Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
File:                     b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer (raw, json)
Hash identifier:          a+b2xbMgaCkTAxak6FZp5ErydrQTbdyRI/SLaMQ/X5U=
Subject key identifier:   F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDC995
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 May 2021 17:11:23 +0000
Certificate not after:    Fri 22 Nov 2024 21:17:28 +0000
Subordinate resources:    IP: 45.170.12.0/22
                          IP: 2803:cba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16632213 (0xfdc995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 26 17:11:23 2021 GMT
            Not After : Nov 22 21:17:28 2024 GMT
        Subject: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:51:d2:29:66:11:b1:a9:48:97:29:8b:49:
                    1a:b0:82:9a:28:76:1d:53:33:c1:18:3a:87:09:05:
                    84:26:01:07:b0:c1:f6:44:93:b1:4f:78:2a:89:cc:
                    60:b3:63:bb:27:98:48:10:2e:76:89:ba:ae:08:cf:
                    91:02:f5:66:28:2f:74:67:88:e1:e3:4f:41:c3:83:
                    fd:9a:b4:36:5c:93:4c:c8:39:d2:76:a5:c7:0b:6b:
                    e7:29:56:92:64:43:9f:8b:f8:f0:98:31:af:c3:06:
                    a4:8e:a8:54:a0:06:a2:cd:19:a1:ba:1d:d8:41:fd:
                    d2:b4:8c:6c:0e:92:fb:2f:6b:d6:61:a0:f4:8c:ef:
                    15:7e:bf:0c:48:5c:9b:38:ae:36:ce:18:27:72:fe:
                    fe:13:63:9e:8e:74:38:03:88:02:31:5b:02:dc:b8:
                    b6:de:38:db:70:85:89:f7:80:aa:90:06:1d:9d:5b:
                    e5:6c:41:d7:53:9b:5f:79:07:e5:61:38:15:65:be:
                    19:4a:4e:8a:16:9f:06:d7:64:83:12:36:87:10:62:
                    63:b1:45:7d:b4:3c:a1:7d:c5:48:12:45:e4:3c:83:
                    01:eb:8a:34:44:aa:14:97:2a:e3:99:a4:eb:9b:fc:
                    c9:fe:b4:ac:7c:ba:dc:48:00:bf:81:76:7b:30:61:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.12.0/22
                IPv6:
                  2803:cba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:6a:bb:d0:49:88:06:32:cb:ec:ed:ec:c1:58:5f:8e:f1:
         01:fe:2f:6a:e8:ec:98:6c:84:c3:29:5f:bd:42:d9:44:86:94:
         fc:30:47:97:93:b9:58:82:29:4e:60:5b:f6:32:b7:5a:9a:10:
         a4:76:62:67:11:bd:9f:86:9c:81:6b:ca:61:71:ff:b9:23:7f:
         49:78:8a:4d:16:a5:d5:f8:96:6e:72:eb:73:52:2a:a6:7e:70:
         35:10:66:06:78:4a:a6:1f:d6:df:5f:aa:37:66:14:44:44:3d:
         80:be:35:d6:7e:e5:09:9d:a4:16:8d:8f:f9:9c:36:a1:5d:03:
         37:cb:4c:fc:6c:8f:f0:65:87:bd:a2:9c:2a:e0:65:f4:c0:82:
         83:14:5c:5c:c5:56:44:f3:de:2a:e0:a5:29:50:6b:ea:d5:70:
         46:c7:e6:78:ee:1a:fd:ce:ad:e4:4e:90:16:11:f6:05:53:89:
         0b:df:b4:46:76:27:ee:53:e0:16:cd:f0:96:10:30:42:b2:1f:
         27:5f:33:05:34:70:6a:2f:4d:c7:21:32:c1:2e:87:e5:7c:65:
         da:e7:74:89:c8:72:51:57:f0:b5:1b:98:84:e4:b3:e3:1e:da:
         fa:e9:4b:d8:94:83:2d:c6:82:9c:c6:47:81:8a:81:ce:cf:c0:
         cd:d3:38:7b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAP3JlTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUyNjE3MTEyM1oXDTI0MTEyMjIxMTcy
OFowMzExMC8GA1UEAxMoYjVhMzg3ZjRhOWFjZjgzODAwOWRkNzUxZDg0YzYwYjdl
Y2I1NmVjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxOUdIpZhGx
qUiXKYtJGrCCmih2HVMzwRg6hwkFhCYBB7DB9kSTsU94KonMYLNjuyeYSBAudom6
rgjPkQL1ZigvdGeI4eNPQcOD/Zq0NlyTTMg50nalxwtr5ylWkmRDn4v48Jgxr8MG
pI6oVKAGos0Zobod2EH90rSMbA6S+y9r1mGg9IzvFX6/DEhcmziuNs4YJ3L+/hNj
no50OAOIAjFbAty4tt4423CFifeAqpAGHZ1b5WxB11ObX3kH5WE4FWW+GUpOihaf
BtdkgxI2hxBiY7FFfbQ8oX3FSBJF5DyDAeuKNESqFJcq45mk65v8yf60rHy63EgA
v4F2ezBhN58CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBT59cihL+IH3fUTyorV+E5m
SuqLcjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mYjMwOWQxMy0zODhj
LTQ2ODQtOGY5Yi1iMzRkZjRhZTg2MWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmIzMDlkMTMtMzg4Yy00
Njg0LThmOWItYjM0ZGY0YWU4NjFlL2I1YTM4N2Y0YTlhY2Y4MzgwMDlkZDc1MWQ4
NGM2MGI3ZWNiNTZlYzgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2qDDANBAIAAjAHAwUAKAPLoDAN
BgkqhkiG9w0BAQsFAAOCAQEAoXNqu9BJiAYyy+zt7MFYX47xAf4vaujsmGyEwylf
vULZRIaU/DBHl5O5WIIpTmBb9jK3WpoQpHZiZxG9n4acgWvKYXH/uSN/SXiKTRal
1fiWbnLrc1Iqpn5wNRBmBnhKph/W31+qN2YUREQ9gL411n7lCZ2kFo2P+Zw2oV0D
N8tM/GyP8GWHvaKcKuBl9MCCgxRcXMVWRPPeKuClKVBr6tVwRsfmeO4a/c6t5E6Q
FhH2BVOJC9+0RnYn7lPgFs3wlhAwQrIfJ18zBTRwai9NxyEywS6H5Xxl2ud0ichy
UVfwtRuYhOSz4x7a+ulL2JSDLcaCnMZHgYqBzs/AzdM4ew==
-----END CERTIFICATE-----