Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.cer
File:                     d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.cer (raw, json)
Hash identifier:          zszyw7OTktwalTQFi7ScrrTRTP8njWjDaIwvkDfHdTM=
Subject key identifier:   ED:3C:99:F3:7A:A9:1C:A6:16:0F:FF:3A:49:DC:1D:15:C7:3F:46:E5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB6424
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Feb 2021 18:10:20 +0000
Certificate not after:    Wed 26 Jun 2024 08:31:01 +0000
Subordinate resources:    IP: 186.209.92.0/22
                          IP: 2806:3cd::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15426596 (0xeb6424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 18:10:20 2021 GMT
            Not After : Jun 26 08:31:01 2024 GMT
        Subject: CN=d5500d1ecca7525c7eb9f64c4ac2576932ed59cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:3f:93:b4:f6:f4:61:e3:9b:2d:f4:96:d2:
                    9d:2d:95:2a:50:53:1a:b7:d1:73:f4:28:c1:ea:e1:
                    be:3b:94:95:eb:e6:22:38:3f:03:e3:b4:e4:e7:6e:
                    50:69:48:36:5d:1a:4a:7e:a0:89:62:d9:fc:a6:0b:
                    50:84:79:e6:d4:91:da:18:c8:07:8c:d0:0e:b6:2c:
                    62:ee:98:18:87:3a:e9:bd:7b:3d:29:2a:a6:e6:6d:
                    51:4d:42:63:23:9a:8d:ba:d4:cd:78:57:27:4e:c9:
                    8b:1b:a9:b1:e2:1e:d3:c0:23:2d:fa:ca:42:12:17:
                    66:90:84:21:58:22:37:4b:26:2d:70:d7:f6:6f:40:
                    8e:00:1c:9a:4b:54:9d:06:35:81:73:d8:be:1f:a1:
                    00:fe:39:f5:82:12:8b:84:75:fc:2f:de:06:30:ac:
                    61:ec:0c:79:66:7e:6c:2e:77:d0:4c:21:68:ae:0e:
                    4a:45:fc:4f:db:d2:51:82:c9:a6:67:70:ff:1e:08:
                    e9:c6:dd:d5:93:69:b1:c8:60:1d:1a:c5:34:ec:d3:
                    71:4d:7a:dd:9f:d9:d4:82:60:93:79:86:81:54:cc:
                    87:0e:c0:22:2c:51:94:f7:d6:6e:8c:a3:e7:78:05:
                    ef:11:ea:a1:29:1a:48:45:8e:97:36:4a:6a:ab:ea:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:99:F3:7A:A9:1C:A6:16:0F:FF:3A:49:DC:1D:15:C7:3F:46:E5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.92.0/22
                IPv6:
                  2806:3cd::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:47:c6:58:98:c4:06:b8:12:ca:45:c1:34:ea:53:5a:54:99:
         3d:ee:1b:58:16:c2:61:4d:d5:6f:a3:03:f3:22:b2:bc:7c:03:
         b0:fa:2b:02:f3:3c:2e:c9:3a:b7:ba:d4:a9:33:8d:98:9e:7a:
         e8:f5:a7:b2:d5:77:4e:6e:a6:5c:d4:40:50:b2:08:9d:09:84:
         90:c0:50:d8:ba:c6:30:b7:c9:09:d5:16:fc:93:1a:b9:54:66:
         34:2e:76:0a:9b:9f:c5:3e:e7:5d:9f:da:7a:88:76:70:42:b4:
         91:40:dc:ec:3b:af:ca:8c:cb:fc:36:2d:68:7d:59:f0:f3:ee:
         0a:0a:c2:f1:8e:36:d0:69:1f:bb:88:31:58:f3:bb:05:d1:a9:
         ed:70:da:7c:7e:84:bb:a3:05:5a:57:e6:4b:60:ee:44:6d:af:
         e9:55:5b:27:4f:6f:b3:45:aa:f3:bb:17:94:73:3d:cc:01:52:
         6f:b9:ef:c6:d6:8a:76:ea:6e:06:ac:ff:d8:6e:54:1b:65:53:
         1b:3d:66:b2:c4:8a:21:ea:f5:4c:07:85:0a:cc:9b:e1:08:c8:
         9f:e1:74:66:40:95:62:04:42:39:b9:6a:3d:e6:c3:40:a1:f6:
         ba:74:3f:20:92:59:82:3e:02:d9:8a:9f:c3:8d:b1:f9:cc:73:
         75:da:3a:92
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOtkJDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIwODE4MTAyMFoXDTI0MDYyNjA4MzEw
MVowMzExMC8GA1UEAxMoZDU1MDBkMWVjY2E3NTI1YzdlYjlmNjRjNGFjMjU3Njkz
MmVkNTljZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ8P5O09vRh
45st9JbSnS2VKlBTGrfRc/QowerhvjuUlevmIjg/A+O05OduUGlINl0aSn6giWLZ
/KYLUIR55tSR2hjIB4zQDrYsYu6YGIc66b17PSkqpuZtUU1CYyOajbrUzXhXJ07J
ixupseIe08AjLfrKQhIXZpCEIVgiN0smLXDX9m9AjgAcmktUnQY1gXPYvh+hAP45
9YISi4R1/C/eBjCsYewMeWZ+bC530EwhaK4OSkX8T9vSUYLJpmdw/x4I6cbd1ZNp
schgHRrFNOzTcU163Z/Z1IJgk3mGgVTMhw7AIixRlPfWboyj53gF7xHqoSkaSEWO
lzZKaqvqzNkCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTtPJnzeqkcphYP/zpJ3B0V
xz9G5TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84YTlkMWE5Yi1iOThm
LTQ0YzMtOWFmMC03N2QzYzZiYWIxMGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGE5ZDFhOWItYjk4Zi00
NGMzLTlhZjAtNzdkM2M2YmFiMTBkL2Q1NTAwZDFlY2NhNzUyNWM3ZWI5ZjY0YzRh
YzI1NzY5MzJlZDU5Y2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArrRXDANBAIAAjAHAwUAKAYDzTAN
BgkqhkiG9w0BAQsFAAOCAQEAIEfGWJjEBrgSykXBNOpTWlSZPe4bWBbCYU3Vb6MD
8yKyvHwDsPorAvM8Lsk6t7rUqTONmJ566PWnstV3Tm6mXNRAULIInQmEkMBQ2LrG
MLfJCdUW/JMauVRmNC52CpufxT7nXZ/aeoh2cEK0kUDc7DuvyozL/DYtaH1Z8PPu
CgrC8Y420Gkfu4gxWPO7BdGp7XDafH6Eu6MFWlfmS2DuRG2v6VVbJ09vs0Wq87sX
lHM9zAFSb7nvxtaKdupuBqz/2G5UG2VTGz1mssSKIer1TAeFCsyb4QjIn+F0ZkCV
YgRCOblqPebDQKH2unQ/IJJZgj4C2Yqfw42x+cxzddo6kg==
-----END CERTIFICATE-----