Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
File:                     15c457b9e4c4fb2caeebe5d784653caec339f556.cer (raw, json)
Hash identifier:          XKsu6F0+4pUTCSrtijJMeRnNSkAReHslYPe6dvPaiPg=
Subject key identifier:   09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103039B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Dec 2021 13:11:22 +0000
Certificate not after:    Wed 23 Oct 2024 13:36:41 +0000
Subordinate resources:    IP: 2801:1b:1800::/47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16974747 (0x103039b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 23 13:11:22 2021 GMT
            Not After : Oct 23 13:36:41 2024 GMT
        Subject: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:de:45:a6:e7:56:d2:e7:44:3b:fe:88:c8:
                    24:c1:3c:60:3a:7e:64:6b:17:b8:bc:d9:98:2d:67:
                    75:be:e5:6f:4b:d8:0e:c8:45:07:25:f1:55:42:92:
                    0f:d2:f6:4d:17:48:47:ba:91:c6:d8:84:9c:12:10:
                    1b:19:3f:ba:0a:b6:e0:bd:21:e7:e3:27:b4:a1:ab:
                    6c:5e:70:7a:e5:df:ba:66:f0:67:8a:49:77:4c:31:
                    ca:dc:dd:99:d6:0f:b0:67:7f:b0:90:66:ee:bc:b6:
                    20:f2:f6:c9:ac:56:47:ec:f6:9c:88:23:82:b3:a6:
                    a4:98:c5:e6:52:0c:68:c4:b8:13:f5:c8:17:1a:8a:
                    59:41:7b:b2:dd:31:da:3c:ed:e7:47:72:ea:66:6c:
                    35:3b:69:7f:1b:db:45:9e:f7:06:d0:cf:0c:9e:b2:
                    2e:6d:e7:e4:2f:0e:98:95:89:36:b6:b0:d0:f2:6b:
                    ea:95:10:67:6b:c6:86:c7:32:a3:b6:d1:ef:53:3a:
                    6c:8d:5c:fd:5e:11:26:37:c3:c5:a7:06:c2:92:a5:
                    88:b8:53:ed:e0:ed:c2:13:7a:be:3c:6c:31:c4:df:
                    44:74:0e:e3:b5:d1:74:48:35:98:4d:f6:45:b2:3e:
                    73:21:28:6b:3f:e1:a4:74:17:c8:b5:8c:fa:dd:4d:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/47

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:dd:b1:bb:6f:3f:a1:c3:b0:38:15:6e:17:a4:29:36:42:
         95:68:29:10:39:f2:e8:b0:05:65:9e:eb:3a:15:5d:ef:8e:ba:
         0a:83:f7:d7:fe:6c:19:5f:58:2c:af:23:d8:0f:b0:16:05:a4:
         f4:a0:5c:7f:da:f1:11:f8:45:64:d8:73:c8:ea:12:99:8b:c9:
         35:44:0b:fe:6a:f1:65:bf:a3:4c:78:d7:ae:c1:31:b1:29:3a:
         39:05:b2:d9:99:78:4d:98:97:10:51:0f:4e:b2:3e:07:c6:a7:
         52:c7:ef:a3:a7:f7:f7:b6:9e:d0:72:fd:ef:41:d0:4f:7e:da:
         01:e4:0d:df:a4:d0:37:92:22:6c:4b:20:ec:82:56:34:d4:20:
         ca:3e:b6:4e:f0:5b:46:da:0c:c3:8c:18:1e:7b:8f:19:ac:df:
         a1:2e:12:b7:63:84:44:e0:a1:d4:9f:c3:6d:a5:29:0e:d6:cc:
         8d:28:0e:6e:8c:f0:e4:e2:7a:74:51:82:30:fd:cc:72:d0:1b:
         55:f9:d9:07:62:f7:ff:f3:f4:a9:eb:e5:cc:08:a2:d9:0f:0e:
         b3:2b:05:7b:34:5c:68:7f:20:59:50:cf:43:56:27:cc:d6:75:
         31:07:9d:11:f0:cd:cf:50:8f:99:3f:82:e8:55:d7:5f:ca:10:
         d8:d4:51:6a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQMDmzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTIyMzEzMTEyMloXDTI0MTAyMzEzMzY0
MVowMzExMC8GA1UEAxMoMTVjNDU3YjllNGM0ZmIyY2FlZWJlNWQ3ODQ2NTNjYWVj
MzM5ZjU1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7V3kWm51bS
50Q7/ojIJME8YDp+ZGsXuLzZmC1ndb7lb0vYDshFByXxVUKSD9L2TRdIR7qRxtiE
nBIQGxk/ugq24L0h5+MntKGrbF5weuXfumbwZ4pJd0wxytzdmdYPsGd/sJBm7ry2
IPL2yaxWR+z2nIgjgrOmpJjF5lIMaMS4E/XIFxqKWUF7st0x2jzt50dy6mZsNTtp
fxvbRZ73BtDPDJ6yLm3n5C8OmJWJNraw0PJr6pUQZ2vGhscyo7bR71M6bI1c/V4R
JjfDxacGwpKliLhT7eDtwhN6vjxsMcTfRHQO47XRdEg1mE32RbI+cyEoaz/hpHQX
yLWM+t1Nuk8CAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQJ/yLRPipCMUBtIblOKAZA
oYEMDTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82YzU3MTQ2YS00OTky
LTQyYmUtOTFkOS05YmQ4Zjc0NmYzYmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmM1NzE0NmEtNDk5Mi00
MmJlLTkxZDktOWJkOGY3NDZmM2JmLzE1YzQ1N2I5ZTRjNGZiMmNhZWViZTVkNzg0
NjUzY2FlYzMzOWY1NTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASgBABsYADANBgkqhkiG9w0BAQsF
AAOCAQEAXOvdsbtvP6HDsDgVbhekKTZClWgpEDny6LAFZZ7rOhVd7466CoP31/5s
GV9YLK8j2A+wFgWk9KBcf9rxEfhFZNhzyOoSmYvJNUQL/mrxZb+jTHjXrsExsSk6
OQWy2Zl4TZiXEFEPTrI+B8anUsfvo6f397ae0HL970HQT37aAeQN36TQN5IibEsg
7IJWNNQgyj62TvBbRtoMw4wYHnuPGazfoS4St2OEROCh1J/DbaUpDtbMjSgObozw
5OJ6dFGCMP3MctAbVfnZB2L3//P0qevlzAii2Q8OsysFezRcaH8gWVDPQ1YnzNZ1
MQedEfDNz1CPmT+C6FXXX8oQ2NRRag==
-----END CERTIFICATE-----