Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0483514b7538b513c5728a226bad73d0d8f86df6.cer
File:                     0483514b7538b513c5728a226bad73d0d8f86df6.cer (raw, json)
Hash identifier:          k+qC8rtSmivXBeu0oucDSAuckk7S3Hx8qAyRXX3krz0=
Subject key identifier:   FD:24:BD:EF:20:67:89:9C:D3:08:31:E1:22:C5:1A:F0:28:D1:9E:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01041E21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb2739fc-39e7-4d94-895b-3f7e4f0a5827/0483514b7538b513c5728a226bad73d0d8f86df6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb2739fc-39e7-4d94-895b-3f7e4f0a5827/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 Mar 2021 05:34:12 +0000
Certificate not after:    Thu 16 Jan 2025 17:45:56 +0000
Subordinate resources:    IP: 2801:1c:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17047073 (0x1041e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 18 05:34:12 2021 GMT
            Not After : Jan 16 17:45:56 2025 GMT
        Subject: CN=0483514b7538b513c5728a226bad73d0d8f86df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:4c:25:27:99:98:82:e2:74:b2:fc:5f:d0:
                    7d:02:d2:09:c2:d4:19:58:57:8e:c3:02:54:d9:fd:
                    0f:3f:14:90:3e:ce:5b:7e:f0:6b:e4:e6:f2:25:6e:
                    73:e8:53:40:3b:1f:67:07:71:55:b2:b4:ee:2c:c7:
                    ce:05:75:22:77:ca:fb:4a:10:84:2e:08:32:af:e5:
                    c9:e8:74:c0:02:a4:14:f2:44:59:a7:53:34:eb:d8:
                    a7:49:9d:d8:08:e9:7f:82:70:44:5a:4e:a6:ad:fc:
                    ee:16:9a:8f:59:ce:9d:7f:c2:bf:c6:77:6f:6f:e3:
                    99:95:c3:31:6e:46:ea:1c:a4:0a:8f:00:69:65:25:
                    61:eb:f4:d1:41:19:65:1a:77:99:ea:23:b1:94:a7:
                    b9:64:1d:41:ab:33:66:7c:b0:af:9a:b4:c0:10:2a:
                    2e:5c:de:ca:d4:19:01:e0:40:d1:6b:50:ef:71:81:
                    35:b4:e2:bf:a0:1c:44:3b:b4:cc:85:55:85:f6:fa:
                    93:0b:5e:a7:67:dc:b7:dd:38:29:60:a5:45:d6:40:
                    c1:40:4c:8a:04:b1:db:11:9e:e1:6b:ba:1c:47:64:
                    4a:9f:29:95:a2:7c:35:0c:d8:72:55:d1:3c:fd:d6:
                    96:c3:84:9e:d2:c4:d0:5f:6b:d2:83:a4:c3:d9:b8:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:24:BD:EF:20:67:89:9C:D3:08:31:E1:22:C5:1A:F0:28:D1:9E:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb2739fc-39e7-4d94-895b-3f7e4f0a5827/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb2739fc-39e7-4d94-895b-3f7e4f0a5827/0483514b7538b513c5728a226bad73d0d8f86df6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:b0:2e:7a:e2:a3:cd:1e:d2:b8:0c:b4:b5:18:49:b8:03:
         12:17:33:6e:67:94:23:40:25:5d:43:da:17:5c:b1:1c:4a:bd:
         60:cc:3a:15:e9:1a:ab:0a:9f:a6:3f:64:cb:90:9f:eb:ac:cb:
         ea:d3:dd:47:27:4f:09:48:2d:7d:57:99:c4:c3:1a:29:67:97:
         30:50:6e:37:ba:bb:a8:f2:a4:e8:6e:6f:c5:a7:a7:1d:91:29:
         da:86:9c:2f:2d:8e:3f:30:87:61:72:50:35:00:89:bf:04:e1:
         ac:5d:0c:37:cc:0e:10:9f:4e:ec:6d:47:60:fc:76:d5:de:92:
         74:ab:ca:58:3b:85:7a:e4:3d:cc:2d:b8:29:14:ea:42:36:4a:
         2f:99:d6:38:65:bd:a3:b7:1d:6f:07:49:43:de:cf:f4:ba:c7:
         f3:c8:46:9b:71:f5:2a:c5:c4:11:3c:90:94:41:32:f6:b5:e2:
         90:56:0f:42:10:58:c4:29:16:c1:45:a3:b9:50:5a:9e:6f:f8:
         e2:54:b3:cb:47:6d:19:74:4c:f2:02:d0:ea:89:b6:75:93:93:
         82:29:2b:87:a4:0a:7c:07:11:cb:74:a6:dd:3e:1b:1c:38:fb:
         85:3b:0b:19:97:30:51:74:49:f5:ed:3b:fc:40:dc:f3:a8:d6:
         92:fb:41:6f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQQeITANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDMxODA1MzQxMloXDTI1MDExNjE3NDU1
NlowMzExMC8GA1UEAxMoMDQ4MzUxNGI3NTM4YjUxM2M1NzI4YTIyNmJhZDczZDBk
OGY4NmRmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALERTCUnmZiC
4nSy/F/QfQLSCcLUGVhXjsMCVNn9Dz8UkD7OW37wa+Tm8iVuc+hTQDsfZwdxVbK0
7izHzgV1InfK+0oQhC4IMq/lyeh0wAKkFPJEWadTNOvYp0md2Ajpf4JwRFpOpq38
7haaj1nOnX/Cv8Z3b2/jmZXDMW5G6hykCo8AaWUlYev00UEZZRp3meojsZSnuWQd
QaszZnywr5q0wBAqLlzeytQZAeBA0WtQ73GBNbTiv6AcRDu0zIVVhfb6kwtep2fc
t904KWClRdZAwUBMigSx2xGe4Wu6HEdkSp8plaJ8NQzYclXRPP3WlsOEntLE0F9r
0oOkw9m4yocCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBT9JL3vIGeJnNMIMeEixRrw
KNGeezAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mYjI3MzlmYy0zOWU3
LTRkOTQtODk1Yi0zZjdlNGYwYTU4MjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmIyNzM5ZmMtMzllNy00
ZDk0LTg5NWItM2Y3ZTRmMGE1ODI3LzA0ODM1MTRiNzUzOGI1MTNjNTcyOGEyMjZi
YWQ3M2QwZDhmODZkZjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABzoADANBgkqhkiG9w0BAQsF
AAOCAQEAhw+wLnrio80e0rgMtLUYSbgDEhczbmeUI0AlXUPaF1yxHEq9YMw6Feka
qwqfpj9ky5Cf66zL6tPdRydPCUgtfVeZxMMaKWeXMFBuN7q7qPKk6G5vxaenHZEp
2oacLy2OPzCHYXJQNQCJvwThrF0MN8wOEJ9O7G1HYPx21d6SdKvKWDuFeuQ9zC24
KRTqQjZKL5nWOGW9o7cdbwdJQ97P9LrH88hGm3H1KsXEETyQlEEy9rXikFYPQhBY
xCkWwUWjuVBanm/44lSzy0dtGXRM8gLQ6om2dZOTgikrh6QKfAcRy3Sm3T4bHDj7
hTsLGZcwUXRJ9e07/EDc86jWkvtBbw==
-----END CERTIFICATE-----