Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3e4d6ad66495e2827254b8b26155c3a1f0a43f3.cer
File:                     f3e4d6ad66495e2827254b8b26155c3a1f0a43f3.cer (raw, json)
Hash identifier:          WbScIGXjHodSvRQkhUX4wG9iDjxuj11Aszw6TNJaxZ8=
Subject key identifier:   B2:18:6D:85:52:7A:00:E6:FE:9F:16:82:0C:74:DB:70:35:8C:73:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD40EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a49ac02c-8915-4e9f-9989-4f58d28e5b3d/f3e4d6ad66495e2827254b8b26155c3a1f0a43f3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a49ac02c-8915-4e9f-9989-4f58d28e5b3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Jul 2021 00:37:10 +0000
Certificate not after:    Thu 29 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 262150
                          IP: 131.72.204.0/22
                          IP: 190.96.112.0/20
                          IP: 200.105.104.0/21
                          IP: 2803:7300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14500079 (0xdd40ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  3 00:37:10 2021 GMT
            Not After : Feb 29 06:00:00 2024 GMT
        Subject: CN=f3e4d6ad66495e2827254b8b26155c3a1f0a43f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:82:4d:8c:93:bf:84:90:5a:43:47:cc:ef:
                    e5:b4:d2:ba:73:a0:69:1a:fe:06:b3:d1:bd:88:a5:
                    f0:f0:5d:81:4a:d8:23:fb:c5:10:ad:83:cc:57:05:
                    0e:ae:32:3f:78:ff:29:7d:9d:66:3e:57:b3:be:b9:
                    eb:1c:2a:fe:6b:3b:97:44:b5:ee:9f:ce:74:a4:d9:
                    9b:87:a7:7a:9b:61:bf:be:67:73:69:b7:8b:8c:fe:
                    5e:08:4b:79:32:e1:93:37:93:89:eb:bb:88:be:ea:
                    2d:1d:da:59:28:6c:6a:05:44:4e:ca:8a:8c:95:05:
                    a8:a6:31:7c:ca:74:9f:86:d7:b4:68:e4:30:20:bc:
                    eb:c2:ec:6a:d4:ed:1f:f1:e1:c9:6f:db:8f:72:f1:
                    3b:7c:74:6d:68:1c:19:d4:db:57:bf:5c:a9:3f:62:
                    fd:2d:b0:e6:f9:1e:46:cf:f7:95:a3:14:64:dd:a8:
                    b1:77:cb:6d:18:0d:19:d1:20:71:21:94:ba:20:40:
                    62:af:12:87:a9:92:e1:48:e3:30:57:75:c4:fa:71:
                    83:70:79:c0:7f:32:d6:0a:fa:51:67:e0:37:86:b3:
                    3f:84:3f:fb:21:e6:97:6f:ec:0d:34:a3:c9:71:0e:
                    45:6f:72:dc:cd:66:e1:00:07:7f:01:b6:27:7e:40:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:18:6D:85:52:7A:00:E6:FE:9F:16:82:0C:74:DB:70:35:8C:73:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a49ac02c-8915-4e9f-9989-4f58d28e5b3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a49ac02c-8915-4e9f-9989-4f58d28e5b3d/f3e4d6ad66495e2827254b8b26155c3a1f0a43f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.204.0/22
