Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
File:                     5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer (raw, json)
Hash identifier:          sD2VmgFzB0UHOISnihF82yXstypmSZ/ctiDWBzuErfE=
Subject key identifier:   B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE4C90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Dec 2021 23:44:03 +0000
Certificate not after:    Tue 26 Nov 2024 05:00:00 +0000
Subordinate resources:    AS: 271855
                          IP: 181.191.224.0/22
                          IP: 2803:6410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16665744 (0xfe4c90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 21 23:44:03 2021 GMT
            Not After : Nov 26 05:00:00 2024 GMT
        Subject: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:d0:bf:69:2e:d5:75:e9:ee:03:d7:a1:cc:
                    c6:4b:f9:7f:2c:ff:76:ab:63:cd:f2:7e:21:3a:0d:
                    58:81:7d:d7:b5:fb:dc:f8:73:46:3a:21:c7:00:5c:
                    5a:63:ed:24:e5:95:b8:80:73:5c:b1:0b:84:4d:45:
                    a4:76:13:a4:70:4e:5c:cf:c9:6f:0e:0d:eb:dd:b4:
                    fc:a7:69:6c:e6:c0:e1:9f:3f:a2:c9:39:35:45:36:
                    36:dd:e7:76:2e:71:46:34:79:52:36:d1:b4:3c:ad:
                    d6:cb:4e:45:0c:4e:28:9e:a3:48:1f:76:e0:9f:d6:
                    bd:25:6c:2b:95:7b:af:63:60:67:dc:32:12:0f:9a:
                    3d:0a:18:5c:ed:c9:af:a2:39:03:62:60:02:4c:d7:
                    68:69:00:2a:49:f9:ab:4d:f1:3c:c9:20:d2:2b:0b:
                    c0:38:e9:32:85:9c:a5:56:2c:6a:f3:01:6d:75:cd:
                    58:15:77:89:b7:f6:ec:ab:b7:c6:4d:dd:7d:86:76:
                    e9:ca:00:b8:6f:07:6d:dd:de:37:d3:cd:9a:ad:03:
                    e3:65:a0:0e:83:08:38:84:5f:ef:48:32:7f:c7:77:
                    6a:6b:f7:8d:29:c7:42:38:82:8a:55:35:51:77:fc:
                    48:2e:c6:fa:fc:98:35:e1:7e:ed:f5:df:f1:f0:fd:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22
                IPv6:
                  2803:6410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271855

    Signature Algorithm: sha256WithRSAEncryption
         96:85:b4:e6:64:48:92:fb:df:ba:02:09:8a:93:1e:a3:9e:af:
         9a:84:a2:85:55:50:cf:c4:7a:a8:cb:b5:66:a0:65:92:62:be:
         76:12:a2:9c:2a:27:05:ff:56:90:25:1b:2f:0f:70:33:db:0c:
         c2:b9:16:51:53:6b:3a:8f:6c:f0:4b:23:cc:42:5a:d1:a3:75:
         27:3e:92:03:85:02:44:2a:64:7e:6c:7f:c4:6b:55:7b:17:01:
         18:ee:f3:6a:4c:bc:ca:63:3d:39:d8:20:0d:f5:65:6e:36:7b:
         3f:c6:b0:c2:db:67:5b:fa:fc:70:27:17:19:ab:4c:0f:83:36:
         69:c1:e4:6d:62:45:56:14:6c:aa:65:2a:4e:0a:51:d7:91:6f:
         4b:13:30:49:51:b7:6b:c6:a1:bc:7c:c0:f7:79:f2:78:bf:95:
         95:88:6d:e6:59:ac:ab:78:d1:d2:41:b2:90:75:4a:3a:ad:74:
         fd:a5:d5:c6:74:fa:f6:3d:d8:9d:a0:e7:b9:bd:ae:8b:19:ad:
         86:7f:2c:98:bf:72:48:65:de:3b:a4:c3:c1:e9:aa:3b:e8:51:
         1d:2c:b5:c4:06:09:9b:a1:bd:57:e6:50:98:0b:5d:e1:70:25:
         a5:d8:3c:73:58:35:26:a0:a0:73:07:e0:86:2f:1f:65:54:e0:
         25:e8:30:a6
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP5MkDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTIyMTIzNDQwM1oXDTI0MTEyNjA1MDAw
MFowMzExMC8GA1UEAxMoNWI0M2ZmOGNlOTc3YzhhNWRiZTE1ZmZkZjMxY2YxMWZi
ZTZmYjNmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjr0L9pLtV1
6e4D16HMxkv5fyz/dqtjzfJ+IToNWIF917X73PhzRjohxwBcWmPtJOWVuIBzXLEL
hE1FpHYTpHBOXM/Jbw4N6920/KdpbObA4Z8/osk5NUU2Nt3ndi5xRjR5UjbRtDyt
1stORQxOKJ6jSB924J/WvSVsK5V7r2NgZ9wyEg+aPQoYXO3Jr6I5A2JgAkzXaGkA
Kkn5q03xPMkg0isLwDjpMoWcpVYsavMBbXXNWBV3ibf27Ku3xk3dfYZ26coAuG8H
bd3eN9PNmq0D42WgDoMIOIRf70gyf8d3amv3jSnHQjiCilU1UXf8SC7G+vyYNeF+
7fXf8fD9+7ECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSx254JC9Ykh67sO2S+glvp
HLdx/DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YzgzNzliZC0wMWYz
LTQ2YWQtOTdlZi00Yjg1OTdlZmQxODUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGM4Mzc5YmQtMDFmMy00
NmFkLTk3ZWYtNGI4NTk3ZWZkMTg1LzViNDNmZjhjZTk3N2M4YTVkYmUxNWZmZGYz
MWNmMTFmYmU2ZmIzZjIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArW/4DANBAIAAjAHAwUAKANkEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJe8wDQYJKoZIhvcNAQELBQADggEBAJaF
tOZkSJL737oCCYqTHqOer5qEooVVUM/EeqjLtWagZZJivnYSopwqJwX/VpAlGy8P
cDPbDMK5FlFTazqPbPBLI8xCWtGjdSc+kgOFAkQqZH5sf8RrVXsXARju82pMvMpj
PTnYIA31ZW42ez/GsMLbZ1v6/HAnFxmrTA+DNmnB5G1iRVYUbKplKk4KUdeRb0sT
MElRt2vGobx8wPd58ni/lZWIbeZZrKt40dJBspB1SjqtdP2l1cZ0+vY92J2g57m9
rosZrYZ/LJi/ckhl3jukw8HpqjvoUR0stcQGCZuhvVfmUJgLXeFwJaXYPHNYNSag
oHMH4IYvH2VU4CXoMKY=
-----END CERTIFICATE-----