Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/098bd67d41529269ed3f8480514d1dc399560651.cer
File:                     098bd67d41529269ed3f8480514d1dc399560651.cer (raw, json)
Hash identifier:          nExJ7KdrvrUcOGBklKEtvTfZRyEG7JRaOEyrYS5Pphk=
Subject key identifier:   D1:4E:AD:7A:D8:EE:39:C8:B6:11:49:1F:7C:11:B8:AD:67:68:FA:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F62318
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/098bd67d41529269ed3f8480514d1dc399560651.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 16:23:43 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 166.75.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16130840 (0xf62318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 22 16:23:43 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=098bd67d41529269ed3f8480514d1dc399560651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:1f:82:7a:db:63:ad:20:c0:b3:d0:c4:96:
                    61:f1:62:81:d5:24:78:65:28:63:3d:03:9a:89:b9:
                    fe:9d:b0:d2:f0:0a:9c:52:d7:ad:d9:74:6c:72:0f:
                    83:a0:fd:d2:c0:f8:cf:a3:9d:3e:5a:11:04:f5:0b:
                    e0:24:24:cd:66:be:ed:59:dc:4f:d0:a2:fa:7b:81:
                    51:39:5e:3a:04:f7:d4:ca:f1:1a:b1:3b:68:e9:32:
                    1a:d8:25:08:8d:de:04:28:50:55:01:55:f4:36:bd:
                    4d:ae:21:08:4b:c8:e6:9a:b2:d2:c8:91:1d:cc:4a:
                    0c:76:a0:58:b8:6b:a3:50:20:77:fc:c5:d2:da:08:
                    03:d6:17:d1:34:ff:5e:07:22:50:62:9d:27:53:06:
                    62:59:4c:a6:39:d2:0b:ed:3c:79:08:ab:fd:6e:a8:
                    53:0c:6b:c9:ab:4f:9d:59:84:b5:c7:9c:c6:9d:cb:
                    b6:75:9a:1f:8f:ee:e5:f2:6e:02:3c:a6:4c:a2:0a:
                    cf:ca:f2:f6:e0:8d:61:ce:06:89:82:2f:2b:87:e7:
                    ee:bc:62:ed:05:94:a2:75:73:88:0a:0b:a3:84:0d:
                    92:1c:d5:fc:c0:71:bb:82:4c:f7:a5:0a:6a:99:fe:
                    96:56:c2:86:3b:30:37:d8:af:34:8d:ec:b0:8a:ff:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:AD:7A:D8:EE:39:C8:B6:11:49:1F:7C:11:B8:AD:67:68:FA:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/098bd67d41529269ed3f8480514d1dc399560651.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:50:a4:1c:71:82:a0:09:ea:62:f6:12:27:0f:01:84:e7:
         08:8c:54:ef:dc:c8:ab:7e:08:a4:cd:57:02:74:0d:00:e8:26:
         f4:c1:a5:69:90:ed:d7:81:af:78:9c:e3:ea:17:f9:a8:ae:6f:
         44:42:3b:9f:4e:7f:ff:59:13:55:c1:c8:6d:25:cd:99:6b:cd:
         5f:40:ef:3b:c0:43:de:08:9a:da:04:2a:60:ab:dd:02:32:bc:
         60:50:b0:7b:96:d3:ad:ec:e2:9e:09:a7:a6:3f:a3:ee:52:41:
         40:b6:50:a2:fd:e0:01:7c:e0:57:f6:d0:24:5e:bb:94:15:ab:
         40:98:dc:9e:6a:39:40:74:c5:2b:2e:eb:e7:f1:e4:bd:cf:96:
         3b:b4:e0:8f:47:9c:b1:cb:bc:54:7e:4e:f1:84:b2:09:32:30:
         1f:34:8f:ec:9c:9a:b1:8b:61:fd:de:8f:62:97:2c:ad:73:ab:
         32:0e:71:56:f7:11:f5:ed:bc:25:22:12:8d:9f:4d:f7:3f:0a:
         95:ac:4b:96:02:48:fb:47:fc:e5:ca:2f:ad:53:e7:ea:d5:93:
         75:87:78:7e:0e:b1:f7:2f:ac:d9:c5:b1:c9:bd:3c:54:f1:a4:
         0b:c5:39:92:aa:ad:8c:f6:4c:34:3b:99:ca:9a:cd:81:7f:c1:
         43:1e:d8:c9
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIEAPYjGDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyMjE2MjM0M1oXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoMDk4YmQ2N2Q0MTUyOTI2OWVkM2Y4NDgwNTE0ZDFkYzM5
OTU2MDY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqKH4J622Ot
IMCz0MSWYfFigdUkeGUoYz0Dmom5/p2w0vAKnFLXrdl0bHIPg6D90sD4z6OdPloR
BPUL4CQkzWa+7VncT9Ci+nuBUTleOgT31MrxGrE7aOkyGtglCI3eBChQVQFV9Da9
Ta4hCEvI5pqy0siRHcxKDHagWLhro1Agd/zF0toIA9YX0TT/XgciUGKdJ1MGYllM
pjnSC+08eQir/W6oUwxryatPnVmEtcecxp3LtnWaH4/u5fJuAjymTKIKz8ry9uCN
Yc4GiYIvK4fn7rxi7QWUonVziAoLo4QNkhzV/MBxu4JM96UKapn+llbChjswN9iv
NI3ssIr/gsMCAwEAAaOCAt0wggLZMB0GA1UdDgQWBBTRTq162O45yLYRSR98Ebit
Z2j6cTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNDUwMTU2OS03Mzgz
LTRkMmMtYTE3My04ZmJiZDE3YmVhYjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDQ1MDE1NjktNzM4My00
ZDJjLWExNzMtOGZiYmQxN2JlYWI4LzA5OGJkNjdkNDE1MjkyNjllZDNmODQ4MDUx
NGQxZGMzOTk1NjA2NTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKZLMA0GCSqGSIb3DQEBCwUAA4IB
AQCnPVCkHHGCoAnqYvYSJw8BhOcIjFTv3MirfgikzVcCdA0A6Cb0waVpkO3Xga94
nOPqF/morm9EQjufTn//WRNVwchtJc2Za81fQO87wEPeCJraBCpgq90CMrxgULB7
ltOt7OKeCaemP6PuUkFAtlCi/eABfOBX9tAkXruUFatAmNyeajlAdMUrLuvn8eS9
z5Y7tOCPR5yxy7xUfk7xhLIJMjAfNI/snJqxi2H93o9ilyytc6syDnFW9xH17bwl
IhKNn033PwqVrEuWAkj7R/zlyi+tU+fq1ZN1h3h+DrH3L6zZxbHJvTxU8aQLxTmS
qq2M9kw0O5nKms2Bf8FDHtjJ
-----END CERTIFICATE-----