Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d35667f119be50e7c8247352710f35b1468508d8.cer
File:                     d35667f119be50e7c8247352710f35b1468508d8.cer (raw, json)
Hash identifier:          XFNU1iXlPXnyw/XUAE6Q3tbjeAobkGGRq22Trnxdz/w=
Subject key identifier:   E2:58:BA:2D:16:D8:FC:7D:5D:CC:5F:2C:06:56:D9:CD:D6:B9:58:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC692A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/d35667f119be50e7c8247352710f35b1468508d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Jul 2021 20:03:40 +0000
Certificate not after:    Sun 10 Nov 2024 16:52:51 +0000
Subordinate resources:    AS: 269897
                          IP: 190.112.136.0/22
                          IP: 2803:ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16541994 (0xfc692a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 16 20:03:40 2021 GMT
            Not After : Nov 10 16:52:51 2024 GMT
        Subject: CN=d35667f119be50e7c8247352710f35b1468508d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:66:c6:95:40:f6:4d:ee:02:b4:16:6e:a7:
                    bf:21:34:36:44:98:72:5d:58:9b:97:16:eb:87:83:
                    37:dd:54:65:bb:12:10:74:e7:25:ae:f4:79:82:7d:
                    e5:36:05:3b:2f:5f:cc:41:32:b0:af:c8:81:03:50:
                    23:11:18:4b:08:d2:08:75:cf:c0:65:9c:db:bb:15:
                    26:a8:14:7c:df:f5:13:52:dc:f1:5d:ef:05:ba:d0:
                    58:d1:98:54:b2:ec:64:f2:53:90:44:8f:47:39:4e:
                    44:7e:9b:22:1a:73:da:33:75:8c:56:15:bc:f1:41:
                    d2:9a:27:4d:0e:46:e8:c0:ae:51:84:10:84:b5:d7:
                    7f:16:93:6d:c0:ef:b7:55:a7:3e:af:73:9d:2d:df:
                    c5:6c:bc:16:54:6c:fb:0b:c0:d7:47:c1:9b:1d:3b:
                    2b:a9:51:d2:ce:35:41:58:03:74:ef:66:fb:f4:78:
                    86:57:34:98:6c:6a:77:98:99:63:70:21:0f:36:28:
                    18:ca:d9:d7:fd:3f:65:a2:16:be:89:ca:02:83:08:
                    b5:67:26:9b:07:37:f2:f9:94:4f:54:da:66:71:a1:
                    a0:df:49:97:e2:ba:37:6f:0d:47:70:f3:b1:83:c4:
                    7f:fa:84:e5:17:68:a3:67:e9:44:9c:63:57:02:e7:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:58:BA:2D:16:D8:FC:7D:5D:CC:5F:2C:06:56:D9:CD:D6:B9:58:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/d35667f119be50e7c8247352710f35b1468508d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.136.0/22
                IPv6:
                  2803:ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269897

    Signature Algorithm: sha256WithRSAEncryption
         8d:97:e7:63:97:df:ca:e3:99:d7:4e:65:c0:33:35:eb:6a:f6:
         06:17:f8:81:36:2c:fb:20:d0:4c:ec:19:8d:76:7f:40:97:a2:
         b3:aa:21:c2:68:cb:c6:e1:82:b6:53:81:80:54:b1:3f:c6:2d:
         db:bf:60:c9:86:8a:aa:74:d5:96:aa:d9:5d:1b:97:7f:4b:e5:
         1a:5c:f2:dc:c5:19:47:2b:46:e8:6f:84:00:37:0b:3f:a9:eb:
         f7:e8:60:57:56:0f:e6:c1:9c:e6:f5:5e:45:87:10:4c:cd:e9:
         ac:af:dc:ed:fa:5a:01:14:74:0a:ba:6f:56:8e:0a:c2:6c:1d:
         68:33:95:c4:97:4d:d0:11:b8:a8:e7:df:00:e0:04:83:b2:e3:
         61:4e:a1:55:c2:a7:18:a5:66:8f:2d:c0:77:06:6e:0c:b7:b3:
         db:6b:7a:9a:e2:f5:db:c2:21:96:ad:5e:42:1f:e7:70:57:11:
         10:00:fe:d2:14:0f:08:12:8c:c4:1d:ce:4e:d4:30:91:00:fb:
         ae:a0:f7:ff:06:d6:27:0e:3b:75:65:72:b2:db:a3:f5:c9:14:
         d7:9d:ca:37:36:58:a8:2f:05:e9:c9:f9:c9:7d:1b:4d:ff:4e:
         8a:92:1e:dd:47:3a:f4:f3:2e:e9:be:3c:d1:d7:81:02:6d:ee:
         4b:62:3a:70
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPxpKjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDcxNjIwMDM0MFoXDTI0MTExMDE2NTI1
MVowMzExMC8GA1UEAxMoZDM1NjY3ZjExOWJlNTBlN2M4MjQ3MzUyNzEwZjM1YjE0
Njg1MDhkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAICQZsaVQPZN
7gK0Fm6nvyE0NkSYcl1Ym5cW64eDN91UZbsSEHTnJa70eYJ95TYFOy9fzEEysK/I
gQNQIxEYSwjSCHXPwGWc27sVJqgUfN/1E1Lc8V3vBbrQWNGYVLLsZPJTkESPRzlO
RH6bIhpz2jN1jFYVvPFB0ponTQ5G6MCuUYQQhLXXfxaTbcDvt1WnPq9znS3fxWy8
FlRs+wvA10fBmx07K6lR0s41QVgDdO9m+/R4hlc0mGxqd5iZY3AhDzYoGMrZ1/0/
ZaIWvonKAoMItWcmmwc38vmUT1TaZnGhoN9Jl+K6N28NR3DzsYPEf/qE5Rdoo2fp
RJxjVwLnrJMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTiWLotFtj8fV3MXywGVtnN
1rlYuDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zMDVhMGU1ZS00MTUw
LTRiN2YtOWIxYi1lYzRjOWY5MTA0NGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzA1YTBlNWUtNDE1MC00
YjdmLTliMWItZWM0YzlmOTEwNDRkL2QzNTY2N2YxMTliZTUwZTdjODI0NzM1Mjcx
MGYzNWIxNDY4NTA4ZDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5wiDANBAIAAjAHAwUAKAMM4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHkkwDQYJKoZIhvcNAQELBQADggEBAI2X
52OX38rjmddOZcAzNetq9gYX+IE2LPsg0EzsGY12f0CXorOqIcJoy8bhgrZTgYBU
sT/GLdu/YMmGiqp01Zaq2V0bl39L5Rpc8tzFGUcrRuhvhAA3Cz+p6/foYFdWD+bB
nOb1XkWHEEzN6ayv3O36WgEUdAq6b1aOCsJsHWgzlcSXTdARuKjn3wDgBIOy42FO
oVXCpxilZo8twHcGbgy3s9trepri9dvCIZatXkIf53BXERAA/tIUDwgSjMQdzk7U
MJEA+66g9/8G1icOO3VlcrLbo/XJFNedyjc2WKgvBenJ+cl9G03/ToqSHt1HOvTz
Lum+PNHXgQJt7ktiOnA=
-----END CERTIFICATE-----