Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baf6eb13be5cd5a5e775c11d96d08a93cfbbd252.cer
File:                     baf6eb13be5cd5a5e775c11d96d08a93cfbbd252.cer (raw, json)
Hash identifier:          wlE04sGQgoNVSpryX69FqJ1TgjvdUWL94AG8nX/MLXM=
Subject key identifier:   8C:7E:2C:F9:17:D3:2D:FC:33:95:97:AF:5C:05:E7:C9:EE:A0:08:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD9CCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ef4aa501-678d-4517-a2c4-67abf142c34e/baf6eb13be5cd5a5e775c11d96d08a93cfbbd252.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ef4aa501-678d-4517-a2c4-67abf142c34e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 22 Jan 2022 16:39:26 +0000
Certificate not after:    Thu 21 Nov 2024 22:21:40 +0000
Subordinate resources:    AS: 272060
                          IP: 181.224.32.0/22
                          IP: 2803:4310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16620750 (0xfd9cce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 22 16:39:26 2022 GMT
            Not After : Nov 21 22:21:40 2024 GMT
        Subject: CN=baf6eb13be5cd5a5e775c11d96d08a93cfbbd252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:6f:37:a3:56:5e:c1:2a:b3:b2:78:8a:13:
                    b2:4b:49:a8:c5:53:80:51:d6:e3:51:ed:c8:d1:11:
                    b3:38:2e:1e:c7:c0:28:9a:af:0a:33:f4:b7:c1:0b:
                    6c:3c:59:d3:7e:64:72:a7:c6:f9:4d:2b:31:5b:63:
                    63:3b:eb:f2:8b:07:cd:e8:3f:66:e6:50:00:ad:07:
                    ec:45:ca:69:b6:cc:1b:cb:e3:67:73:d4:62:aa:03:
                    65:0c:a4:60:51:d0:75:9e:f8:6c:5d:b7:3c:cb:51:
                    b8:37:c1:c9:f8:9c:b8:44:aa:f2:1b:c9:7c:78:ad:
                    3d:f1:5a:26:78:d5:44:66:25:7c:4d:8e:de:4b:35:
                    6a:4c:04:c0:ac:b3:67:46:05:12:ca:1b:30:53:6a:
                    fb:fe:6a:d3:c5:6d:04:43:a7:48:af:7b:f7:ea:d4:
                    09:5e:50:a9:7e:24:87:6d:8b:bb:de:15:f6:a1:5b:
                    c4:e0:1a:fa:f6:60:d1:37:e7:f4:58:0a:10:40:76:
                    80:63:3f:01:4e:50:c9:59:81:51:3e:31:66:51:fa:
                    92:51:19:38:5b:0f:0f:ef:9a:2d:34:3d:ba:7b:2e:
                    e0:25:6a:ec:e7:7d:c9:a0:75:62:a9:03:08:46:c6:
                    97:51:a0:06:c6:3d:f0:35:13:43:21:2b:9e:2c:38:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:2C:F9:17:D3:2D:FC:33:95:97:AF:5C:05:E7:C9:EE:A0:08:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ef4aa501-678d-4517-a2c4-67abf142c34e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ef4aa501-678d-4517-a2c4-67abf142c34e/baf6eb13be5cd5a5e775c11d96d08a93cfbbd252.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.32.0/22
                IPv6:
                  2803:4310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272060

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:4b:15:65:d6:ac:c5:14:da:7e:da:a6:c6:d5:4a:6f:9b:
         eb:52:5c:d8:bc:65:89:c8:46:10:58:66:47:2c:db:a6:0b:5c:
         c0:d1:9e:05:1b:90:29:6b:6c:4c:66:18:1c:41:5d:85:2a:e8:
         ac:a4:a4:0a:ae:3c:83:dc:30:5e:57:42:05:84:5e:02:c6:21:
         95:7c:a1:70:ea:c7:84:53:e3:e9:0d:4c:ba:f3:23:64:f4:05:
         00:90:77:a0:8c:9e:cc:a5:88:83:63:63:4c:ae:32:d3:7b:1c:
         cb:65:f5:d4:1b:4e:ec:39:aa:a8:b9:3b:af:04:be:d9:7f:09:
         85:76:27:bd:c7:98:ca:8d:c4:76:b3:5a:b8:52:11:44:ec:ed:
         bc:bb:5a:de:c5:2c:d7:22:4b:f7:fc:ab:9f:58:67:2d:1b:38:
         4a:f0:9a:dd:42:63:21:a5:df:fb:e8:07:5c:f3:11:18:ee:d6:
         db:02:c1:9b:d3:eb:56:5f:a3:32:60:8c:bf:54:72:12:68:bb:
         15:33:6f:5c:e6:57:03:29:e9:6c:6a:2b:3e:6d:6c:f0:d8:04:
         4d:bd:2a:42:84:e7:50:9b:ee:e2:5a:39:b7:be:93:29:d5:be:
         19:67:3a:ac:54:a3:2f:18:26:2f:89:69:9b:ce:b8:00:03:b8:
         77:87:4b:60
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP2czjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDEyMjE2MzkyNloXDTI0MTEyMTIyMjE0
MFowMzExMC8GA1UEAxMoYmFmNmViMTNiZTVjZDVhNWU3NzVjMTFkOTZkMDhhOTNj
ZmJiZDI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxUbzejVl7B
KrOyeIoTsktJqMVTgFHW41HtyNERszguHsfAKJqvCjP0t8ELbDxZ035kcqfG+U0r
MVtjYzvr8osHzeg/ZuZQAK0H7EXKabbMG8vjZ3PUYqoDZQykYFHQdZ74bF23PMtR
uDfByficuESq8hvJfHitPfFaJnjVRGYlfE2O3ks1akwEwKyzZ0YFEsobMFNq+/5q
08VtBEOnSK979+rUCV5QqX4kh22Lu94V9qFbxOAa+vZg0Tfn9FgKEEB2gGM/AU5Q
yVmBUT4xZlH6klEZOFsPD++aLTQ9unsu4CVq7Od9yaB1YqkDCEbGl1GgBsY98DUT
QyErniw4vTcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSMfiz5F9Mt/DOVl69cBefJ
7qAIPjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZjRhYTUwMS02Nzhk
LTQ1MTctYTJjNC02N2FiZjE0MmMzNGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWY0YWE1MDEtNjc4ZC00
NTE3LWEyYzQtNjdhYmYxNDJjMzRlL2JhZjZlYjEzYmU1Y2Q1YTVlNzc1YzExZDk2
ZDA4YTkzY2ZiYmQyNTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXgIDANBAIAAjAHAwUAKANDEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJrwwDQYJKoZIhvcNAQELBQADggEBAAzE
SxVl1qzFFNp+2qbG1Upvm+tSXNi8ZYnIRhBYZkcs26YLXMDRngUbkClrbExmGBxB
XYUq6KykpAquPIPcMF5XQgWEXgLGIZV8oXDqx4RT4+kNTLrzI2T0BQCQd6CMnsyl
iINjY0yuMtN7HMtl9dQbTuw5qqi5O68Evtl/CYV2J73HmMqNxHazWrhSEUTs7by7
Wt7FLNciS/f8q59YZy0bOErwmt1CYyGl3/voB1zzERju1tsCwZvT61ZfozJgjL9U
chJouxUzb1zmVwMp6WxqKz5tbPDYBE29KkKE51Cb7uJaObe+kynVvhlnOqxUoy8Y
Ji+JaZvOuAADuHeHS2A=
-----END CERTIFICATE-----