Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c4bcf5364e0b2f0e25ca74666abd7f357aef006.cer
File:                     3c4bcf5364e0b2f0e25ca74666abd7f357aef006.cer (raw, json)
Hash identifier:          BWRvWefOSMWnUes05jwRuw6D8gWL/Ik6cYJ09TrC5A4=
Subject key identifier:   7F:82:0E:2B:C5:EA:E9:F5:75:C0:50:2E:DF:97:F1:9D:F9:EE:51:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01014671
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/3c4bcf5364e0b2f0e25ca74666abd7f357aef006.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 20:40:05 +0000
Certificate not after:    Thu 06 Feb 2025 18:15:40 +0000
Subordinate resources:    IP: 2801:17:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16860785 (0x1014671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 20:40:05 2023 GMT
            Not After : Feb  6 18:15:40 2025 GMT
        Subject: CN=3c4bcf5364e0b2f0e25ca74666abd7f357aef006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:8d:43:69:d6:51:14:e6:c3:89:71:e5:ed:
                    84:b9:12:06:07:c7:71:47:0f:10:46:5e:21:68:8e:
                    a6:7b:a4:fe:8a:33:5c:f2:da:a9:97:cb:a5:21:f4:
                    46:aa:36:c0:20:4e:7d:30:d3:5e:ed:42:0b:3c:b4:
                    01:a6:9d:a7:aa:2e:46:e8:82:9e:bd:62:5d:63:1e:
                    c9:ad:ea:7b:4c:d1:3e:0a:27:bd:7e:72:9c:f7:e3:
                    2c:fb:aa:2e:0c:2f:9f:68:41:15:4c:ef:bf:f0:fb:
                    4f:e1:a6:d7:fa:76:32:4c:7e:af:10:09:bb:ac:a2:
                    83:8a:69:a4:57:24:0e:61:83:70:39:31:dc:ea:d4:
                    81:3b:e9:f9:b7:68:96:66:dc:94:d4:fc:32:cf:35:
                    01:8d:6e:7c:e8:80:70:3f:62:12:4f:28:81:dd:f2:
                    ab:19:f8:5e:2e:4f:c9:17:da:a1:ec:b7:61:6f:e9:
                    89:8d:18:62:80:7e:03:0b:d3:57:55:79:f3:8e:c6:
                    ed:52:a0:bd:dc:99:1b:09:b6:82:d3:ce:4d:24:fc:
                    09:38:31:bc:bf:a7:1f:81:13:57:e4:f8:0e:ac:e9:
                    75:93:10:00:de:da:0c:0c:61:e5:8e:ce:a9:75:42:
                    56:07:8f:9d:f4:1f:5a:98:97:1c:fa:be:a8:a1:4b:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:0E:2B:C5:EA:E9:F5:75:C0:50:2E:DF:97:F1:9D:F9:EE:51:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/3c4bcf5364e0b2f0e25ca74666abd7f357aef006.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:d6:9e:62:f9:ad:01:e7:38:58:be:18:e4:5e:d6:d5:23:f4:
         28:1e:fb:0d:3e:50:c7:bc:43:06:e8:98:2f:f4:65:dc:c7:e7:
         2b:ab:f7:3e:6d:fb:74:35:44:e5:d2:fc:42:6a:1c:c4:92:b7:
         cd:02:73:b8:b9:4c:67:d0:51:76:d4:73:97:06:86:97:27:7e:
         76:c5:b1:22:6f:17:ea:37:89:85:82:57:40:dd:cf:91:d9:5f:
         ee:34:d7:05:f6:71:bc:d5:a8:db:02:23:b6:56:82:40:a3:1b:
         1c:11:98:07:ca:09:9a:c1:d1:25:3f:fb:a9:b0:91:88:f9:e5:
         2f:49:02:54:24:32:45:77:9e:67:34:79:9c:3c:62:8f:4c:c6:
         84:52:50:d9:df:c9:7b:2f:27:95:5c:0a:cd:bf:d8:93:6d:3f:
         3f:ff:f9:75:35:88:38:af:3f:42:a6:0a:ea:41:5b:25:01:64:
         80:72:1e:19:32:e5:d0:5f:cd:5f:89:58:ce:aa:1f:e0:cb:e4:
         17:30:63:32:05:2a:29:bc:69:90:61:ab:39:a7:b2:51:ae:d6:
         2e:39:a6:8d:a0:7f:7b:ad:ef:7c:2d:b4:70:e4:a6:60:c6:45:
         15:83:21:01:91:e5:d7:41:2e:6b:4e:7b:f6:22:a8:3b:7e:bc:
         fa:45:78:97
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQFGcTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTExNDIwNDAwNVoXDTI1MDIwNjE4MTU0
MFowMzExMC8GA1UEAxMoM2M0YmNmNTM2NGUwYjJmMGUyNWNhNzQ2NjZhYmQ3ZjM1
N2FlZjAwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKVOjUNp1lEU
5sOJceXthLkSBgfHcUcPEEZeIWiOpnuk/oozXPLaqZfLpSH0Rqo2wCBOfTDTXu1C
Czy0Aaadp6ouRuiCnr1iXWMeya3qe0zRPgonvX5ynPfjLPuqLgwvn2hBFUzvv/D7
T+Gm1/p2Mkx+rxAJu6yig4pppFckDmGDcDkx3OrUgTvp+bdolmbclNT8Ms81AY1u
fOiAcD9iEk8ogd3yqxn4Xi5PyRfaoey3YW/piY0YYoB+AwvTV1V5847G7VKgvdyZ
Gwm2gtPOTST8CTgxvL+nH4ETV+T4DqzpdZMQAN7aDAxh5Y7OqXVCVgePnfQfWpiX
HPq+qKFLpEECAwEAAaOCAuEwggLdMB0GA1UdDgQWBBR/gg4rxerp9XXAUC7fl/Gd
+e5RijAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NDQ4ZGUyMC1mZGMy
LTQyYzQtOTc2MC1lYzk2MDk1ZjdhZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzQ0OGRlMjAtZmRjMi00
MmM0LTk3NjAtZWM5NjA5NWY3YWY4LzNjNGJjZjUzNjRlMGIyZjBlMjVjYTc0NjY2
YWJkN2YzNTdhZWYwMDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABe4ADANBgkqhkiG9w0BAQsF
AAOCAQEAvNaeYvmtAec4WL4Y5F7W1SP0KB77DT5Qx7xDBuiYL/Rl3MfnK6v3Pm37
dDVE5dL8QmocxJK3zQJzuLlMZ9BRdtRzlwaGlyd+dsWxIm8X6jeJhYJXQN3Pkdlf
7jTXBfZxvNWo2wIjtlaCQKMbHBGYB8oJmsHRJT/7qbCRiPnlL0kCVCQyRXeeZzR5
nDxij0zGhFJQ2d/Jey8nlVwKzb/Yk20/P//5dTWIOK8/QqYK6kFbJQFkgHIeGTLl
0F/NX4lYzqof4MvkFzBjMgUqKbxpkGGrOaeyUa7WLjmmjaB/e63vfC20cOSmYMZF
FYMhAZHl10Eua0579iKoO368+kV4lw==
-----END CERTIFICATE-----