Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/643083949234b7f46a60f067fefdeb0e758ea956.cer
File:                     643083949234b7f46a60f067fefdeb0e758ea956.cer (raw, json)
Hash identifier:          9zzhnz75XO47RPvmL2lizG1mtZCF2wkA6z5NcrxeXNc=
Subject key identifier:   9E:65:D1:1B:86:3C:44:18:14:79:A7:3D:3F:FE:3C:EE:A4:68:B4:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01023BD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Oct 2021 18:24:41 +0000
Certificate not after:    Thu 26 Dec 2024 14:43:05 +0000
Subordinate resources:    AS: 263219
                          IP: 191.98.216.0/21
                          IP: 2803:8a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16923601 (0x1023bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 18:24:41 2021 GMT
            Not After : Dec 26 14:43:05 2024 GMT
        Subject: CN=643083949234b7f46a60f067fefdeb0e758ea956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:23:4b:9a:87:cf:ec:a0:34:0e:3f:0f:4c:
                    4d:6c:08:63:57:23:c0:1e:68:d6:6f:8d:1e:48:2a:
                    ec:fa:d4:48:ca:d4:87:56:0c:5a:67:87:c1:dc:62:
                    a3:1f:7b:ae:fc:33:46:cb:ef:32:5e:70:c4:ee:1b:
                    84:a6:2c:e4:4f:a4:ce:85:8c:66:7d:94:29:02:49:
                    f1:68:3b:15:31:53:15:da:db:73:44:6d:b3:7c:3a:
                    68:64:8a:a1:cc:90:e1:48:f9:28:9e:33:69:a4:51:
                    23:12:2c:91:ff:c5:ae:a6:97:af:13:5f:c7:4e:b3:
                    34:7e:6a:32:14:fc:78:4e:34:23:81:08:dc:fe:82:
                    1c:1c:fb:b1:e0:41:b3:69:5e:d8:8d:7c:33:e6:f6:
                    2c:52:07:1b:18:94:47:4b:39:7d:ae:3b:8c:8c:e0:
                    97:d9:e1:1a:49:69:52:2b:9d:a8:b5:23:a7:eb:b2:
                    49:c8:0d:82:30:c8:c4:c5:11:a8:72:b9:77:40:84:
                    20:a5:f5:14:3f:3f:31:38:cd:1f:ec:b2:47:62:88:
                    6b:6d:41:3b:de:8b:13:e2:51:2f:36:84:1d:55:45:
                    1f:ba:cc:12:b7:cc:ab:60:58:cf:d6:ef:cb:e5:9a:
                    cb:28:a6:38:25:de:5f:bc:92:4d:d2:79:07:0c:9d:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:D1:1B:86:3C:44:18:14:79:A7:3D:3F:FE:3C:EE:A4:68:B4:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.216.0/21
                IPv6:
                  2803:8a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263219

    Signature Algorithm: sha256WithRSAEncryption
         59:34:a6:8a:47:83:dc:5a:6d:19:e7:b8:bc:29:a7:5d:f8:ab:
         c1:73:2e:75:8f:5b:41:e2:d0:c2:64:37:0b:05:75:98:69:7a:
         83:d5:29:a6:44:5f:de:ca:ac:b3:1a:06:d9:ba:3e:50:6d:5f:
         14:02:b2:1d:09:11:3c:0c:d0:87:75:34:91:97:b4:27:a4:75:
         92:58:42:03:17:56:4a:a8:29:54:8b:26:a4:44:9e:19:cf:ad:
         e7:aa:22:61:c5:c2:f5:59:4b:f2:20:d0:1e:7a:61:e8:ed:d2:
         65:d8:a6:ff:14:86:c7:ae:6e:35:99:c3:55:3d:32:d3:c7:53:
         2a:de:42:3d:fc:31:17:6f:47:1a:0a:b2:4c:f3:8c:7e:66:80:
         ed:ca:f4:c5:4f:f6:d9:18:a6:86:81:e5:55:79:c8:8a:cd:db:
         a7:0e:c1:9b:54:9f:21:d3:3d:0f:e7:da:b3:cc:84:08:eb:70:
         04:13:27:73:64:9f:26:c9:b2:b9:06:10:8a:0b:79:8a:ae:98:
         8e:7a:49:66:68:f1:88:a3:ae:62:ab:f7:26:fa:3d:66:7f:f8:
         81:3f:a2:57:5b:70:64:0d:0c:71:30:75:94:22:ef:33:f3:44:
         6e:21:17:64:9f:ad:cf:51:0a:95:3c:b5:28:a7:e7:07:0c:df:
         07:85:53:de
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQI70TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAwNzE4MjQ0MVoXDTI0MTIyNjE0NDMw
NVowMzExMC8GA1UEAxMoNjQzMDgzOTQ5MjM0YjdmNDZhNjBmMDY3ZmVmZGViMGU3
NThlYTk1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIdvI0uah8/s
oDQOPw9MTWwIY1cjwB5o1m+NHkgq7PrUSMrUh1YMWmeHwdxiox97rvwzRsvvMl5w
xO4bhKYs5E+kzoWMZn2UKQJJ8Wg7FTFTFdrbc0Rts3w6aGSKocyQ4Uj5KJ4zaaRR
IxIskf/FrqaXrxNfx06zNH5qMhT8eE40I4EI3P6CHBz7seBBs2le2I18M+b2LFIH
GxiUR0s5fa47jIzgl9nhGklpUiudqLUjp+uyScgNgjDIxMURqHK5d0CEIKX1FD8/
MTjNH+yyR2KIa21BO96LE+JRLzaEHVVFH7rMErfMq2BYz9bvy+WayyimOCXeX7yS
TdJ5BwydwpkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSeZdEbhjxEGBR5pz0//jzu
pGi0/jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xODIzMjNjOS0wZTZh
LTQ5YWUtOTg3My0zYTA0NjBiYjFiMTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTgyMzIzYzktMGU2YS00
OWFlLTk4NzMtM2EwNDYwYmIxYjE2LzY0MzA4Mzk0OTIzNGI3ZjQ2YTYwZjA2N2Zl
ZmRlYjBlNzU4ZWE5NTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA79i2DANBAIAAjAHAwUAKAOKgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBDMwDQYJKoZIhvcNAQELBQADggEBAFk0
popHg9xabRnnuLwpp134q8FzLnWPW0Hi0MJkNwsFdZhpeoPVKaZEX97KrLMaBtm6
PlBtXxQCsh0JETwM0Id1NJGXtCekdZJYQgMXVkqoKVSLJqREnhnPreeqImHFwvVZ
S/Ig0B56Yejt0mXYpv8UhseubjWZw1U9MtPHUyreQj38MRdvRxoKskzzjH5mgO3K
9MVP9tkYpoaB5VV5yIrN26cOwZtUnyHTPQ/n2rPMhAjrcAQTJ3NknybJsrkGEIoL
eYqumI56SWZo8YijrmKr9yb6PWZ/+IE/oldbcGQNDHEwdZQi7zPzRG4hF2Sfrc9R
CpU8tSin5wcM3weFU94=
-----END CERTIFICATE-----