Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
File:                     0617fe284eadaecc300caf805a55753001bc6052.cer (raw, json)
Hash identifier:          bG4GfSt2rDUdQueAaCiCCdRIJwSlOcrx/zyke7A4Mns=
Subject key identifier:   23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F99D31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Nov 2022 00:07:52 +0000
Certificate not after:    Wed 16 Oct 2024 01:56:57 +0000
Subordinate resources:    AS: 270141
                          IP: 2806:3dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16358705 (0xf99d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  2 00:07:52 2022 GMT
            Not After : Oct 16 01:56:57 2024 GMT
        Subject: CN=0617fe284eadaecc300caf805a55753001bc6052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:24:98:a5:c0:58:de:ea:33:f6:1d:e5:2a:
                    25:fc:2b:d0:b8:39:c6:de:6d:83:84:c4:24:29:b3:
                    92:63:c9:a4:2f:49:74:3b:1a:36:6e:90:c2:30:50:
                    8b:ee:b7:f0:96:8d:43:d0:93:09:2b:41:8b:b4:e9:
                    ab:c8:2d:c5:04:e2:6c:47:15:83:66:e7:42:f9:d9:
                    39:5d:0b:24:5c:e0:e5:43:a0:46:8f:eb:b0:a2:3c:
                    98:9a:0f:0d:73:b4:95:72:d2:a4:48:99:aa:32:5a:
                    46:ae:10:02:09:ac:a6:6c:c6:ea:0f:fc:78:0d:92:
                    57:40:28:70:37:e4:d0:8c:24:80:e4:ab:76:9a:b4:
                    3f:c8:a0:f3:63:7f:04:1a:4c:f5:c8:c8:dc:7e:0c:
                    d5:53:05:d9:74:5e:72:3a:62:74:d0:82:8b:ca:73:
                    7a:b4:e6:2f:b1:c4:63:df:6c:68:77:8a:eb:13:d9:
                    73:17:b0:ce:97:1c:6e:67:e8:e3:aa:c1:18:79:e7:
                    4b:3f:d8:27:7b:b2:b7:cd:56:08:88:b5:b0:ab:e3:
                    3d:9e:bc:e9:e8:55:ff:30:7c:81:f3:a4:0c:5b:40:
                    7d:61:98:dc:8d:b1:8b:7d:31:79:48:7e:2f:a7:9a:
                    85:5c:d0:d5:ab:ed:96:3c:ca:5f:1d:ed:e6:3f:c3:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270141

    Signature Algorithm: sha256WithRSAEncryption
         40:34:16:91:3e:9c:6c:71:64:08:75:8a:b7:a4:55:f1:1b:9c:
         61:6e:50:b0:63:7e:8e:f9:a0:86:b4:f3:78:61:34:bb:3e:04:
         c9:14:22:d1:0c:b3:e6:ab:dc:ce:fe:16:5a:c2:ee:cb:c8:6e:
         d7:dd:63:2a:03:30:3a:8b:3e:0b:be:fc:5b:46:cb:21:15:39:
         b3:20:53:72:bb:5e:b1:63:1e:bd:f4:cb:76:3e:8c:b3:2f:f2:
         60:f3:67:b9:7f:ec:e0:00:1b:3a:a9:49:d4:66:91:86:e4:4b:
         2a:68:3c:45:14:12:fc:5a:f7:7d:f6:66:4b:aa:3a:e2:ba:80:
         b3:34:33:3c:d3:1e:4c:49:39:34:b9:57:75:b9:bb:ff:b1:61:
         7b:11:1a:ba:de:2b:1b:93:23:d9:f5:a2:1a:c6:8e:35:ed:ee:
         a1:14:6d:9f:9d:8d:d8:e0:28:9f:7d:31:3c:78:c9:c9:6c:e1:
         2e:16:df:e8:06:61:27:6e:b7:ce:a4:80:3a:d9:fd:11:1e:de:
         58:19:b0:d8:5a:4e:8f:75:bc:75:60:d4:13:a5:01:f7:14:02:
         a8:3b:bd:b5:d3:75:af:7e:7e:bb:b3:75:8a:d4:65:11:db:c2:
         71:3d:33:d1:0d:81:0e:ee:6d:2e:70:e6:96:26:d5:30:0e:e5:
         29:d4:a3:c8
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPmdMTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTEwMjAwMDc1MloXDTI0MTAxNjAxNTY1
N1owMzExMC8GA1UEAxMoMDYxN2ZlMjg0ZWFkYWVjYzMwMGNhZjgwNWE1NTc1MzAw
MWJjNjA1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRlJJilwFje
6jP2HeUqJfwr0Lg5xt5tg4TEJCmzkmPJpC9JdDsaNm6QwjBQi+638JaNQ9CTCStB
i7Tpq8gtxQTibEcVg2bnQvnZOV0LJFzg5UOgRo/rsKI8mJoPDXO0lXLSpEiZqjJa
Rq4QAgmspmzG6g/8eA2SV0AocDfk0IwkgOSrdpq0P8ig82N/BBpM9cjI3H4M1VMF
2XRecjpidNCCi8pzerTmL7HEY99saHeK6xPZcxewzpccbmfo46rBGHnnSz/YJ3uy
t81WCIi1sKvjPZ686ehV/zB8gfOkDFtAfWGY3I2xi30xeUh+L6eahVzQ1avtljzK
Xx3t5j/DOGcCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQjEawEaAOAvW1yAX4jsiZI
JFY8eDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82ODU0MTJiOS0wYTEy
LTQ5NDUtOTliNy0wZDc4ZDQwNjFiZjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjg1NDEyYjktMGExMi00
OTQ1LTk5YjctMGQ3OGQ0MDYxYmYzLzA2MTdmZTI4NGVhZGFlY2MzMDBjYWY4MDVh
NTU3NTMwMDFiYzYwNTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgGA9wwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBB89MA0GCSqGSIb3DQEBCwUAA4IBAQBANBaRPpxscWQIdYq3pFXx
G5xhblCwY36O+aCGtPN4YTS7PgTJFCLRDLPmq9zO/hZawu7LyG7X3WMqAzA6iz4L
vvxbRsshFTmzIFNyu16xYx699Mt2PoyzL/Jg82e5f+zgABs6qUnUZpGG5EsqaDxF
FBL8Wvd99mZLqjriuoCzNDM80x5MSTk0uVd1ubv/sWF7ERq63isbkyPZ9aIaxo41
7e6hFG2fnY3Y4CiffTE8eMnJbOEuFt/oBmEnbrfOpIA62f0RHt5YGbDYWk6Pdbx1
YNQTpQH3FAKoO72103Wvfn67s3WK1GUR28JxPTPRDYEO7m0ucOaWJtUwDuUp1KPI
-----END CERTIFICATE-----