Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/071cef13bb9392b8e4aff61a7adee46215e32da6.cer
File:                     071cef13bb9392b8e4aff61a7adee46215e32da6.cer (raw, json)
Hash identifier:          Xmea3d0fyi7Y8CvZmwOlytNqNrM74qp4o8Uc8VBagwU=
Subject key identifier:   E4:B4:EB:38:60:D7:20:CF:A2:18:88:FA:D3:D0:DD:29:32:A3:12:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101F1D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/071cef13bb9392b8e4aff61a7adee46215e32da6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 20:40:05 +0000
Certificate not after:    Sun 14 Sep 2025 16:22:24 +0000
Subordinate resources:    IP: 2801:17:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16904660 (0x101f1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 20:40:05 2023 GMT
            Not After : Sep 14 16:22:24 2025 GMT
        Subject: CN=071cef13bb9392b8e4aff61a7adee46215e32da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:71:e4:51:61:24:ea:78:46:82:d4:38:0e:
                    31:5d:36:f0:5c:53:ed:6a:5f:16:a5:19:c6:52:19:
                    78:d4:5f:a1:45:48:07:07:c6:00:39:84:6c:0d:8b:
                    be:29:6e:f7:20:c8:e9:c5:22:3a:32:50:f0:73:7f:
                    8e:6c:e5:2b:3d:da:4f:47:db:26:6e:5e:b6:e8:81:
                    df:32:cc:f1:29:f9:ed:94:e2:95:7b:8f:80:53:22:
                    fe:42:35:f2:42:e7:39:79:c2:b4:3e:01:54:77:15:
                    6c:80:bd:9f:b0:46:a0:92:58:bd:e7:9d:63:e7:43:
                    98:8e:e0:ac:68:c7:68:dc:39:26:52:4e:8a:66:2f:
                    ee:27:de:6b:39:ef:0d:86:1c:6e:9f:c3:ac:69:f7:
                    4b:20:7b:8b:55:61:16:d6:ce:98:61:2f:05:e9:6b:
                    2e:4c:b3:93:b5:be:6a:f6:3e:c8:0f:03:45:8d:6f:
                    54:78:1e:f1:fd:1e:57:0c:bd:ea:c1:cc:ef:d4:03:
                    15:99:c6:f7:38:06:26:9f:6b:68:0d:30:c4:5b:89:
                    ba:dc:e5:2c:8b:42:fc:d1:f9:87:bc:d5:95:9d:49:
                    f9:d9:53:64:8f:13:9c:a7:dd:fb:29:21:fd:d4:1b:
                    ed:0a:6e:94:e3:2f:e0:a9:18:da:a9:16:bd:d4:35:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:EB:38:60:D7:20:CF:A2:18:88:FA:D3:D0:DD:29:32:A3:12:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/071cef13bb9392b8e4aff61a7adee46215e32da6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:87:57:33:6b:25:60:48:81:5c:7d:88:f0:b4:a6:72:33:9c:
         66:9d:17:70:f2:c3:77:f3:12:83:d5:bf:02:84:fe:c7:3e:7f:
         83:f1:59:9a:ca:54:de:6b:5e:83:92:2d:9c:2b:c8:79:3e:e8:
         86:cd:1f:ef:aa:0c:71:3d:2f:ad:3c:e3:d0:23:a4:ca:81:b3:
         7e:f1:96:aa:d9:be:e9:59:01:cb:b6:5d:25:6b:3b:1c:77:45:
         92:96:93:bf:90:63:86:79:95:1b:ee:2f:19:98:76:ca:44:36:
         4a:5c:2f:e7:6b:d6:e2:04:c2:b2:10:49:13:ed:c2:e1:a3:f3:
         eb:eb:38:ae:b5:a0:53:9e:a4:45:b0:c3:e9:67:74:5c:71:10:
         32:66:a8:c4:2a:74:96:74:6b:e3:d6:53:e2:b8:0b:f7:0d:8b:
         9f:3d:21:7e:ff:d7:ed:37:91:ed:4c:b2:4f:85:dc:61:3b:06:
         7a:38:1a:aa:f3:9e:26:4c:47:44:4d:66:c6:84:3d:74:6f:e2:
         55:6d:5f:1b:2b:f7:94:64:08:16:60:c8:99:13:64:6f:72:e3:
         45:cc:da:69:7a:8d:a4:06:a8:17:e6:f2:07:26:6b:74:7c:bf:
         67:ab:5d:b5:14:d1:d2:b2:e9:2f:3f:3c:67:50:a1:90:f2:8a:
         cb:95:08:5a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQHx1DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTExNDIwNDAwNVoXDTI1MDkxNDE2MjIy
NFowMzExMC8GA1UEAxMoMDcxY2VmMTNiYjkzOTJiOGU0YWZmNjFhN2FkZWU0NjIx
NWUzMmRhNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMObceRRYSTq
eEaC1DgOMV028FxT7WpfFqUZxlIZeNRfoUVIBwfGADmEbA2Lvilu9yDI6cUiOjJQ
8HN/jmzlKz3aT0fbJm5etuiB3zLM8Sn57ZTilXuPgFMi/kI18kLnOXnCtD4BVHcV
bIC9n7BGoJJYveedY+dDmI7grGjHaNw5JlJOimYv7ifeaznvDYYcbp/DrGn3SyB7
i1VhFtbOmGEvBelrLkyzk7W+avY+yA8DRY1vVHge8f0eVwy96sHM79QDFZnG9zgG
Jp9raA0wxFuJutzlLItC/NH5h7zVlZ1J+dlTZI8TnKfd+ykh/dQb7QpulOMv4KkY
2qkWvdQ1WtECAwEAAaOCAuEwggLdMB0GA1UdDgQWBBTktOs4YNcgz6IYiPrT0N0p
MqMS2jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NDQ4ZGUyMC1mZGMy
LTQyYzQtOTc2MC1lYzk2MDk1ZjdhZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzQ0OGRlMjAtZmRjMi00
MmM0LTk3NjAtZWM5NjA5NWY3YWY4LzA3MWNlZjEzYmI5MzkyYjhlNGFmZjYxYTdh
ZGVlNDYyMTVlMzJkYTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABe4ADANBgkqhkiG9w0BAQsF
AAOCAQEAQ4dXM2slYEiBXH2I8LSmcjOcZp0XcPLDd/MSg9W/AoT+xz5/g/FZmspU
3mteg5ItnCvIeT7ohs0f76oMcT0vrTzj0COkyoGzfvGWqtm+6VkBy7ZdJWs7HHdF
kpaTv5BjhnmVG+4vGZh2ykQ2Slwv52vW4gTCshBJE+3C4aPz6+s4rrWgU56kRbDD
6Wd0XHEQMmaoxCp0lnRr49ZT4rgL9w2Lnz0hfv/X7TeR7UyyT4XcYTsGejgaqvOe
JkxHRE1mxoQ9dG/iVW1fGyv3lGQIFmDImRNkb3LjRczaaXqNpAaoF+byByZrdHy/
Z6tdtRTR0rLpLz88Z1ChkPKKy5UIWg==
-----END CERTIFICATE-----