Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cc7bd22ec5e2bf2edc7834d16219193405c43b0.cer
File:                     0cc7bd22ec5e2bf2edc7834d16219193405c43b0.cer (raw, json)
Hash identifier:          7SSJ2QtawYsWuUvi6vq+Sfy1xP6Iel7XH+9Iq83BHT4=
Subject key identifier:   A5:1F:0D:94:4C:68:D0:82:E0:27:01:BE:06:8C:07:D1:89:F8:06:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01046254
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2878266f-4337-4356-a847-acef8801766e/0cc7bd22ec5e2bf2edc7834d16219193405c43b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2878266f-4337-4356-a847-acef8801766e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 13:00:40 +0000
Certificate not after:    Sun 01 Dec 2024 16:03:04 +0000
Subordinate resources:    AS: 28113

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17064532 (0x1046254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 19 13:00:40 2023 GMT
            Not After : Dec  1 16:03:04 2024 GMT
        Subject: CN=0cc7bd22ec5e2bf2edc7834d16219193405c43b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:39:3a:8f:51:86:33:df:22:c4:40:ea:9b:
                    c8:d5:7b:fa:9f:e3:c3:05:a7:95:51:77:da:dd:f2:
                    6a:e2:a5:1c:a9:bd:e4:94:5f:2c:30:7d:c5:47:0c:
                    4a:6a:b8:f2:bb:d3:4b:a8:49:fa:49:ac:a2:73:82:
                    db:ef:47:b7:34:17:c8:74:32:cf:8a:3b:5c:68:45:
                    6d:e8:f5:46:01:dd:8f:44:10:d6:84:71:60:09:6a:
                    f4:95:80:4c:39:f3:cd:e2:66:49:bd:9d:17:3d:c8:
                    2e:f0:82:57:ae:3b:00:a2:e8:e3:a9:f7:8f:28:35:
                    7e:cb:43:88:e5:24:96:ee:e5:8d:10:22:48:13:64:
                    cc:58:10:50:fa:b6:87:6c:b1:53:8a:d8:7f:46:84:
                    4b:16:d0:12:87:5f:93:69:73:d6:24:57:33:3b:6a:
                    7d:e6:7a:0d:0b:31:3e:01:88:e3:4f:ae:95:05:b3:
                    88:be:9b:aa:00:99:b5:db:aa:2b:93:bf:dc:b2:6e:
                    2c:ab:d4:d7:72:01:85:d6:7c:c0:b8:f9:fc:6a:6d:
                    81:8a:ae:b7:62:3b:32:95:f8:0a:34:19:17:c5:8d:
                    55:f0:a2:d1:8b:f5:fc:ca:7c:58:89:e7:c2:95:3b:
                    a8:8f:f0:88:6c:a7:dc:c6:4e:f6:f6:fb:98:97:29:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1F:0D:94:4C:68:D0:82:E0:27:01:BE:06:8C:07:D1:89:F8:06:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2878266f-4337-4356-a847-acef8801766e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2878266f-4337-4356-a847-acef8801766e/0cc7bd22ec5e2bf2edc7834d16219193405c43b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28113

    Signature Algorithm: sha256WithRSAEncryption
         85:60:84:a9:69:ae:63:fc:c1:ec:87:68:b7:b9:c8:3a:fd:5b:
         9f:d5:5b:fa:17:ed:df:9e:b3:d7:c7:62:dc:ec:0a:06:c0:42:
         c7:93:fc:e7:af:88:de:6b:7c:b2:72:1d:bd:06:51:f9:6b:52:
         35:51:20:cf:2f:56:ef:b9:36:76:ff:aa:96:80:2f:d8:7e:8f:
         55:82:3e:3b:5c:8c:d2:50:99:f1:11:5e:e3:f1:24:77:62:c8:
         ad:a3:47:7d:77:4c:86:2c:53:92:3e:aa:a9:b7:d9:72:4f:41:
         75:54:aa:8d:0d:eb:0e:cd:87:e7:a2:8d:70:76:67:5b:e7:e9:
         99:f9:2f:b6:6b:8d:83:5f:2d:07:6d:df:72:38:e6:f3:31:88:
         e3:71:e8:c0:12:7d:e2:33:ba:34:64:c2:1e:0a:da:17:9e:12:
         64:67:75:d0:b1:7b:15:cf:83:e1:07:7e:a1:aa:dd:0e:dc:cf:
         10:ce:35:d8:c2:7f:d0:9d:2e:7d:09:48:04:4a:e2:0f:c6:ff:
         b6:14:2e:0c:99:84:f8:b9:9d:01:47:ee:77:f0:59:81:55:32:
         0c:3c:62:96:09:18:3c:ce:87:5f:16:d0:b4:67:2a:dd:b8:94:
         be:b7:56:e0:3c:7d:08:5a:1d:18:21:ed:3e:6a:aa:09:65:24:
         04:9d:7c:b7
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIEAQRiVDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIxOTEzMDA0MFoXDTI0MTIwMTE2MDMw
NFowMzExMC8GA1UEAxMoMGNjN2JkMjJlYzVlMmJmMmVkYzc4MzRkMTYyMTkxOTM0
MDVjNDNiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5OOTqPUYYz
3yLEQOqbyNV7+p/jwwWnlVF32t3yauKlHKm95JRfLDB9xUcMSmq48rvTS6hJ+kms
onOC2+9HtzQXyHQyz4o7XGhFbej1RgHdj0QQ1oRxYAlq9JWATDnzzeJmSb2dFz3I
LvCCV647AKLo46n3jyg1fstDiOUklu7ljRAiSBNkzFgQUPq2h2yxU4rYf0aESxbQ
Eodfk2lz1iRXMztqfeZ6DQsxPgGI40+ulQWziL6bqgCZtduqK5O/3LJuLKvU13IB
hdZ8wLj5/GptgYqut2I7MpX4CjQZF8WNVfCi0Yv1/Mp8WInnwpU7qI/wiGyn3MZO
9vb7mJcpTZECAwEAAaOCAtgwggLUMB0GA1UdDgQWBBSlHw2UTGjQguAnAb4GjAfR
ifgGSjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yODc4MjY2Zi00MzM3
LTQzNTYtYTg0Ny1hY2VmODgwMTc2NmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjg3ODI2NmYtNDMzNy00
MzU2LWE4NDctYWNlZjg4MDE3NjZlLzBjYzdiZDIyZWM1ZTJiZjJlZGM3ODM0ZDE2
MjE5MTkzNDA1YzQzYjAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJt0TANBgkqhkiG9w0BAQsFAAOCAQEAhWCE
qWmuY/zB7Idot7nIOv1bn9Vb+hft356z18di3OwKBsBCx5P856+I3mt8snIdvQZR
+WtSNVEgzy9W77k2dv+qloAv2H6PVYI+O1yM0lCZ8RFe4/Ekd2LIraNHfXdMhixT
kj6qqbfZck9BdVSqjQ3rDs2H56KNcHZnW+fpmfkvtmuNg18tB23fcjjm8zGI43Ho
wBJ94jO6NGTCHgraF54SZGd10LF7Fc+D4Qd+oardDtzPEM412MJ/0J0ufQlIBEri
D8b/thQuDJmE+LmdAUfud/BZgVUyDDxilgkYPM6HXxbQtGcq3biUvrdW4Dx9CFod
GCHtPmqqCWUkBJ18tw==
-----END CERTIFICATE-----