Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
File:                     f4d58c84621ad64623cd4679aa4e983e69c0c959.cer (raw, json)
Hash identifier:          H4J/uO6dnQ7ErbQQmDK8j61Zy4CZS+LHqtlmwGgCO8g=
Subject key identifier:   45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C612AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Apr 2022 14:24:07 +0000
Certificate not after:    Sun 04 Feb 2024 05:00:00 +0000
Subordinate resources:    IP: 168.228.108.0/22
                          IP: 2801:1d8::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12980907 (0xc612ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 28 14:24:07 2022 GMT
            Not After : Feb  4 05:00:00 2024 GMT
        Subject: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:67:7e:bd:99:96:db:82:f0:4e:f5:aa:e5:
                    ef:4a:b1:f2:08:8c:22:3b:e3:ab:5c:50:cf:7c:25:
                    57:d5:b5:bc:b7:6f:96:a3:fe:3b:58:83:00:e2:54:
                    c2:5d:14:e7:f9:0f:3b:17:aa:64:30:6a:a9:ff:00:
                    67:be:04:59:27:ad:97:f7:1c:47:65:3a:27:b7:9b:
                    bb:ff:2c:fa:21:ba:db:18:5c:67:0a:c5:09:17:b2:
                    9d:a2:f6:c1:73:7d:4b:2d:8c:7d:3c:3d:a2:1d:86:
                    47:80:4c:ce:2a:98:50:68:80:2a:75:85:62:a5:40:
                    b0:cb:05:97:a7:77:43:5c:14:9b:8d:33:02:35:c6:
                    e8:f6:bd:16:96:59:76:f3:09:fc:09:c8:20:a9:21:
                    64:28:42:ea:65:38:c0:71:22:b9:a3:56:ab:dc:1a:
                    fc:b6:5e:9b:ec:68:43:b6:37:bf:e8:94:1b:a0:b5:
                    16:75:8e:ea:14:b4:f1:b1:9d:f9:c0:d4:10:9a:58:
                    17:45:cd:a3:0a:d9:ac:b6:89:2e:f8:c8:37:09:23:
                    c9:85:24:f5:5d:10:49:d8:35:39:b7:ef:69:7f:c2:
                    78:be:44:46:39:ad:3d:b0:63:e7:96:1d:aa:95:53:
                    d6:f5:8e:63:53:fb:74:60:77:11:ac:77:ac:26:2a:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.108.0/22
                IPv6:
                  2801:1d8::/36

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:7f:3d:0c:3c:23:04:dd:9e:e6:ac:7f:5d:01:27:37:c3:
         a0:ed:e4:4c:5c:de:e9:0c:cf:14:e5:6d:5a:59:6f:09:37:c4:
         2d:ea:62:c0:c3:be:e2:db:5b:d5:e3:62:5a:10:eb:36:0d:44:
         0a:d6:23:79:9c:09:27:17:6a:e1:dc:1c:91:aa:fb:17:5a:99:
         28:26:d8:e9:0d:03:17:e3:6f:52:54:82:de:af:ad:db:ef:9a:
         43:31:49:2d:19:da:6f:ab:8e:f8:de:c7:8c:bf:b6:71:77:2f:
         ad:82:83:d9:13:2c:6a:e4:f4:81:91:b4:95:03:63:c3:f9:0f:
         d6:3e:71:75:99:1e:09:3e:fa:f5:f2:ed:87:11:7e:ba:33:a9:
         23:b6:d8:46:0e:95:35:05:f0:55:67:d4:a9:ad:44:b9:24:5c:
         d0:3e:79:1e:f4:14:f1:65:25:a6:77:22:e9:43:4d:9d:60:da:
         07:93:ca:65:79:f7:20:ca:4d:ec:5a:29:d2:68:15:69:a4:32:
         dc:bc:26:04:76:b0:aa:1f:09:6b:75:f2:7d:b7:0d:ca:f6:48:
         c9:58:83:3a:ff:da:92:22:85:26:5b:b5:d0:6e:fd:48:3f:f0:
         dc:b5:dd:82:e7:52:07:4b:f0:50:8c:46:59:2a:78:b5:5d:9f:
         d0:a0:31:b7
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIEAMYSqzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDQyODE0MjQwN1oXDTI0MDIwNDA1MDAw
MFowMzExMC8GA1UEAxMoZjRkNThjODQ2MjFhZDY0NjIzY2Q0Njc5YWE0ZTk4M2U2
OWMwYzk1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANksZ369mZbb
gvBO9arl70qx8giMIjvjq1xQz3wlV9W1vLdvlqP+O1iDAOJUwl0U5/kPOxeqZDBq
qf8AZ74EWSetl/ccR2U6J7ebu/8s+iG62xhcZwrFCReynaL2wXN9Sy2MfTw9oh2G
R4BMziqYUGiAKnWFYqVAsMsFl6d3Q1wUm40zAjXG6Pa9FpZZdvMJ/AnIIKkhZChC
6mU4wHEiuaNWq9wa/LZem+xoQ7Y3v+iUG6C1FnWO6hS08bGd+cDUEJpYF0XNowrZ
rLaJLvjINwkjyYUk9V0QSdg1ObfvaX/CeL5ERjmtPbBj55YdqpVT1vWOY1P7dGB3
Eax3rCYqfrECAwEAAaOCAu4wggLqMB0GA1UdDgQWBBRFQhIP0KvhedbJ6OT5NdU3
iZfPujAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MjE2NGRmZS0wNTg4
LTRlOWQtOTU3Yy1mNTE4NzA3YTVlMzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTIxNjRkZmUtMDU4OC00
ZTlkLTk1N2MtZjUxODcwN2E1ZTM1L2Y0ZDU4Yzg0NjIxYWQ2NDYyM2NkNDY3OWFh
NGU5ODNlNjljMGM5NTkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAqjkbDAOBAIAAjAIAwYEKAEB2AAw
DQYJKoZIhvcNAQELBQADggEBAAfvfz0MPCME3Z7mrH9dASc3w6Dt5Exc3ukMzxTl
bVpZbwk3xC3qYsDDvuLbW9XjYloQ6zYNRArWI3mcCScXauHcHJGq+xdamSgm2OkN
Axfjb1JUgt6vrdvvmkMxSS0Z2m+rjvjex4y/tnF3L62Cg9kTLGrk9IGRtJUDY8P5
D9Y+cXWZHgk++vXy7YcRfrozqSO22EYOlTUF8FVn1KmtRLkkXNA+eR70FPFlJaZ3
IulDTZ1g2geTymV59yDKTexaKdJoFWmkMty8JgR2sKofCWt18n23Dcr2SMlYgzr/
2pIihSZbtdBu/Ug/8Ny13YLnUgdL8FCMRlkqeLVdn9CgMbc=
-----END CERTIFICATE-----