Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8acfc458285d8bcacad68699f2691b0083ca913f.cer
File:                     8acfc458285d8bcacad68699f2691b0083ca913f.cer (raw, json)
Hash identifier:          UKN4fBAUVvIUZXS49sVCt1r7rFZ1axNYBfkkXUSZBI4=
Subject key identifier:   87:F3:4F:60:22:1B:F7:46:90:6C:4F:08:11:FB:67:79:25:DD:3A:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01014000
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/8acfc458285d8bcacad68699f2691b0083ca913f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 May 2021 12:10:23 +0000
Certificate not after:    Sun 15 Dec 2024 17:15:16 +0000
Subordinate resources:    AS: 264673
                          IP: 168.181.24.0/22
                          IP: 2803:4d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16859136 (0x1014000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 11 12:10:23 2021 GMT
            Not After : Dec 15 17:15:16 2024 GMT
        Subject: CN=8acfc458285d8bcacad68699f2691b0083ca913f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:33:31:5c:e2:ed:86:3d:3a:6a:e2:9d:6a:
                    10:91:87:5e:76:86:14:0c:98:be:0c:b5:bf:79:44:
                    c1:50:15:22:bf:48:e3:2c:7c:64:ac:f7:f5:47:9d:
                    91:12:a0:24:8e:18:e6:9a:3f:c3:da:20:ff:54:ba:
                    aa:eb:51:75:e0:8c:e5:7e:6f:0f:0f:33:89:8f:44:
                    a4:23:ee:9c:54:89:cc:ce:91:53:35:0d:e1:37:1d:
                    4e:ba:d0:d2:3a:a4:dc:22:b8:01:6a:78:77:00:d5:
                    3c:09:23:3c:48:46:77:f5:75:45:ab:67:10:24:d2:
                    d5:50:8c:8c:36:c6:9a:3e:25:f5:52:21:4c:dd:11:
                    40:00:96:f4:a0:db:3d:11:e8:09:38:6f:13:37:c0:
                    23:26:d3:6b:30:87:db:ce:80:d6:65:56:fd:db:17:
                    bd:66:71:67:7f:d2:42:7d:03:d9:a9:93:db:19:d4:
                    53:af:dc:3b:b9:93:34:b3:8b:17:1e:4a:4a:bd:71:
                    2a:61:9d:07:e5:8f:d0:91:35:2f:60:22:82:ff:b5:
                    5b:a5:2c:ce:3f:bf:29:77:a6:6a:c0:4e:ed:9d:65:
                    73:ad:9d:cb:53:e5:b2:21:94:18:6a:43:50:c7:61:
                    35:96:97:41:fd:8f:99:11:ef:23:ae:2b:7f:a8:59:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F3:4F:60:22:1B:F7:46:90:6C:4F:08:11:FB:67:79:25:DD:3A:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/8acfc458285d8bcacad68699f2691b0083ca913f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.24.0/22
                IPv6:
                  2803:4d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264673

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:a7:ee:bc:6d:3c:86:81:4c:d2:1a:5d:1f:2c:5e:f4:fe:
         d7:92:ac:af:52:36:c0:31:9c:18:52:75:2b:79:64:85:7b:33:
         f3:a5:a0:02:56:8c:0b:f6:04:22:a0:da:61:52:62:9d:07:a5:
         46:e6:a2:3e:ab:f7:81:60:cd:35:8b:66:d6:f5:db:7f:a4:5e:
         f3:3c:4c:86:0f:0f:53:26:98:7e:ce:e2:98:c2:40:38:bf:64:
         fe:24:67:63:8d:08:f1:cb:21:9f:0a:b1:21:75:d7:45:44:af:
         32:cb:05:47:a5:f1:8c:f2:9e:ff:ed:84:c1:f2:c3:46:57:af:
         13:62:4b:dd:30:60:fa:e5:5e:21:16:0f:81:03:70:7b:b6:8b:
         45:09:2a:fc:e9:c5:17:1d:b2:b5:b8:e0:2c:2f:e5:3a:e2:b3:
         80:75:d2:54:ed:8f:d4:db:b2:8f:27:ea:6b:6c:6a:cc:a2:c3:
         12:82:24:45:9a:17:4c:0b:e4:98:19:66:35:bf:5b:7d:34:9e:
         8e:5c:e0:b2:f3:7e:c1:81:bf:77:26:7f:be:01:22:ce:11:bd:
         b6:20:2a:34:4f:3e:6b:e2:19:aa:35:87:a7:e8:97:01:49:28:
         c0:20:87:39:c9:3f:66:fd:1d:bd:8d:57:d2:ec:ad:6e:e6:49:
         63:92:68:ac
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQFAADANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUxMTEyMTAyM1oXDTI0MTIxNTE3MTUx
NlowMzExMC8GA1UEAxMoOGFjZmM0NTgyODVkOGJjYWNhZDY4Njk5ZjI2OTFiMDA4
M2NhOTEzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIDlMzFc4u2G
PTpq4p1qEJGHXnaGFAyYvgy1v3lEwVAVIr9I4yx8ZKz39UedkRKgJI4Y5po/w9og
/1S6qutRdeCM5X5vDw8ziY9EpCPunFSJzM6RUzUN4TcdTrrQ0jqk3CK4AWp4dwDV
PAkjPEhGd/V1RatnECTS1VCMjDbGmj4l9VIhTN0RQACW9KDbPRHoCThvEzfAIybT
azCH286A1mVW/dsXvWZxZ3/SQn0D2amT2xnUU6/cO7mTNLOLFx5KSr1xKmGdB+WP
0JE1L2Aigv+1W6Uszj+/KXemasBO7Z1lc62dy1PlsiGUGGpDUMdhNZaXQf2PmRHv
I64rf6hZNyUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSH809gIhv3RpBsTwgR+2d5
Jd06fDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83OGEyMTY4ZS0wNjI0
LTRlZDEtOTBhNS1jYzQwYzkyMDQxMmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzhhMjE2OGUtMDYyNC00
ZWQxLTkwYTUtY2M0MGM5MjA0MTJlLzhhY2ZjNDU4Mjg1ZDhiY2FjYWQ2ODY5OWYy
NjkxYjAwODNjYTkxM2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqi1GDANBAIAAjAHAwUAKANNQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECeEwDQYJKoZIhvcNAQELBQADggEBABfX
p+68bTyGgUzSGl0fLF70/teSrK9SNsAxnBhSdSt5ZIV7M/OloAJWjAv2BCKg2mFS
Yp0HpUbmoj6r94FgzTWLZtb123+kXvM8TIYPD1MmmH7O4pjCQDi/ZP4kZ2ONCPHL
IZ8KsSF110VErzLLBUel8Yzynv/thMHyw0ZXrxNiS90wYPrlXiEWD4EDcHu2i0UJ
KvzpxRcdsrW44Cwv5Tris4B10lTtj9Tbso8n6mtsasyiwxKCJEWaF0wL5JgZZjW/
W300no5c4LLzfsGBv3cmf74BIs4RvbYgKjRPPmviGao1h6folwFJKMAghznJP2b9
Hb2NV9LsrW7mSWOSaKw=
-----END CERTIFICATE-----