Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb92d21fcea7525e717939e36376f350b65b04d5.cer
File:                     fb92d21fcea7525e717939e36376f350b65b04d5.cer (raw, json)
Hash identifier:          bR5PnzKGLCDWV3pEaeMj3YVxuGVoxGpevmSkarFxg80=
Subject key identifier:   87:22:7C:23:44:54:6F:46:54:F1:19:BE:8F:18:CA:6E:A4:DE:B6:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7439B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/fb92d21fcea7525e717939e36376f350b65b04d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Oct 2022 20:04:40 +0000
Certificate not after:    Thu 07 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 52246
                          IP: 190.99.88.0/22
                          IP: 2803:6690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14107547 (0xd7439b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 20:04:40 2022 GMT
            Not After : Mar  7 06:00:00 2024 GMT
        Subject: CN=fb92d21fcea7525e717939e36376f350b65b04d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:2e:62:c3:82:98:70:fc:78:2d:78:83:1c:
                    42:e1:d9:d2:d3:94:46:24:0e:ef:0b:6f:52:fd:fc:
                    66:6e:ae:0f:fb:66:d3:13:0d:63:f7:a2:dd:1c:10:
                    e7:ef:b6:7c:13:5d:1e:4b:c3:ae:c1:5f:0c:36:d4:
                    0f:33:4c:cb:42:2a:e6:e0:9e:dc:50:ae:d7:29:b4:
                    de:fd:2d:2a:66:26:f9:4f:dd:44:37:2d:f2:bc:e4:
                    5f:b6:95:a9:98:b3:b9:c1:92:d4:a5:a3:73:d3:c1:
                    bf:94:38:96:ca:a2:aa:91:6b:e9:b8:d9:79:ca:6f:
                    71:c3:53:26:22:06:c4:86:01:86:f2:3d:d8:1b:ee:
                    ea:f9:01:a6:40:a9:51:9b:5c:94:b3:6c:eb:a1:d6:
                    b5:c6:6e:0e:d3:4a:c7:8b:37:95:bd:45:8c:bc:11:
                    d1:cf:dc:bf:be:90:d1:e8:11:b0:cf:68:4b:75:49:
                    43:b8:e0:81:1f:f9:97:92:b0:36:de:13:b0:90:0d:
                    a6:16:aa:b4:92:3d:17:da:9f:a1:14:5c:ef:b7:13:
                    dc:0d:ec:3d:2e:5d:78:4a:24:95:9f:7b:7f:08:08:
                    30:87:10:fa:77:c6:0e:9b:39:32:a8:f3:a6:83:4c:
                    db:86:2f:31:76:3c:ce:d7:81:a8:62:66:ba:cc:78:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:7C:23:44:54:6F:46:54:F1:19:BE:8F:18:CA:6E:A4:DE:B6:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/fb92d21fcea7525e717939e36376f350b65b04d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.88.0/22
                IPv6:
                  2803:6690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52246

    Signature Algorithm: sha256WithRSAEncryption
         87:83:e4:87:bc:ef:12:e9:fd:4b:b9:5d:00:f3:83:15:c3:fd:
         fe:29:4d:32:01:43:c9:aa:03:73:5d:4c:58:f2:d6:0c:50:71:
         df:7b:84:a1:75:1b:dd:87:69:7c:5e:8d:45:22:6e:0f:f7:fa:
         a9:75:a7:93:84:2b:98:cd:f2:6c:5a:78:d6:7d:dd:61:50:fa:
         ff:09:0f:25:0a:58:da:4e:bd:48:fa:9f:0c:26:b9:7d:5f:19:
         30:64:b8:d4:a8:74:02:25:6d:a1:6d:8d:58:43:7e:cb:09:97:
         5a:09:ae:e8:f5:2e:22:df:85:da:53:a9:60:05:17:97:60:a1:
         c4:99:0e:9b:63:c6:43:22:64:54:8d:77:57:2b:8b:e8:b3:89:
         55:79:4a:72:0d:5a:ae:96:34:36:40:90:51:fd:b2:b5:b3:4f:
         89:9b:70:50:97:89:82:7c:09:28:67:26:27:bd:df:ee:23:87:
         b4:37:c3:e3:f7:bd:1e:50:0a:5a:15:85:e8:33:01:ee:02:7d:
         0d:f3:b1:53:7d:41:72:b1:47:77:c7:5f:62:c9:a1:09:31:ee:
         7f:d3:24:bb:21:7a:e7:2b:bb:4c:64:96:94:dd:fa:5a:60:93:
         8b:53:ef:27:36:88:d4:25:2e:87:b6:7d:60:27:0a:0c:16:20:
         0f:03:30:55
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANdDmzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTAwMzIwMDQ0MFoXDTI0MDMwNzA2MDAw
MFowMzExMC8GA1UEAxMoZmI5MmQyMWZjZWE3NTI1ZTcxNzkzOWUzNjM3NmYzNTBi
NjViMDRkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/OLmLDgphw
/HgteIMcQuHZ0tOURiQO7wtvUv38Zm6uD/tm0xMNY/ei3RwQ5++2fBNdHkvDrsFf
DDbUDzNMy0Iq5uCe3FCu1ym03v0tKmYm+U/dRDct8rzkX7aVqZizucGS1KWjc9PB
v5Q4lsqiqpFr6bjZecpvccNTJiIGxIYBhvI92Bvu6vkBpkCpUZtclLNs66HWtcZu
DtNKx4s3lb1FjLwR0c/cv76Q0egRsM9oS3VJQ7jggR/5l5KwNt4TsJANphaqtJI9
F9qfoRRc77cT3A3sPS5deEoklZ97fwgIMIcQ+nfGDps5MqjzpoNM24YvMXY8zteB
qGJmusx4VSECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSHInwjRFRvRlTxGb6PGMpu
pN62MjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zOTQ0ZjM2MC0xNjI4
LTQ4MDMtOTYxOS1jMGMxMjU3OTFmZTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzk0NGYzNjAtMTYyOC00
ODAzLTk2MTktYzBjMTI1NzkxZmU2L2ZiOTJkMjFmY2VhNzUyNWU3MTc5MzllMzYz
NzZmMzUwYjY1YjA0ZDUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5jWDANBAIAAjAHAwUAKANmkDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzBYwDQYJKoZIhvcNAQELBQADggEBAIeD
5Ie87xLp/Uu5XQDzgxXD/f4pTTIBQ8mqA3NdTFjy1gxQcd97hKF1G92HaXxejUUi
bg/3+ql1p5OEK5jN8mxaeNZ93WFQ+v8JDyUKWNpOvUj6nwwmuX1fGTBkuNSodAIl
baFtjVhDfssJl1oJruj1LiLfhdpTqWAFF5dgocSZDptjxkMiZFSNd1cri+iziVV5
SnINWq6WNDZAkFH9srWzT4mbcFCXiYJ8CShnJie93+4jh7Q3w+P3vR5QCloVhegz
Ae4CfQ3zsVN9QXKxR3fHX2LJoQkx7n/TJLsheucru0xklpTd+lpgk4tT7yc2iNQl
Loe2fWAnCgwWIA8DMFU=
-----END CERTIFICATE-----