d7:4c:b6:
         a4:83:6f:55:a7:ae:80:25:b1:55:c3:ea:79:68:f6:c3:37:70:
         ae:f1:ec:e1:8e:d1:b2:8a:c1:7e:79:4c:c8:4d:c3:00:b6:3e:
         2e:e4:c7:0c:04:61:4d:f6:3e:1b:71:5b:ad:3b:5f:1a:8c:29:
         30:ca:07:62:22:59:04:87:fe:4c:a6:7a:33:d4:a0:73:ef:6c:
         2c:fe:a6:2d:45:53:c3:06:e0:71:7a:67:3f:25:a2:8c:28:88:
         2f:3f:39:fc:4d:e2:bf:72:6b:c4:91:fc:3d:30:48:0a:db:d1:
         46:39:b7:95
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAPoehzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDQwMTE0MzYxOVoXDTI0MTAyMDE0MDMx
M1owMzExMC8GA1UEAxMoZDEzNmQ0NTEyMzMwZWI4MWZiMzE5YWNmMjVhZGUyZDRh
OTQ2NmQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIuQZjv5P2tO
YzmbqO7avOOGuGivCDJ5/ObF3RaucswQ0GTnXC/jsjrNvOd+a5ksGz6JthW/DaNV
alarYWDFqum26zBGO2yxz1xrj4XxuyIPxwz5+hHwRRDNsBwtTp4iu4kYltMgZgMc
OBsbVyALhl28z1nyDi+FnFjApSnomtg/by0IpvcN+ne3YnMjE1dDfL0cBhWf8uIe
HLzRuaZaM45QKaxRZbFKDA8LMQGrCT68/k0Gm2v68YSPcH+dI3C7x+J+BEhI27Cw
+2bnmB5uDImijhZ56VYUWHhvPPc83lXenVVzfPr4RjfDKnPAyYf5Lloq1oBuz9GH
rnnmvANw2pkCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBS7jZ+pzCWKq+tt+urt6RdY
rhYILjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mODU4ZjgyMC0xYjJk
LTQ5ZmEtYjZmYy1lMzQ0NDY3ZjVmMDYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjg1OGY4MjAtMWIyZC00
OWZhLWI2ZmMtZTM0NDQ2N2Y1ZjA2L2QxMzZkNDUxMjMzMGViODFmYjMxOWFjZjI1
YWRlMmQ0YTk0NjZkNzIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAaf67AMEAbEL/jANBAIAAjAHAwUA
KANlEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJpowDQYJKoZIhvcNAQELBQAD
ggEBACUMLuoYMQkQxn/GB3U2UqjOEOrSF6xv+4LklzfwEnOekITpoehLsAjKMcSL
LR3YeMSMSJEC+bfGIYbGlng5crtHVHpxVQMYl8grsepcxnjMhZyUtsrsqa+F3wne
FJp6W2V7klNfXHU+tb4/Hrq7iW3GHmNmgs4iRDY7BIc10tAdayrJI8eYFljFvfLe
9NdMtqSDb1WnroAlsVXD6nlo9sM3cK7x7OGO0bKKwX55TMhNwwC2Pi7kxwwEYU32
PhtxW607XxqMKTDKB2IiWQSH/kymejPUoHPvbCz+pi1FU8MG4HF6Zz8loowoiC8/
OfxN4r9ya8SR/D0wSArb0UY5t5U=
-----END CERTIFICATE-----