Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer
File:                     d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer (raw, json)
Hash identifier:          uTPrsyL0Ioz7tKJEzG89qnChfYwrRDizX910tU8gke8=
Subject key identifier:   4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D83358
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 May 2021 16:59:21 +0000
Certificate not after:    Tue 26 Dec 2023 17:28:27 +0000
Subordinate resources:    AS: 266741
                          IP: 45.232.16.0/22
                          IP: 2803:2b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14168920 (0xd83358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  7 16:59:21 2021 GMT
            Not After : Dec 26 17:28:27 2023 GMT
        Subject: CN=d3eef1937df6fdd69dc9fc7ce2c008cf13179427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:fe:fd:0d:06:0d:04:e4:eb:e9:4c:ad:2f:
                    40:91:5c:8d:00:30:61:be:cf:a2:d9:89:1a:ee:2b:
                    73:99:d3:76:78:00:ed:73:9d:b4:a3:66:0e:26:9d:
                    59:90:0e:f8:75:d8:49:3e:88:a2:f1:5c:78:eb:ef:
                    54:d3:3f:e1:0c:4a:01:e6:5d:a2:1d:07:4b:e5:a2:
                    28:94:b7:0f:7e:7c:95:6f:fa:b3:38:34:4f:90:40:
                    75:c0:ab:02:d4:9b:9e:69:65:75:c6:a1:52:36:2b:
                    51:dd:e4:64:4b:f8:7f:9d:86:74:8a:75:51:2a:ac:
                    bc:58:97:bc:9c:d5:4a:ea:71:b1:88:ef:ec:49:9a:
                    44:df:26:6e:6b:09:ba:1a:60:5b:85:8e:d3:9e:d0:
                    ad:e7:73:0c:c7:06:14:d8:08:f4:98:fe:24:cc:20:
                    49:e9:97:e5:9d:05:9d:bf:fa:a8:e5:98:18:d8:99:
                    7a:e4:a6:5e:c6:c4:1e:1d:42:fc:75:b3:26:47:0f:
                    61:f6:81:de:06:70:83:ff:4a:fc:3b:c9:33:8f:30:
                    d3:de:05:5b:ca:13:e9:b6:be:57:22:f8:fb:90:34:
                    b7:31:1d:10:d4:19:86:00:eb:bc:af:69:2c:83:ee:
                    00:c5:2f:5a:4f:9b:d9:2f:d5:15:9d:3b:68:3f:47:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.16.0/22
                IPv6:
                  2803:2b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266741

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:a2:9d:f8:ba:62:8e:42:8e:ae:cf:f4:03:6d:4e:cb:2f:
         e3:37:d9:d1:8b:c5:51:80:d1:4a:6c:d7:01:30:46:03:d9:5b:
         ea:fd:78:79:e1:91:b5:22:08:5c:ac:ad:df:37:39:fe:8f:93:
         aa:ba:39:03:dc:3f:ff:87:93:c2:11:9b:80:19:cd:67:f0:63:
         59:55:c6:3f:4d:f1:86:1a:85:ae:ec:10:2f:5b:ba:ca:11:06:
         27:19:d4:9f:7f:c8:b1:c3:6a:18:00:96:a9:45:01:79:66:78:
         77:96:73:43:b9:8d:19:26:0d:4c:e1:56:69:89:ba:f4:b1:82:
         22:6f:8a:3a:f1:bf:46:51:7c:13:11:b3:67:cc:9e:75:5f:6c:
         0a:34:f2:94:04:d5:66:66:5f:d3:5e:12:9e:4a:4e:00:6f:ee:
         bf:5d:dc:27:c7:e2:dc:c7:44:fa:ee:96:53:50:35:bf:54:1b:
         1f:fc:13:77:77:30:9b:bb:4f:13:63:e7:12:73:ef:86:9d:fc:
         5c:03:bf:ac:05:11:e4:43:51:74:4d:19:7c:c4:49:b6:a8:cf:
         60:bf:ce:f3:42:52:ac:cb:f0:be:4c:89:ee:a5:3f:3a:07:9b:
         21:8c:3a:69:a7:d3:d8:02:01:8d:6f:7e:12:1a:2f:40:48:57:
         81:92:04:46
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANgzWDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUwNzE2NTkyMVoXDTIzMTIyNjE3Mjgy
N1owMzExMC8GA1UEAxMoZDNlZWYxOTM3ZGY2ZmRkNjlkYzlmYzdjZTJjMDA4Y2Yx
MzE3OTQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbR/v0NBg0E
5OvpTK0vQJFcjQAwYb7PotmJGu4rc5nTdngA7XOdtKNmDiadWZAO+HXYST6IovFc
eOvvVNM/4QxKAeZdoh0HS+WiKJS3D358lW/6szg0T5BAdcCrAtSbnmlldcahUjYr
Ud3kZEv4f52GdIp1USqsvFiXvJzVSupxsYjv7EmaRN8mbmsJuhpgW4WO057Qredz
DMcGFNgI9Jj+JMwgSemX5Z0Fnb/6qOWYGNiZeuSmXsbEHh1C/HWzJkcPYfaB3gZw
g/9K/DvJM48w094FW8oT6ba+VyL4+5A0tzEdENQZhgDrvK9pLIPuAMUvWk+b2S/V
FZ07aD9HcpUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRMd5FUpiSM/faEP2l+mX/z
7UthQjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYzY0NTAxYS02YjRl
LTQzZWQtOWY2Yy1hM2Q3MzkxODI0Y2YvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWM2NDUwMWEtNmI0ZS00
M2VkLTlmNmMtYTNkNzM5MTgyNGNmL2QzZWVmMTkzN2RmNmZkZDY5ZGM5ZmM3Y2Uy
YzAwOGNmMTMxNzk0MjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oEDANBAIAAjAHAwUAKAMrIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEfUwDQYJKoZIhvcNAQELBQADggEBAD6v
op34umKOQo6uz/QDbU7LL+M32dGLxVGA0Ups1wEwRgPZW+r9eHnhkbUiCFysrd83
Of6Pk6q6OQPcP/+Hk8IRm4AZzWfwY1lVxj9N8YYaha7sEC9busoRBicZ1J9/yLHD
ahgAlqlFAXlmeHeWc0O5jRkmDUzhVmmJuvSxgiJvijrxv0ZRfBMRs2fMnnVfbAo0
8pQE1WZmX9NeEp5KTgBv7r9d3CfH4tzHRPrullNQNb9UGx/8E3d3MJu7TxNj5xJz
74ad/FwDv6wFEeRDUXRNGXzESbaoz2C/zvNCUqzL8L5Mie6lPzoHmyGMOmmn09gC
AY1vfhIaL0BIV4GSBEY=
-----END CERTIFICATE-----