Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9378dc2b2eaf67b26db2d0ebc464eb192a93746.cer
File:                     f9378dc2b2eaf67b26db2d0ebc464eb192a93746.cer (raw, json)
Hash identifier:          FwZAI/rP+qlJGMg5OgPfAVyKHIjOV9ImaNpmgDxlqqQ=
Subject key identifier:   35:E7:1E:61:96:C4:4B:04:CF:EC:AE:9F:CD:A0:A4:17:C3:BC:F6:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB63FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/57152125-cb7f-4862-989d-a0579bcacae5/f9378dc2b2eaf67b26db2d0ebc464eb192a93746.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/57152125-cb7f-4862-989d-a0579bcacae5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Apr 2021 13:30:21 +0000
Certificate not after:    Tue 06 Feb 2024 14:20:32 +0000
Subordinate resources:    IP: 2801:15e::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14377983 (0xdb63ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  6 13:30:21 2021 GMT
            Not After : Feb  6 14:20:32 2024 GMT
        Subject: CN=f9378dc2b2eaf67b26db2d0ebc464eb192a93746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:4b:ab:d0:77:05:c0:38:1e:54:85:44:19:
                    6d:a2:c9:84:ca:14:9f:cd:9d:a6:91:9e:b0:1f:4c:
                    58:80:e6:bf:f3:e3:b5:d6:11:7a:24:f1:c1:f2:9e:
                    d5:1f:f8:b4:f3:f0:cf:20:bc:e4:c3:f9:f1:1e:29:
                    42:67:b8:c7:22:06:4f:54:4c:79:cb:fb:dd:35:0d:
                    f4:69:74:bb:12:0a:d2:06:ed:33:a7:78:4f:b1:52:
                    b2:4b:a3:06:d1:70:a9:81:2a:8a:20:96:24:67:42:
                    86:42:e7:b4:21:57:64:9c:67:25:a4:7e:b8:85:f7:
                    7b:f2:05:0a:5a:87:82:53:ea:25:0f:89:e9:89:aa:
                    76:70:9b:a4:ac:e1:16:0e:e2:ee:01:a2:59:2f:49:
                    23:b3:fd:95:e9:84:fe:21:85:07:27:7c:51:8b:0c:
                    9f:7e:5b:0d:54:ad:7e:ba:34:07:d1:cb:b2:e4:fb:
                    91:92:b7:3f:cc:02:4a:75:e0:f9:b0:c9:2f:bc:ce:
                    2e:19:a5:cb:4e:04:10:ac:5f:77:43:18:d8:94:2a:
                    4f:e1:a6:a4:6b:b3:90:38:b1:ca:21:96:cf:a3:56:
                    cb:c0:d1:f6:6f:9e:65:00:05:45:d0:b2:8a:40:dd:
                    ec:1a:a8:bd:1e:2c:5a:ea:a5:6c:33:42:70:b3:27:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E7:1E:61:96:C4:4B:04:CF:EC:AE:9F:CD:A0:A4:17:C3:BC:F6:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/57152125-cb7f-4862-989d-a0579bcacae5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/57152125-cb7f-4862-989d-a0579bcacae5/f9378dc2b2eaf67b26db2d0ebc464eb192a93746.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15e::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:76:1b:78:06:cb:4a:ae:4b:a6:99:06:a9:0a:f7:3b:8c:
         92:bf:2e:63:9e:4d:3e:3f:80:40:16:56:44:d2:5a:48:77:96:
         9a:5a:3f:33:1c:ee:8c:e4:88:13:b8:99:f5:ba:fc:a0:a6:3f:
         bb:2b:b8:dd:f4:a4:4a:73:b9:16:20:d3:90:1f:96:01:af:f8:
         79:d7:71:bb:95:f6:a8:53:e7:e7:53:7d:f5:aa:e0:1f:78:6a:
         2a:dc:cd:86:b0:52:b3:07:a4:56:c7:a8:e2:81:24:6f:09:a3:
         cf:86:b4:2d:16:79:4f:31:8c:33:7e:c7:41:ec:a6:0a:3e:27:
         b9:94:cc:f7:96:88:09:d8:df:2d:22:06:7b:f1:8c:ea:bb:af:
         fb:a3:5a:c8:d0:57:6f:0d:9b:64:6b:5c:79:42:77:6a:34:63:
         32:d0:58:9d:9f:23:94:8b:54:c9:d8:95:70:8a:50:9c:2c:e0:
         3b:79:36:6e:6e:91:f8:71:f8:4d:e9:04:f8:06:3d:23:26:2b:
         9c:69:c1:78:0b:11:55:1f:b3:06:81:68:06:ae:6f:4a:78:ab:
         57:c3:83:7e:08:d4:e7:02:48:10:09:6c:b8:3f:54:b1:ed:d0:
         83:2f:57:d5:2d:04:00:5a:52:3f:85:57:9d:4e:7e:7e:c4:ca:
         dc:3c:7b:5f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEANtj/zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQwNjEzMzAyMVoXDTI0MDIwNjE0MjAz
MlowMzExMC8GA1UEAxMoZjkzNzhkYzJiMmVhZjY3YjI2ZGIyZDBlYmM0NjRlYjE5
MmE5Mzc0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMzvS6vQdwXA
OB5UhUQZbaLJhMoUn82dppGesB9MWIDmv/PjtdYReiTxwfKe1R/4tPPwzyC85MP5
8R4pQme4xyIGT1RMecv73TUN9Gl0uxIK0gbtM6d4T7FSskujBtFwqYEqiiCWJGdC
hkLntCFXZJxnJaR+uIX3e/IFClqHglPqJQ+J6YmqdnCbpKzhFg7i7gGiWS9JI7P9
lemE/iGFByd8UYsMn35bDVStfro0B9HLsuT7kZK3P8wCSnXg+bDJL7zOLhmly04E
EKxfd0MY2JQqT+GmpGuzkDixyiGWz6NWy8DR9m+eZQAFRdCyikDd7BqovR4sWuql
bDNCcLMnN0ECAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQ15x5hlsRLBM/srp/NoKQX
w7z2vTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NzE1MjEyNS1jYjdm
LTQ4NjItOTg5ZC1hMDU3OWJjYWNhZTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTcxNTIxMjUtY2I3Zi00
ODYyLTk4OWQtYTA1NzliY2FjYWU1L2Y5Mzc4ZGMyYjJlYWY2N2IyNmRiMmQwZWJj
NDY0ZWIxOTJhOTM3NDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAV4AADANBgkqhkiG9w0BAQsF
AAOCAQEACtt2G3gGy0quS6aZBqkK9zuMkr8uY55NPj+AQBZWRNJaSHeWmlo/Mxzu
jOSIE7iZ9br8oKY/uyu43fSkSnO5FiDTkB+WAa/4eddxu5X2qFPn51N99argH3hq
KtzNhrBSswekVseo4oEkbwmjz4a0LRZ5TzGMM37HQeymCj4nuZTM95aICdjfLSIG
e/GM6ruv+6NayNBXbw2bZGtceUJ3ajRjMtBYnZ8jlItUydiVcIpQnCzgO3k2bm6R
+HH4TekE+AY9IyYrnGnBeAsRVR+zBoFoBq5vSnirV8ODfgjU5wJIEAlsuD9Use3Q
gy9X1S0EAFpSP4VXnU5+fsTK3Dx7Xw==
-----END CERTIFICATE-----