Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
File:                     de1d132dcee440b2c8e49412f22186fb39f7c848.cer (raw, json)
Hash identifier:          L2n1Dyx3AYEZv5562MFtStz4AwEaEzRnM6fTNOUmI4U=
Subject key identifier:   4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010029BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 Nov 2022 18:38:55 +0000
Certificate not after:    Fri 06 Dec 2024 19:23:27 +0000
Subordinate resources:    AS: 267768
                          IP: 45.170.232.0/22
                          IP: 2803:bba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16787898 (0x10029ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 18:38:55 2022 GMT
            Not After : Dec  6 19:23:27 2024 GMT
        Subject: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:86:21:4f:88:c3:f1:91:83:cc:e6:45:82:
                    01:7f:52:ea:8b:31:e7:bb:75:22:be:4c:68:a6:2c:
                    d9:56:b1:d1:4e:1e:8d:33:57:91:08:6c:32:dd:f3:
                    2b:7f:a2:65:fe:b1:fb:bb:e3:37:ff:d0:1d:fc:b0:
                    6c:20:a0:fb:af:bb:20:21:9e:ad:40:4c:37:4b:48:
                    9f:3d:59:d9:e0:65:33:7c:cf:65:ea:82:eb:6f:c4:
                    7a:75:a1:98:aa:8f:77:c8:b5:00:2f:1d:60:33:16:
                    ce:45:69:dd:44:77:ad:05:33:63:3a:44:df:47:31:
                    ca:ec:45:1a:c5:ca:2f:01:52:23:dd:a7:8e:a8:16:
                    20:f9:14:4d:1d:14:33:0d:25:00:3a:a3:06:0b:c0:
                    95:a4:03:4e:2e:d6:5b:63:3d:00:70:a9:e3:c2:1f:
                    28:1c:13:a1:02:34:be:c9:f7:5f:9a:21:ec:5f:f0:
                    8b:ad:9d:b0:3a:af:d4:e3:55:58:aa:95:15:02:70:
                    24:f2:4b:44:e4:54:34:c3:c9:67:55:ab:81:ec:43:
                    0f:a8:8a:7c:dc:7d:7c:09:13:d8:c6:99:56:dc:8e:
                    53:ac:55:c4:8b:0b:f2:15:83:27:e8:c7:ad:d7:34:
                    21:e4:c1:91:24:25:7a:7f:71:bb:60:4e:3b:1e:32:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267768

    Signature Algorithm: sha256WithRSAEncryption
         02:fc:c5:8d:4c:88:0f:da:31:41:53:9a:04:5e:da:0c:64:cb:
         81:86:5b:09:2b:14:b8:ea:35:48:03:d5:20:71:ae:50:66:06:
         da:06:ff:66:61:10:0d:a2:51:91:e7:82:c6:96:8f:66:f3:5e:
         fd:1a:87:22:91:37:44:da:68:2d:0f:3a:f9:d7:30:82:cd:c5:
         39:8b:01:2a:2a:fd:68:75:a0:8c:35:b7:71:b0:c4:cf:73:68:
         99:e4:5c:b7:79:7b:2e:b2:12:bf:a0:82:34:5c:3e:42:4f:9d:
         58:91:55:77:17:41:71:08:f1:66:6c:9d:76:26:df:72:d0:7a:
         5b:4e:bd:a7:c2:e2:f8:0e:12:29:30:7a:41:39:2d:7d:e3:cb:
         b5:0b:d9:61:4f:7d:69:25:7c:5c:fe:27:f5:49:33:28:dd:37:
         17:6a:ae:55:63:42:73:fe:7c:5d:c3:c2:d3:2d:d1:ef:90:86:
         fc:0e:fc:f2:04:81:04:5a:b1:43:e7:3f:5c:6d:c4:46:ec:24:
         e7:e8:c5:e0:6e:4f:a6:bc:a9:a7:5a:c9:2b:06:60:54:6b:a9:
         b3:d0:cd:e0:a9:5e:2e:57:5f:04:c8:5e:22:d5:51:04:58:07:
         9d:f5:97:03:b8:fb:8c:eb:13:d0:cd:d7:db:58:07:ec:61:ed:
         d8:8a:0f:88
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQApujANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTExMTE4Mzg1NVoXDTI0MTIwNjE5MjMy
N1owMzExMC8GA1UEAxMoZGUxZDEzMmRjZWU0NDBiMmM4ZTQ5NDEyZjIyMTg2ZmIz
OWY3Yzg0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJChhiFPiMPx
kYPM5kWCAX9S6osx57t1Ir5MaKYs2Vax0U4ejTNXkQhsMt3zK3+iZf6x+7vjN//Q
HfywbCCg+6+7ICGerUBMN0tInz1Z2eBlM3zPZeqC62/EenWhmKqPd8i1AC8dYDMW
zkVp3UR3rQUzYzpE30cxyuxFGsXKLwFSI92njqgWIPkUTR0UMw0lADqjBgvAlaQD
Ti7WW2M9AHCp48IfKBwToQI0vsn3X5oh7F/wi62dsDqv1ONVWKqVFQJwJPJLRORU
NMPJZ1WrgexDD6iKfNx9fAkT2MaZVtyOU6xVxIsL8hWDJ+jHrdc0IeTBkSQlen9x
u2BOOx4yCJ0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRMQCRQAnUh7m4gYyFzmOGh
9TxtxDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMWZmODlhMS0wNjAz
LTQyYTEtOTFkZi02ZDEwODBmOGM1YTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTFmZjg5YTEtMDYwMy00
MmExLTkxZGYtNmQxMDgwZjhjNWE0L2RlMWQxMzJkY2VlNDQwYjJjOGU0OTQxMmYy
MjE4NmZiMzlmN2M4NDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2q6DANBAIAAjAHAwUAKAO7oDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFfgwDQYJKoZIhvcNAQELBQADggEBAAL8
xY1MiA/aMUFTmgRe2gxky4GGWwkrFLjqNUgD1SBxrlBmBtoG/2ZhEA2iUZHngsaW
j2bzXv0ahyKRN0TaaC0POvnXMILNxTmLASoq/Wh1oIw1t3GwxM9zaJnkXLd5ey6y
Er+ggjRcPkJPnViRVXcXQXEI8WZsnXYm33LQeltOvafC4vgOEikwekE5LX3jy7UL
2WFPfWklfFz+J/VJMyjdNxdqrlVjQnP+fF3DwtMt0e+QhvwO/PIEgQRasUPnP1xt
xEbsJOfoxeBuT6a8qadaySsGYFRrqbPQzeCpXi5XXwTIXiLVUQRYB531lwO4+4zr
E9DN19tYB+xh7diKD4g=
-----END CERTIFICATE-----