Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer
File:                     dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer (raw, json)
Hash identifier:          SHv9KNbnAHSYuZ3i7hSRmHKXPCtVo7VV9rZhLXw0SRc=
Subject key identifier:   24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB11AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Feb 2022 20:15:58 +0000
Certificate not after:    Tue 29 Oct 2024 16:24:08 +0000
Subordinate resources:    AS: 272032
                          IP: 181.224.88.0/22
                          IP: 2803:b510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16454063 (0xfb11af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 10 20:15:58 2022 GMT
            Not After : Oct 29 16:24:08 2024 GMT
        Subject: CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:0f:b5:20:96:15:6d:07:e3:01:15:76:d3:
                    6f:29:1f:a1:ec:3d:aa:92:7b:45:26:61:7c:45:37:
                    36:fa:46:c2:9f:e0:ec:f6:8d:71:5a:4b:3a:52:06:
                    be:c6:fd:f1:38:09:9e:a5:cc:b6:de:e1:9a:ac:0e:
                    9b:d9:13:f3:4f:5c:cf:d0:cc:46:51:58:84:05:c6:
                    fd:a1:cf:94:68:09:be:58:fb:a8:f6:cf:9b:4e:61:
                    ef:a9:47:36:9f:c2:14:88:74:34:69:bd:09:1b:1c:
                    3a:40:74:de:84:1b:60:32:77:eb:9d:ef:87:83:5d:
                    94:31:bc:c3:69:14:84:76:ee:70:1a:64:2b:57:e5:
                    db:25:31:ac:0e:da:d2:d0:dd:74:98:b3:ef:ad:06:
                    17:80:a8:a7:2e:cf:65:51:42:1f:88:0c:23:47:5b:
                    79:27:eb:95:d3:60:34:fc:61:1d:00:41:a9:bb:7d:
                    d1:6c:b0:a4:46:06:d0:49:2d:4e:fa:73:4d:56:c1:
                    60:e3:32:c5:3e:4a:91:4d:04:b0:1a:04:2f:17:2d:
                    37:ee:f7:78:5b:91:4b:9a:f8:c1:9d:3c:7d:bc:45:
                    a3:b5:ce:96:70:3a:77:d9:d4:1d:3e:e7:d6:14:e0:
                    8d:22:ab:4d:f0:28:de:c6:bd:a9:19:e0:28:ab:b7:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.88.0/22
                IPv6:
                  2803:b510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272032

    Signature Algorithm: sha256WithRSAEncryption
         13:55:c6:35:89:12:1f:57:7a:04:b4:a9:44:be:c5:4f:7d:8f:
         ea:69:89:54:37:fd:63:a0:78:5d:7d:4c:e1:bc:5a:47:1c:da:
         c2:8b:9e:90:19:5f:19:a5:ea:ae:62:12:a0:54:ae:61:52:75:
         6f:2c:b5:2c:b6:b0:c7:92:3c:9e:7e:df:5a:7d:16:ce:55:3a:
         97:1f:91:8f:5a:f4:5f:b2:6a:cc:b1:b3:60:a4:52:ed:64:53:
         51:1c:22:cb:7f:04:1f:1f:ac:8f:6b:60:18:1f:f6:36:33:a0:
         98:0e:76:49:d5:f3:8c:c9:33:9d:a0:ee:f3:dc:62:99:64:37:
         5e:98:94:3e:01:ca:5a:01:4c:3b:19:d0:2f:0c:2b:83:31:b5:
         0d:33:5f:5a:45:99:ff:2a:81:31:7a:92:a9:22:5f:d8:88:26:
         2b:dc:74:41:7f:4a:e0:8c:b3:57:f9:6c:2a:76:54:a7:1c:81:
         dc:37:0e:49:06:22:bb:3d:d2:c6:f4:38:1b:78:1b:74:7e:88:
         8e:86:fb:e9:c9:07:95:27:59:1a:48:8c:15:ee:24:77:9a:91:
         1c:66:9c:08:ec:e9:9f:b8:ad:0d:38:09:e4:6f:32:9e:6d:9c:
         71:9c:e1:cf:de:35:6c:28:12:c1:a3:b9:c9:21:40:9e:eb:2d:
         7f:23:cb:0b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPsRrzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDIxMDIwMTU1OFoXDTI0MTAyOTE2MjQw
OFowMzExMC8GA1UEAxMoZGRkZmQ2YWJmYmM3ZWY3ZjZkNGQwMTI3M2IwMDA5Yzkw
ZjhhYzE1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIYsD7UglhVt
B+MBFXbTbykfoew9qpJ7RSZhfEU3NvpGwp/g7PaNcVpLOlIGvsb98TgJnqXMtt7h
mqwOm9kT809cz9DMRlFYhAXG/aHPlGgJvlj7qPbPm05h76lHNp/CFIh0NGm9CRsc
OkB03oQbYDJ3653vh4NdlDG8w2kUhHbucBpkK1fl2yUxrA7a0tDddJiz760GF4Co
py7PZVFCH4gMI0dbeSfrldNgNPxhHQBBqbt90WywpEYG0EktTvpzTVbBYOMyxT5K
kU0EsBoELxctN+73eFuRS5r4wZ08fbxFo7XOlnA6d9nUHT7n1hTgjSKrTfAo3sa9
qRngKKu32vcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQkwT+JVsClNC8j1MJUD8jM
wMEPNzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZDc4OGMzOS1hYjU1
LTQ1NjktOGJjYS04YjAxNTlkMDg5MTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWQ3ODhjMzktYWI1NS00
NTY5LThiY2EtOGIwMTU5ZDA4OTE1L2RkZGZkNmFiZmJjN2VmN2Y2ZDRkMDEyNzNi
MDAwOWM5MGY4YWMxNTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXgWDANBAIAAjAHAwUAKAO1EDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJqAwDQYJKoZIhvcNAQELBQADggEBABNV
xjWJEh9XegS0qUS+xU99j+ppiVQ3/WOgeF19TOG8Wkcc2sKLnpAZXxml6q5iEqBU
rmFSdW8stSy2sMeSPJ5+31p9Fs5VOpcfkY9a9F+yasyxs2CkUu1kU1EcIst/BB8f
rI9rYBgf9jYzoJgOdknV84zJM52g7vPcYplkN16YlD4ByloBTDsZ0C8MK4MxtQ0z
X1pFmf8qgTF6kqkiX9iIJivcdEF/SuCMs1f5bCp2VKccgdw3DkkGIrs90sb0OBt4
G3R+iI6G++nJB5UnWRpIjBXuJHeakRxmnAjs6Z+4rQ04CeRvMp5tnHGc4c/eNWwo
EsGjuckhQJ7rLX8jyws=
-----END CERTIFICATE-----