Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer
File:                     d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer (raw, json)
Hash identifier:          iLDUZYmzxg1mLGvQcvK7rLOcQAtbvZnwaRX8K7rOQZE=
Subject key identifier:   4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010246BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 May 2021 16:59:21 +0000
Certificate not after:    Thu 26 Dec 2024 17:28:27 +0000
Subordinate resources:    AS: 266741
                          IP: 45.232.16.0/22
                          IP: 2803:2b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16926394 (0x10246ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  7 16:59:21 2021 GMT
            Not After : Dec 26 17:28:27 2024 GMT
        Subject: CN=d3eef1937df6fdd69dc9fc7ce2c008cf13179427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:fe:fd:0d:06:0d:04:e4:eb:e9:4c:ad:2f:
                    40:91:5c:8d:00:30:61:be:cf:a2:d9:89:1a:ee:2b:
                    73:99:d3:76:78:00:ed:73:9d:b4:a3:66:0e:26:9d:
                    59:90:0e:f8:75:d8:49:3e:88:a2:f1:5c:78:eb:ef:
                    54:d3:3f:e1:0c:4a:01:e6:5d:a2:1d:07:4b:e5:a2:
                    28:94:b7:0f:7e:7c:95:6f:fa:b3:38:34:4f:90:40:
                    75:c0:ab:02:d4:9b:9e:69:65:75:c6:a1:52:36:2b:
                    51:dd:e4:64:4b:f8:7f:9d:86:74:8a:75:51:2a:ac:
                    bc:58:97:bc:9c:d5:4a:ea:71:b1:88:ef:ec:49:9a:
                    44:df:26:6e:6b:09:ba:1a:60:5b:85:8e:d3:9e:d0:
                    ad:e7:73:0c:c7:06:14:d8:08:f4:98:fe:24:cc:20:
                    49:e9:97:e5:9d:05:9d:bf:fa:a8:e5:98:18:d8:99:
                    7a:e4:a6:5e:c6:c4:1e:1d:42:fc:75:b3:26:47:0f:
                    61:f6:81:de:06:70:83:ff:4a:fc:3b:c9:33:8f:30:
                    d3:de:05:5b:ca:13:e9:b6:be:57:22:f8:fb:90:34:
                    b7:31:1d:10:d4:19:86:00:eb:bc:af:69:2c:83:ee:
                    00:c5:2f:5a:4f:9b:d9:2f:d5:15:9d:3b:68:3f:47:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.16.0/22
                IPv6:
                  2803:2b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266741

    Signature Algorithm: sha256WithRSAEncryption
         93:32:38:06:f1:f6:c0:8c:62:40:c8:7b:02:b6:5b:55:79:9d:
         1b:79:c4:af:26:3f:42:27:b0:b4:81:79:f8:7a:e4:05:25:94:
         58:64:fd:b8:81:10:4f:f3:7a:eb:42:60:c2:c8:ec:f7:3f:93:
         9b:ce:7f:a1:21:2b:10:06:7b:f4:82:37:e3:91:34:d8:35:07:
         63:ca:3f:a7:50:e9:1d:07:b5:55:c4:83:55:75:4b:41:43:3d:
         93:b8:bf:f7:a9:be:3a:a8:ce:59:a5:ef:a1:db:64:5d:bf:2e:
         61:8a:47:cd:9d:95:a5:c6:62:ef:1c:49:76:07:2b:68:5c:36:
         4e:fc:b1:c8:03:ca:02:cb:1d:e5:de:6c:52:61:c0:21:6d:f5:
         cf:19:94:df:7b:2e:3f:6e:01:ee:84:aa:e7:d6:f2:e1:af:a6:
         65:fd:0a:5f:99:b9:11:f0:be:50:fc:33:18:f1:e2:d1:d7:01:
         db:d5:81:a7:fa:ff:18:5d:36:d8:54:a1:66:73:81:64:2d:87:
         81:40:24:4b:c2:79:25:4a:5c:56:97:19:f1:a0:3b:80:0a:f9:
         99:e0:37:35:17:25:d6:5f:72:cf:71:30:6a:3a:70:28:84:6d:
         92:87:83:8a:d4:07:1b:9c:f5:ce:b6:50:9e:a6:57:de:ac:11:
         bf:71:b2:87
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQJGujANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUwNzE2NTkyMVoXDTI0MTIyNjE3Mjgy
N1owMzExMC8GA1UEAxMoZDNlZWYxOTM3ZGY2ZmRkNjlkYzlmYzdjZTJjMDA4Y2Yx
MzE3OTQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbR/v0NBg0E
5OvpTK0vQJFcjQAwYb7PotmJGu4rc5nTdngA7XOdtKNmDiadWZAO+HXYST6IovFc
eOvvVNM/4QxKAeZdoh0HS+WiKJS3D358lW/6szg0T5BAdcCrAtSbnmlldcahUjYr
Ud3kZEv4f52GdIp1USqsvFiXvJzVSupxsYjv7EmaRN8mbmsJuhpgW4WO057Qredz
DMcGFNgI9Jj+JMwgSemX5Z0Fnb/6qOWYGNiZeuSmXsbEHh1C/HWzJkcPYfaB3gZw
g/9K/DvJM48w094FW8oT6ba+VyL4+5A0tzEdENQZhgDrvK9pLIPuAMUvWk+b2S/V
FZ07aD9HcpUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRMd5FUpiSM/faEP2l+mX/z
7UthQjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYzY0NTAxYS02YjRl
LTQzZWQtOWY2Yy1hM2Q3MzkxODI0Y2YvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWM2NDUwMWEtNmI0ZS00
M2VkLTlmNmMtYTNkNzM5MTgyNGNmL2QzZWVmMTkzN2RmNmZkZDY5ZGM5ZmM3Y2Uy
YzAwOGNmMTMxNzk0MjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oEDANBAIAAjAHAwUAKAMrIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEfUwDQYJKoZIhvcNAQELBQADggEBAJMy
OAbx9sCMYkDIewK2W1V5nRt5xK8mP0InsLSBefh65AUllFhk/biBEE/zeutCYMLI
7Pc/k5vOf6EhKxAGe/SCN+ORNNg1B2PKP6dQ6R0HtVXEg1V1S0FDPZO4v/epvjqo
zlml76HbZF2/LmGKR82dlaXGYu8cSXYHK2hcNk78scgDygLLHeXebFJhwCFt9c8Z
lN97Lj9uAe6EqufW8uGvpmX9Cl+ZuRHwvlD8Mxjx4tHXAdvVgaf6/xhdNthUoWZz
gWQth4FAJEvCeSVKXFaXGfGgO4AK+ZngNzUXJdZfcs9xMGo6cCiEbZKHg4rUBxuc
9c62UJ6mV96sEb9xsoc=
-----END CERTIFICATE-----