                  190.96.112.0/20
                  200.105.104.0/21
                IPv6:
                  2803:7300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262150

    Signature Algorithm: sha256WithRSAEncryption
         06:91:e6:af:e4:c5:16:c5:76:11:54:7b:b5:8a:de:5e:97:d8:
         d4:f9:30:d1:84:3a:e6:6d:91:14:89:87:bf:2f:2b:3b:5a:dd:
         c4:ff:2f:6c:be:29:36:2b:34:6d:62:4a:cc:55:aa:56:2a:78:
         79:66:b3:95:38:68:ea:3e:c3:a0:6c:ab:7e:88:2d:98:80:ea:
         dc:c3:cc:b5:cd:19:78:18:6d:d4:1d:52:8b:c8:6b:4c:d9:b8:
         36:b7:69:ea:86:ab:41:8a:10:d9:6c:83:99:9a:ec:3f:a0:d7:
         47:01:82:5c:66:dd:7a:e5:b9:23:f7:33:ed:6c:aa:4f:e0:22:
         04:6c:02:5a:bf:1a:ed:28:4f:c3:45:40:c5:95:cb:db:98:0e:
         46:2c:3f:09:e5:b4:a8:03:ff:8d:a3:f0:af:8e:c0:49:48:54:
         92:9e:56:bb:fe:76:64:fe:5a:b7:5e:9b:a7:ab:56:87:54:34:
         1c:2b:ab:34:bc:10:1d:8e:4f:71:fd:8c:2b:11:72:b9:7f:05:
         31:2a:98:4a:6b:31:94:bd:1f:7e:d5:be:d1:fb:93:63:13:82:
         e2:99:60:61:0f:99:8f:98:e9:dd:3a:fd:e1:41:46:d7:c3:a1:
         75:64:2b:29:6f:97:77:cb:8c:7a:a5:be:8f:57:76:08:72:21:
         1c:99:77:25
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIEAN1A7zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDcwMzAwMzcxMFoXDTI0MDIyOTA2MDAw
MFowMzExMC8GA1UEAxMoZjNlNGQ2YWQ2NjQ5NWUyODI3MjU0YjhiMjYxNTVjM2Ex
ZjBhNDNmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJGCgk2Mk7+E
kFpDR8zv5bTSunOgaRr+BrPRvYil8PBdgUrYI/vFEK2DzFcFDq4yP3j/KX2dZj5X
s7656xwq/ms7l0S17p/OdKTZm4enepthv75nc2m3i4z+XghLeTLhkzeTieu7iL7q
LR3aWShsagVETsqKjJUFqKYxfMp0n4bXtGjkMCC868LsatTtH/HhyW/bj3LxO3x0
bWgcGdTbV79cqT9i/S2w5vkeRs/3laMUZN2osXfLbRgNGdEgcSGUuiBAYq8Sh6mS
4UjjMFd1xPpxg3B5wH8y1gr6UWfgN4azP4Q/+yHml2/sDTSjyXEORW9y3M1m4QAH
fwG2J35AHG0CAwEAAaOCAxUwggMRMB0GA1UdDgQWBBSyGG2FUnoA5v6fFoIMdNtw
NYxzCDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hNDlhYzAyYy04OTE1
LTRlOWYtOTk4OS00ZjU4ZDI4ZTViM2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTQ5YWMwMmMtODkxNS00
ZTlmLTk5ODktNGY1OGQyOGU1YjNkL2YzZTRkNmFkNjY0OTVlMjgyNzI1NGI4YjI2
MTU1YzNhMWYwYTQzZjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAoNIzAMEBL5gcAMEA8hpaDANBAIA
AjAHAwUAKANzADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAAYwDQYJKoZIhvcN
AQELBQADggEBAAaR5q/kxRbFdhFUe7WK3l6X2NT5MNGEOuZtkRSJh78vKzta3cT/
L2y+KTYrNG1iSsxVqlYqeHlms5U4aOo+w6Bsq36ILZiA6tzDzLXNGXgYbdQdUovI
a0zZuDa3aeqGq0GKENlsg5ma7D+g10cBglxm3XrluSP3M+1sqk/gIgRsAlq/Gu0o
T8NFQMWVy9uYDkYsPwnltKgD/42j8K+OwElIVJKeVrv+dmT+Wrdem6erVodUNBwr
qzS8EB2OT3H9jCsRcrl/BTEqmEprMZS9H37VvtH7k2MTguKZYGEPmY+Y6d06/eFB
RtfDoXVkKylvl3fLjHqlvo9XdghyIRyZdyU=
-----END CERTIFICATE-----