Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.cer
File:                     fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.cer (raw, json)
Hash identifier:          J/+ibcg3BnD8zQCbnHUXgUVWIhBu27ZRrXyp47hFqo4=
Subject key identifier:   FF:54:7C:01:25:C8:B7:3D:B3:7D:4C:DF:B2:F0:4B:5A:21:40:AD:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01041D71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 12:10:30 +0000
Certificate not after:    Thu 16 Jan 2025 17:53:51 +0000
Subordinate resources:    AS: 271883
                          IP: 190.113.36.0/22
                          IP: 2803:bc10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17046897 (0x1041d71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 29 12:10:30 2021 GMT
            Not After : Jan 16 17:53:51 2025 GMT
        Subject: CN=fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:e1:ea:01:9c:d3:eb:94:ee:7b:8f:c0:8a:
                    cd:f9:13:72:80:d9:08:2a:ca:d0:6e:dd:af:89:ae:
                    42:79:dc:4a:c8:50:86:d3:45:ee:67:fb:d3:ae:aa:
                    bc:31:ae:ff:d4:bf:23:b0:ca:f7:52:3c:46:cc:d0:
                    6c:c2:0c:72:82:a6:7f:d6:63:f7:f0:8f:71:39:f4:
                    01:8d:31:eb:bd:da:5b:2c:95:52:bd:df:a4:c6:c7:
                    3e:25:4d:f2:e7:3e:5e:39:d7:d0:8f:d8:2d:21:af:
                    6b:a9:1e:42:86:ca:8a:a6:bf:ec:79:09:bf:9e:ff:
                    ec:a7:3a:88:c6:02:cc:06:58:d3:50:a0:6b:21:43:
                    bf:30:0b:a1:a0:cf:59:fb:50:43:9c:41:06:61:50:
                    06:5c:3c:23:56:d0:de:ea:25:36:f3:c2:a4:1b:e8:
                    c8:0b:3b:83:65:73:74:55:42:b8:35:58:01:3d:47:
                    5e:31:88:58:90:05:92:2e:6f:c2:c8:c9:34:6a:35:
                    17:aa:6e:61:ef:a1:ca:af:4c:3c:85:4b:c9:c0:37:
                    f8:8a:8f:a1:66:ec:6e:66:b3:2d:05:b1:40:bb:a9:
                    5d:7c:f9:67:a1:6c:70:a7:c0:20:e8:83:33:33:6b:
                    94:e2:10:8a:57:b3:d9:5c:cb:00:33:15:e4:1d:e8:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:54:7C:01:25:C8:B7:3D:B3:7D:4C:DF:B2:F0:4B:5A:21:40:AD:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.36.0/22
                IPv6:
                  2803:bc10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271883

    Signature Algorithm: sha256WithRSAEncryption
         18:51:c3:3b:55:41:a6:17:d3:c8:59:34:1c:b9:cc:ad:db:a9:
         83:8d:71:40:9f:cd:be:76:7c:5a:14:9b:1e:0c:d8:d4:07:ee:
         51:66:ad:66:21:df:a3:e6:f9:28:af:c8:fc:ab:cb:1e:e6:2c:
         5f:73:e3:05:90:55:01:23:9f:20:79:27:0c:9e:50:35:8c:ae:
         89:e3:17:98:7d:71:c8:cc:01:55:cb:19:dc:ae:6c:71:82:93:
         e9:37:5f:26:1b:78:c6:2d:61:36:27:cf:c9:26:cb:36:f0:87:
         bc:17:88:7b:44:eb:e6:24:a6:2b:ac:98:92:43:cf:ad:8c:f1:
         3f:fb:07:49:96:ec:0c:55:5a:62:d9:f5:15:10:b0:fa:2b:f5:
         d1:8d:ea:20:a3:26:6d:9f:dc:b4:0e:d4:77:01:fa:10:ec:6c:
         45:10:45:26:82:a4:e2:a8:55:fc:e2:93:d7:01:12:3a:af:da:
         fe:68:11:24:ef:c0:43:c0:34:ec:d3:fc:86:dd:cb:62:6d:ac:
         ce:12:d1:8f:d5:06:04:6e:45:05:17:1f:9b:60:2e:94:70:02:
         4e:bf:f2:ba:3e:67:1c:01:45:97:e3:5b:c9:be:1f:36:2d:f1:
         8a:3e:84:72:aa:7d:77:65:2f:08:9d:ca:14:db:bd:91:85:ec:
         5d:52:53:ac
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQQdcTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDcyOTEyMTAzMFoXDTI1MDExNjE3NTM1
MVowMzExMC8GA1UEAxMoZmMwOTAyYzM1MmIyZWUzMjYxZTdkNGZlMTRiZjJiYmM5
OWNmN2E3YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIKY4eoBnNPr
lO57j8CKzfkTcoDZCCrK0G7dr4muQnncSshQhtNF7mf7066qvDGu/9S/I7DK91I8
RszQbMIMcoKmf9Zj9/CPcTn0AY0x673aWyyVUr3fpMbHPiVN8uc+XjnX0I/YLSGv
a6keQobKiqa/7HkJv57/7Kc6iMYCzAZY01CgayFDvzALoaDPWftQQ5xBBmFQBlw8
I1bQ3uolNvPCpBvoyAs7g2VzdFVCuDVYAT1HXjGIWJAFki5vwsjJNGo1F6puYe+h
yq9MPIVLycA3+IqPoWbsbmazLQWxQLupXXz5Z6FscKfAIOiDMzNrlOIQilez2VzL
ADMV5B3oKH0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT/VHwBJci3PbN9TN+y8Eta
IUCtfTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lODUwNWIyZS1kNTUx
LTRiYjQtYWMzOC1kNzMxOTBkZGQwNDIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTg1MDViMmUtZDU1MS00
YmI0LWFjMzgtZDczMTkwZGRkMDQyL2ZjMDkwMmMzNTJiMmVlMzI2MWU3ZDRmZTE0
YmYyYmJjOTljZjdhN2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5xJDANBAIAAjAHAwUAKAO8EDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJgswDQYJKoZIhvcNAQELBQADggEBABhR
wztVQaYX08hZNBy5zK3bqYONcUCfzb52fFoUmx4M2NQH7lFmrWYh36Pm+SivyPyr
yx7mLF9z4wWQVQEjnyB5JwyeUDWMronjF5h9ccjMAVXLGdyubHGCk+k3XyYbeMYt
YTYnz8kmyzbwh7wXiHtE6+YkpiusmJJDz62M8T/7B0mW7AxVWmLZ9RUQsPor9dGN
6iCjJm2f3LQO1HcB+hDsbEUQRSaCpOKoVfzik9cBEjqv2v5oESTvwEPANOzT/Ibd
y2JtrM4S0Y/VBgRuRQUXH5tgLpRwAk6/8ro+ZxwBRZfjW8m+HzYt8Yo+hHKqfXdl
LwidyhTbvZGF7F1SU6w=
-----END CERTIFICATE-----