Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3f1403d60deba19990618a6a5ba9a459021d612.cer
File:                     d3f1403d60deba19990618a6a5ba9a459021d612.cer (raw, json)
Hash identifier:          Av90yJRDDCMsXwVu3gXvq+H0ZUjPySDPnm56XIHS42s=
Subject key identifier:   B8:00:72:D4:69:7A:DD:B1:98:BA:E9:1D:70:C7:88:1B:3D:B8:B5:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C0C604
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/d3f1403d60deba19990618a6a5ba9a459021d612.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 20 Feb 2022 02:32:44 +0000
Certificate not after:    Mon 18 Dec 2023 03:52:02 +0000
Subordinate resources:    IP: 201.77.96.0/22
                          IP: 2806:3a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12633604 (0xc0c604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 20 02:32:44 2022 GMT
            Not After : Dec 18 03:52:02 2023 GMT
        Subject: CN=d3f1403d60deba19990618a6a5ba9a459021d612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:f0:b5:40:b2:93:16:9e:f5:ef:2f:4d:b0:
                    55:3d:a5:61:56:5f:af:f8:8b:eb:16:54:a1:54:7b:
                    1d:7f:30:2f:bf:a5:6c:d0:5c:77:5c:db:15:ec:4c:
                    20:9d:1e:1e:f6:b8:e6:11:85:9e:0e:66:da:f3:89:
                    50:37:72:ba:4d:87:cf:3d:0e:d2:c4:e3:d6:ea:86:
                    d1:36:9d:a8:12:a1:8b:3c:de:f2:e7:a5:f6:d2:06:
                    85:a7:4c:4f:d7:1f:99:62:65:8c:c7:15:d3:a2:59:
                    34:4f:28:a0:1c:6b:84:b5:cf:e2:17:15:1a:78:94:
                    5d:92:fe:bb:42:f3:75:10:cf:7d:ea:28:d5:78:6a:
                    db:64:f7:8a:7d:17:cf:7e:f5:93:cb:dd:16:2c:04:
                    9e:06:b2:ba:5c:8c:0c:42:de:02:92:f9:64:22:47:
                    1e:2f:f6:30:1d:62:fb:40:7b:40:d2:9c:ac:2b:c2:
                    3b:ce:7a:5c:3d:92:5d:32:f4:23:b6:50:9c:91:1b:
                    95:84:be:8a:c7:9e:dc:ea:81:b0:24:8a:48:d9:2a:
                    44:f4:a2:44:9e:68:97:cd:fa:bc:f3:a8:d3:73:cb:
                    d0:d6:f7:54:00:de:5e:2d:f8:80:a9:e1:36:7c:f8:
                    ca:04:05:8b:c3:48:bd:e1:f0:8e:61:3f:22:c6:e1:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:00:72:D4:69:7A:DD:B1:98:BA:E9:1D:70:C7:88:1B:3D:B8:B5:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/d3f1403d60deba19990618a6a5ba9a459021d612.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.96.0/22
                IPv6:
                  2806:3a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:60:5d:0b:ce:f0:29:c1:25:c9:da:0e:49:a5:e3:60:3a:
         99:99:ab:ef:f9:d2:55:5d:3c:b8:8c:18:9a:6c:8b:ba:32:17:
         56:4e:56:87:98:56:1a:e7:69:cd:84:05:a7:de:bc:c5:39:d3:
         d2:0e:e0:0d:85:e4:2b:a6:68:e6:20:2b:5b:e9:9c:4a:87:75:
         21:b9:99:5d:8e:58:78:b8:66:7c:41:c1:35:78:5e:38:57:0b:
         b1:3a:54:3e:c5:4a:67:81:52:29:78:4a:5c:7c:44:de:52:e4:
         5c:75:dd:4a:af:ea:b7:bb:40:42:c8:e9:5c:da:89:57:ef:db:
         d2:d9:17:c3:ad:08:e9:86:23:83:2d:12:b7:b9:23:6c:8f:ff:
         04:e7:01:3f:c5:ee:7d:0a:bc:6f:f7:3a:da:13:d4:04:14:04:
         15:74:a4:c2:18:fa:ca:c8:68:44:c9:45:78:80:d1:cb:31:d9:
         64:43:da:48:7b:2f:ef:4a:03:6a:53:e3:32:f4:d0:df:63:a2:
         19:44:83:40:08:c2:4c:74:6a:61:db:4d:30:03:c0:42:67:5d:
         a5:3c:04:49:d0:f2:a6:55:04:35:14:f2:dd:72:e5:61:96:24:
         09:d8:b9:97:65:f2:2c:45:2f:c6:2d:ee:38:81:3e:31:02:df:
         6b:dd:5f:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAMDGBDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDIyMDAyMzI0NFoXDTIzMTIxODAzNTIw
MlowMzExMC8GA1UEAxMoZDNmMTQwM2Q2MGRlYmExOTk5MDYxOGE2YTViYTlhNDU5
MDIxZDYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKy38LVAspMW
nvXvL02wVT2lYVZfr/iL6xZUoVR7HX8wL7+lbNBcd1zbFexMIJ0eHva45hGFng5m
2vOJUDdyuk2Hzz0O0sTj1uqG0TadqBKhizze8uel9tIGhadMT9cfmWJljMcV06JZ
NE8ooBxrhLXP4hcVGniUXZL+u0LzdRDPfeoo1Xhq22T3in0Xz371k8vdFiwEngay
ulyMDELeApL5ZCJHHi/2MB1i+0B7QNKcrCvCO856XD2SXTL0I7ZQnJEblYS+isee
3OqBsCSKSNkqRPSiRJ5ol836vPOo03PL0Nb3VADeXi34gKnhNnz4ygQFi8NIveHw
jmE/Isbhy5ECAwEAAaOCAu0wggLpMB0GA1UdDgQWBBS4AHLUaXrdsZi66R1wx4gb
Pbi1fzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNGI2NDkxMy0zZjIy
LTQ1MGItODg4ZC1hMDI3NThkZmEzYTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjRiNjQ5MTMtM2YyMi00
NTBiLTg4OGQtYTAyNzU4ZGZhM2EyL2QzZjE0MDNkNjBkZWJhMTk5OTA2MThhNmE1
YmE5YTQ1OTAyMWQ2MTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAslNYDANBAIAAjAHAwUAKAYDqDAN
BgkqhkiG9w0BAQsFAAOCAQEAhepgXQvO8CnBJcnaDkml42A6mZmr7/nSVV08uIwY
mmyLujIXVk5Wh5hWGudpzYQFp968xTnT0g7gDYXkK6Zo5iArW+mcSod1IbmZXY5Y
eLhmfEHBNXheOFcLsTpUPsVKZ4FSKXhKXHxE3lLkXHXdSq/qt7tAQsjpXNqJV+/b
0tkXw60I6YYjgy0St7kjbI//BOcBP8XufQq8b/c62hPUBBQEFXSkwhj6yshoRMlF
eIDRyzHZZEPaSHsv70oDalPjMvTQ32OiGUSDQAjCTHRqYdtNMAPAQmddpTwESdDy
plUENRTy3XLlYZYkCdi5l2XyLEUvxi3uOIE+MQLfa91fpA==
-----END CERTIFICATE-----