Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
File:                     72abba6b7cd25cc52bbab3345005452793c3070a.cer (raw, json)
Hash identifier:          P+ybXBaT1GcwDMIQMgq2LLl+LbY5T+zmHvt9WiZ8mYs=
Subject key identifier:   DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01049FCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jul 2021 17:11:00 +0000
Certificate not after:    Tue 21 Jan 2025 17:22:38 +0000
Subordinate resources:    AS: 271938
                          IP: 45.5.216.0/22
                          IP: 2803:8610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17080270 (0x1049fce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 17:11:00 2021 GMT
            Not After : Jan 21 17:22:38 2025 GMT
        Subject: CN=72abba6b7cd25cc52bbab3345005452793c3070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:6c:f9:38:19:4c:9b:4a:26:08:73:e6:e4:
                    e8:9a:78:33:97:63:d8:5f:c4:b8:29:7a:af:4e:92:
                    3d:07:4e:43:c4:a3:e5:ea:e5:1a:df:35:6f:4c:56:
                    10:72:da:8f:83:d5:2f:b7:bf:04:97:eb:d7:b3:9d:
                    45:aa:65:48:db:c4:df:7a:3b:ad:e0:0b:fd:d0:0d:
                    43:61:6c:b8:94:f0:cf:79:48:78:60:95:01:8b:51:
                    c3:97:c2:06:71:df:1b:9c:48:c8:b2:56:37:cc:39:
                    dc:61:14:43:37:c5:f0:6a:66:9f:f2:c9:b1:89:aa:
                    d3:a5:46:23:04:a4:52:95:b8:65:d8:46:1e:c9:f9:
                    68:6f:4f:42:e8:65:f0:97:34:36:e3:ae:f7:4b:d2:
                    43:ba:33:3d:61:b4:e4:2f:f4:b5:ea:5c:33:ae:32:
                    41:d9:e5:8b:38:73:fb:4d:0e:81:fb:3c:21:a7:ae:
                    a5:c8:5e:61:6d:55:f2:3c:c6:ff:4a:fb:21:67:3a:
                    bc:41:8d:ac:17:e1:fe:23:b9:c6:0d:99:85:c6:0a:
                    87:9b:17:49:bb:51:28:3d:09:21:3a:5e:e2:a5:62:
                    06:bf:2b:3e:6e:e0:8b:e0:ba:41:93:5a:c1:47:ad:
                    95:32:69:ef:12:77:7e:b5:f8:29:47:cb:56:26:96:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22
                IPv6:
                  2803:8610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271938

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:2b:eb:80:59:e3:35:27:ca:6e:9a:54:cc:c7:0e:9a:39:
         e9:52:d6:5b:53:46:f2:72:66:49:01:63:67:6d:b5:40:cd:ad:
         18:f9:b2:0a:00:45:35:28:0c:f7:ca:aa:a7:4f:a2:4e:3b:d2:
         50:e7:64:8b:b1:23:a9:67:bc:1f:e7:48:20:24:aa:e0:58:de:
         21:11:5c:e7:38:ba:ac:59:b7:b5:99:32:8b:c0:55:06:2d:60:
         a4:ea:2d:db:da:d6:dc:eb:89:8d:22:86:a1:52:d2:00:75:13:
         25:7e:f4:57:2d:22:b9:82:f7:41:aa:bf:fd:1a:c2:9e:20:23:
         75:75:14:39:c3:7e:b8:47:d0:50:d0:04:85:da:b5:f7:8f:3e:
         5f:45:c9:70:11:2a:e3:3d:73:b6:07:7a:88:59:bb:00:9f:02:
         cc:b7:6e:f0:b1:0c:94:71:cb:98:3e:9c:2f:c1:4e:0a:61:11:
         57:fe:fb:ab:ce:06:59:f1:55:3c:87:d4:70:78:a3:a3:8e:3b:
         16:2f:11:27:4e:a3:04:b9:33:03:9b:d8:f2:6e:3b:4f:c7:99:
         22:a8:bc:bf:39:1d:13:df:a0:77:04:f9:d7:d9:64:23:f4:96:
         7b:02:c6:fe:ee:65:8d:8c:af:f2:28:16:13:e7:5f:d2:ea:32:
         6e:57:d4:17
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQSfzjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDcyMDE3MTEwMFoXDTI1MDEyMTE3MjIz
OFowMzExMC8GA1UEAxMoNzJhYmJhNmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5
M2MzMDcwYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKWbPk4GUyb
SiYIc+bk6Jp4M5dj2F/EuCl6r06SPQdOQ8Sj5erlGt81b0xWEHLaj4PVL7e/BJfr
17OdRaplSNvE33o7reAL/dANQ2FsuJTwz3lIeGCVAYtRw5fCBnHfG5xIyLJWN8w5
3GEUQzfF8Gpmn/LJsYmq06VGIwSkUpW4ZdhGHsn5aG9PQuhl8Jc0NuOu90vSQ7oz
PWG05C/0tepcM64yQdnlizhz+00Ogfs8IaeupcheYW1V8jzG/0r7IWc6vEGNrBfh
/iO5xg2ZhcYKh5sXSbtRKD0JITpe4qViBr8rPm7gi+C6QZNawUetlTJp7xJ3frX4
KUfLViaWec8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTfptFCecJ9q4Ro8FYVgw86
DPulozAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84ZDJjNTkyMi1hNzAy
LTQ0NzItYjQyNy0yNTczMWQ1MzFmMDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGQyYzU5MjItYTcwMi00
NDcyLWI0MjctMjU3MzFkNTMxZjAwLzcyYWJiYTZiN2NkMjVjYzUyYmJhYjMzNDUw
MDU0NTI3OTNjMzA3MGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0F2DANBAIAAjAHAwUAKAOGEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJkIwDQYJKoZIhvcNAQELBQADggEBADoC
K+uAWeM1J8pumlTMxw6aOelS1ltTRvJyZkkBY2dttUDNrRj5sgoARTUoDPfKqqdP
ok470lDnZIuxI6lnvB/nSCAkquBY3iERXOc4uqxZt7WZMovAVQYtYKTqLdva1tzr
iY0ihqFS0gB1EyV+9FctIrmC90Gqv/0awp4gI3V1FDnDfrhH0FDQBIXatfePPl9F
yXARKuM9c7YHeohZuwCfAsy3bvCxDJRxy5g+nC/BTgphEVf++6vOBlnxVTyH1HB4
o6OOOxYvESdOowS5MwOb2PJuO0/HmSKovL85HRPfoHcE+dfZZCP0lnsCxv7uZY2M
r/IoFhPnX9LqMm5X1Bc=
-----END CERTIFICATE-----