Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
File:                     d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer (raw, json)
Hash identifier:          EaOrdjiJfApmrniE90mk1hy3SOd9PzWktQLqBfKPWcs=
Subject key identifier:   12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7CC6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Nov 2021 15:32:08 +0000
Certificate not after:    Fri 22 Dec 2023 17:11:59 +0000
Subordinate resources:    AS: 266738
                          IP: 45.229.151.0/24
                          IP: 2803:8b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14142572 (0xd7cc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  2 15:32:08 2021 GMT
            Not After : Dec 22 17:11:59 2023 GMT
        Subject: CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:74:cc:d7:b6:c0:14:ec:e7:fd:7b:c9:03:86:
                    80:f5:2f:19:55:6a:e7:25:13:ed:45:66:03:bb:b6:
                    d4:e6:d6:c6:c9:a5:bb:69:8f:71:75:b4:b9:f5:83:
                    d2:6a:74:f5:65:0c:28:8a:10:88:c0:93:79:cf:76:
                    0f:1a:21:1a:e7:0b:92:1c:9a:82:59:07:6d:27:7a:
                    c5:8f:e9:16:3d:aa:8a:f3:f3:e0:b1:36:4b:19:45:
                    fd:95:37:66:de:c1:97:9d:f0:81:48:ad:ea:6a:9b:
                    6f:1a:2b:1d:ed:74:dd:51:c6:7b:05:b9:10:5c:53:
                    bf:cd:1f:7f:fb:82:8a:56:47:e5:47:1f:d8:ed:0f:
                    bf:6e:b8:c0:29:f6:97:45:ea:5d:0f:a4:b6:75:21:
                    2d:df:47:c1:30:07:c2:a7:d2:ae:17:91:b4:ce:8f:
                    65:69:4d:4d:20:e1:34:3f:56:83:53:19:10:a1:c6:
                    f4:05:71:57:d9:f9:77:b1:ff:43:fb:b3:45:29:48:
                    12:e5:0d:8b:78:5e:d4:e9:a7:fc:05:fd:f6:b9:94:
                    a9:fb:a9:5e:eb:e2:8b:91:78:e4:61:03:65:46:2f:
                    f8:fb:80:27:22:26:e8:e1:25:c4:17:9b:57:85:d5:
                    2b:f2:5e:9f:7b:ed:ee:ac:9b:3d:b0:92:92:5b:86:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.151.0/24
                IPv6:
                  2803:8b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266738

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:a2:53:07:c5:b2:f7:a9:ac:15:e2:e4:65:3e:c8:e8:4e:
         16:4a:04:a9:21:2b:3e:a1:6f:85:56:45:14:16:81:40:52:b8:
         a2:06:4d:c5:44:49:9e:cb:61:17:5b:3e:1c:39:e8:8d:f5:96:
         5b:70:89:bb:78:e5:cf:9b:85:ea:29:96:5a:9f:46:45:b9:86:
         52:d4:e0:86:d1:47:b1:b0:bd:25:37:d0:0f:82:5f:49:ad:9b:
         b9:ad:85:35:4e:05:4a:49:30:b1:e8:3c:06:06:4e:98:cf:27:
         cb:bc:97:ea:37:33:99:2c:06:25:ed:f0:fe:2b:ff:59:0f:a3:
         94:16:7d:b0:a9:55:dd:d8:55:86:8a:c4:de:58:39:15:84:95:
         5a:f2:c4:33:67:20:ee:7e:d5:47:20:3a:5c:79:e6:5b:cf:17:
         d2:25:85:42:ed:1b:d8:2a:36:6f:85:8f:90:eb:79:7f:e1:29:
         8c:1e:e9:b2:2f:96:ac:ce:08:55:00:ac:ad:41:47:c7:e3:88:
         c1:90:fd:9d:03:82:d0:a8:5a:22:82:17:26:bb:8c:f1:2b:32:
         38:54:70:5d:b3:4a:07:94:9c:8f:73:11:d0:14:46:e7:da:d6:
         30:9a:92:57:b0:aa:67:03:53:f4:c9:51:87:6e:92:c0:db:62:
         06:c8:06:cf
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANfMbDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTEwMjE1MzIwOFoXDTIzMTIyMjE3MTE1
OVowMzExMC8GA1UEAxMoZDhjMDY0OGJiMDZmNTdlOTRiNzZmNGQ4NGFjYzI1Mjlj
M2JkNzZhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIB0zNe2wBTs
5/17yQOGgPUvGVVq5yUT7UVmA7u21ObWxsmlu2mPcXW0ufWD0mp09WUMKIoQiMCT
ec92DxohGucLkhyaglkHbSd6xY/pFj2qivPz4LE2SxlF/ZU3Zt7Bl53wgUit6mqb
bxorHe103VHGewW5EFxTv80ff/uCilZH5Ucf2O0Pv264wCn2l0XqXQ+ktnUhLd9H
wTAHwqfSrheRtM6PZWlNTSDhND9Wg1MZEKHG9AVxV9n5d7H/Q/uzRSlIEuUNi3he
1Omn/AX99rmUqfupXuvii5F45GEDZUYv+PuAJyIm6OElxBebV4XVK/Jen3vt7qyb
PbCSkluGCxECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQSMsTEwXIRNUGJD2V/O9rM
Ag+LRzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNmQ0MmZjMC1hOWU5
LTRjZTgtOTRiMi1iNGRhZWU4ZDgzNWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjZkNDJmYzAtYTllOS00
Y2U4LTk0YjItYjRkYWVlOGQ4MzVmL2Q4YzA2NDhiYjA2ZjU3ZTk0Yjc2ZjRkODRh
Y2MyNTI5YzNiZDc2YWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC3llzANBAIAAjAHAwUAKAOLIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEfIwDQYJKoZIhvcNAQELBQADggEBAJbv
olMHxbL3qawV4uRlPsjoThZKBKkhKz6hb4VWRRQWgUBSuKIGTcVESZ7LYRdbPhw5
6I31lltwibt45c+bheopllqfRkW5hlLU4IbRR7GwvSU30A+CX0mtm7mthTVOBUpJ
MLHoPAYGTpjPJ8u8l+o3M5ksBiXt8P4r/1kPo5QWfbCpVd3YVYaKxN5YORWElVry
xDNnIO5+1UcgOlx55lvPF9IlhULtG9gqNm+Fj5DreX/hKYwe6bIvlqzOCFUArK1B
R8fjiMGQ/Z0DgtCoWiKCFya7jPErMjhUcF2zSgeUnI9zEdAURufa1jCaklewqmcD
U/TJUYduksDbYgbIBs8=
-----END CERTIFICATE-----