Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e35265d5b311e016b0d83ba29138bc707e21721b.cer
File:                     e35265d5b311e016b0d83ba29138bc707e21721b.cer (raw, json)
Hash identifier:          kzNKd56UhGiuFWvm7PcLLHJN4rkzrJEueE+95E4DyT0=
Subject key identifier:   FC:1A:22:05:32:C6:A4:63:35:18:21:0F:60:6D:77:ED:67:E1:E4:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D64DB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8257f013-afa3-456e-aefa-ebaa7ba59392/e35265d5b311e016b0d83ba29138bc707e21721b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8257f013-afa3-456e-aefa-ebaa7ba59392/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 15 May 2021 18:11:40 +0000
Certificate not after:    Sat 02 Dec 2023 15:19:02 +0000
Subordinate resources:    AS: 271870
                          IP: 177.73.152.0/22
                          IP: 2803:9410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14044593 (0xd64db1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 18:11:40 2021 GMT
            Not After : Dec  2 15:19:02 2023 GMT
        Subject: CN=e35265d5b311e016b0d83ba29138bc707e21721b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:11:4b:3e:5b:db:01:f2:6b:e6:f6:d5:76:
                    06:f3:b2:36:9f:da:74:b6:a3:a5:7e:65:25:01:88:
                    76:e2:ce:fd:aa:4d:97:8c:ae:90:dc:13:1b:cf:18:
                    a5:1e:c0:ec:c7:af:fc:50:5e:86:7b:45:6e:28:86:
                    c1:79:6c:10:7a:e4:7a:fa:7d:eb:a3:ad:6a:ef:77:
                    28:63:d9:fc:f4:d1:9a:2f:13:ad:42:49:8b:7c:05:
                    57:66:fe:eb:83:7f:66:d2:3f:33:9a:eb:17:d8:a8:
                    15:f1:ee:22:be:d6:3b:c7:69:3a:75:f1:cb:fc:c1:
                    ac:0d:93:e6:3d:77:46:57:3d:ea:d4:ec:29:b4:88:
                    76:6f:a2:c6:b2:b7:4e:a3:e0:09:cf:bf:d7:ec:3f:
                    c0:8a:66:5f:fd:b7:08:3f:d3:06:ef:5f:00:17:81:
                    83:8b:f6:48:bf:ac:86:6c:e7:2e:9e:0e:59:85:fe:
                    5c:31:dd:57:d1:9a:16:a4:bb:58:01:59:c9:99:be:
                    22:3d:25:57:db:1f:f4:cc:5c:0c:46:b0:04:86:9f:
                    36:70:ed:2e:67:a7:5d:ca:bb:6d:65:3e:17:5c:8a:
                    f4:82:94:7a:68:58:64:a4:68:d2:6d:01:29:22:60:
                    26:02:0d:08:6a:b5:93:64:2d:3f:4c:d5:54:26:a5:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1A:22:05:32:C6:A4:63:35:18:21:0F:60:6D:77:ED:67:E1:E4:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8257f013-afa3-456e-aefa-ebaa7ba59392/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8257f013-afa3-456e-aefa-ebaa7ba59392/e35265d5b311e016b0d83ba29138bc707e21721b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.152.0/22
                IPv6:
                  2803:9410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271870

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:a8:e0:34:4f:4b:6f:96:36:63:dd:e2:12:c8:ad:06:bd:
         2a:1e:0c:3e:39:d9:1a:37:7c:ce:96:ad:5b:8e:41:80:8e:22:
         25:98:50:a6:c4:d9:09:0b:5a:b9:74:be:47:2b:c6:29:37:f8:
         40:dd:12:74:fc:96:91:84:d3:07:e4:37:df:a1:71:f2:38:e9:
         a4:d6:22:7d:59:47:b3:0a:20:a3:51:ca:70:77:0c:ff:82:1b:
         43:58:84:44:f0:50:1f:71:ea:07:7a:da:42:d0:9f:c5:39:54:
         27:e3:24:e4:7a:c9:59:6e:e3:70:4e:db:2c:31:f5:4f:68:9f:
         fd:f2:df:94:d5:30:3b:c8:75:c8:dd:9f:7a:73:ad:dd:50:f0:
         1f:fb:04:36:12:ba:16:35:f7:f5:ef:f0:78:91:d2:43:04:64:
         bd:6a:3f:9d:81:22:89:db:43:cc:52:c9:d3:38:d5:1d:65:03:
         1e:86:cd:70:c8:d6:75:7b:fd:69:4d:50:0e:87:36:7e:06:68:
         0f:a2:8a:3b:8a:8d:35:96:3f:f7:02:45:66:78:d2:ff:fd:41:
         4e:e5:d6:9c:61:4b:27:97:3d:16:37:68:95:33:c4:c2:a3:b0:
         ce:63:cf:56:f3:74:e8:7a:24:fd:da:fa:44:14:f5:79:75:0b:
         1a:47:b1:1f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANZNsTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUxNTE4MTE0MFoXDTIzMTIwMjE1MTkw
MlowMzExMC8GA1UEAxMoZTM1MjY1ZDViMzExZTAxNmIwZDgzYmEyOTEzOGJjNzA3
ZTIxNzIxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIsEUs+W9sB
8mvm9tV2BvOyNp/adLajpX5lJQGIduLO/apNl4yukNwTG88YpR7A7Mev/FBehntF
biiGwXlsEHrkevp966Otau93KGPZ/PTRmi8TrUJJi3wFV2b+64N/ZtI/M5rrF9io
FfHuIr7WO8dpOnXxy/zBrA2T5j13Rlc96tTsKbSIdm+ixrK3TqPgCc+/1+w/wIpm
X/23CD/TBu9fABeBg4v2SL+shmznLp4OWYX+XDHdV9GaFqS7WAFZyZm+Ij0lV9sf
9MxcDEawBIafNnDtLmenXcq7bWU+F1yK9IKUemhYZKRo0m0BKSJgJgINCGq1k2Qt
P0zVVCal8jECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT8GiIFMsakYzUYIQ9gbXft
Z+HktzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MjU3ZjAxMy1hZmEz
LTQ1NmUtYWVmYS1lYmFhN2JhNTkzOTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODI1N2YwMTMtYWZhMy00
NTZlLWFlZmEtZWJhYTdiYTU5MzkyL2UzNTI2NWQ1YjMxMWUwMTZiMGQ4M2JhMjkx
MzhiYzcwN2UyMTcyMWIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArFJmDANBAIAAjAHAwUAKAOUEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJf4wDQYJKoZIhvcNAQELBQADggEBAJKb
qOA0T0tvljZj3eISyK0GvSoeDD452Ro3fM6WrVuOQYCOIiWYUKbE2QkLWrl0vkcr
xik3+EDdEnT8lpGE0wfkN9+hcfI46aTWIn1ZR7MKIKNRynB3DP+CG0NYhETwUB9x
6gd62kLQn8U5VCfjJOR6yVlu43BO2ywx9U9on/3y35TVMDvIdcjdn3pzrd1Q8B/7
BDYSuhY19/Xv8HiR0kMEZL1qP52BIonbQ8xSydM41R1lAx6GzXDI1nV7/WlNUA6H
Nn4GaA+iijuKjTWWP/cCRWZ40v/9QU7l1pxhSyeXPRY3aJUzxMKjsM5jz1bzdOh6
JP3a+kQU9Xl1CxpHsR8=
-----END CERTIFICATE-----