Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19acadaa5cb52d9c8afd95a91c962350eb57d619.cer
File:                     19acadaa5cb52d9c8afd95a91c962350eb57d619.cer (raw, json)
Hash identifier:          mxP9UFpJL0P0GW5cV2T+XDhdEdQgKSo3o0NBR81rTEM=
Subject key identifier:   87:40:83:10:97:9F:E2:1E:8F:D3:0F:FA:D5:A2:93:4F:86:94:9E:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3DD00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/19acadaa5cb52d9c8afd95a91c962350eb57d619.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 17:32:47 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.5.40.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14933248 (0xe3dd00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 17:32:47 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=19acadaa5cb52d9c8afd95a91c962350eb57d619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:a3:8e:01:1a:6c:41:7d:2e:c5:f7:81:35:
                    0e:9a:ea:14:27:16:a6:7d:2b:fb:f3:4a:75:60:3b:
                    71:af:69:3e:6d:10:49:4e:3d:b1:2f:28:63:be:4c:
                    79:c5:b2:de:c8:fa:92:82:fd:d5:27:ff:5e:b7:69:
                    6b:e3:60:87:c6:04:79:82:78:f8:0b:e5:22:e2:e8:
                    3d:61:91:fb:74:d6:bb:a8:f1:54:0c:a2:37:79:9b:
                    3d:ec:42:c7:03:47:39:52:d1:ff:fd:45:91:01:77:
                    b6:78:fc:3d:21:33:13:f0:55:b4:0a:04:c9:fa:f3:
                    7b:c0:c2:bc:c4:65:07:f1:4a:ed:5f:48:15:e3:4f:
                    14:a1:1b:2d:bc:8d:87:34:83:bd:74:a0:00:02:8f:
                    c1:d4:55:c3:1a:6b:f6:4f:b2:9a:40:ce:9f:2c:43:
                    d2:04:00:79:50:70:93:15:b5:e2:af:ae:36:ed:ef:
                    86:0e:22:60:99:fa:05:6f:6d:33:1b:85:be:e8:9a:
                    77:9c:7b:5a:63:aa:d4:5b:49:4a:b4:1f:5d:32:a6:
                    f0:8b:5c:fa:5a:b2:59:d2:33:f8:0c:62:36:c5:52:
                    1e:a7:61:8d:45:dd:bc:83:45:0c:da:f2:4f:e7:82:
                    c7:f8:cd:68:56:c4:9b:c4:6c:f7:77:00:b6:59:8d:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:40:83:10:97:9F:E2:1E:8F:D3:0F:FA:D5:A2:93:4F:86:94:9E:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/19acadaa5cb52d9c8afd95a91c962350eb57d619.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:d4:83:dd:99:70:0f:24:92:ed:61:d9:ac:5b:d4:3f:64:
         c6:bc:fc:f0:89:b6:a7:59:a4:70:fd:66:9b:4c:3b:2a:0e:9c:
         3a:a4:e1:ed:89:5a:11:38:d3:0e:89:74:e2:43:10:ac:b8:32:
         8b:fd:5c:50:ae:12:00:56:55:ab:76:0a:c3:c0:a5:fa:13:cb:
         94:e4:0b:d5:3e:81:33:7d:31:11:9f:41:26:9e:f7:d6:48:a7:
         5d:06:e5:fc:ea:c7:65:16:81:ac:21:4d:a9:63:21:c5:49:6b:
         3a:13:c6:b7:7f:a6:90:9f:e3:53:10:96:00:c5:39:a7:bf:4d:
         69:8f:6d:fd:d3:a6:d5:e0:b3:ab:d5:9d:35:06:0d:7c:f2:23:
         eb:bd:82:03:94:42:10:74:45:03:55:7a:cf:d3:f9:8f:95:67:
         6d:ec:53:d4:5e:0c:04:6c:eb:cf:45:62:bf:f3:13:e0:0b:d1:
         7c:95:d0:ff:cf:36:84:24:15:e8:1e:d3:96:97:90:d5:b0:54:
         dd:68:ff:85:50:ea:ef:52:6f:77:21:b6:10:e9:93:da:93:00:
         6b:65:26:1c:06:4a:4c:0f:82:f3:88:19:20:6a:bf:53:59:8e:
         27:e9:68:e4:aa:d3:bd:94:56:8e:11:d1:26:0c:fc:e4:9a:d6:
         a4:4c:dd:8d
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAOPdADANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwNTE3MzI0N1oXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoMTlhY2FkYWE1Y2I1MmQ5YzhhZmQ5NWE5MWM5NjIzNTBl
YjU3ZDYxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4zo44BGmxB
fS7F94E1DprqFCcWpn0r+/NKdWA7ca9pPm0QSU49sS8oY75MecWy3sj6koL91Sf/
Xrdpa+Ngh8YEeYJ4+AvlIuLoPWGR+3TWu6jxVAyiN3mbPexCxwNHOVLR//1FkQF3
tnj8PSEzE/BVtAoEyfrze8DCvMRlB/FK7V9IFeNPFKEbLbyNhzSDvXSgAAKPwdRV
wxpr9k+ymkDOnyxD0gQAeVBwkxW14q+uNu3vhg4iYJn6BW9tMxuFvuiad5x7WmOq
1FtJSrQfXTKm8Itc+lqyWdIz+AxiNsVSHqdhjUXdvINFDNryT+eCx/jNaFbEm8Rs
93cAtlmNtisCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBSHQIMQl5/iHo/TD/rVopNP
hpSenzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kMDNjMWMyYy0yZDNj
LTQzMzAtYmUwOS0zZTU3ODNlYzg4NTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDAzYzFjMmMtMmQzYy00
MzMwLWJlMDktM2U1NzgzZWM4ODUxLzE5YWNhZGFhNWNiNTJkOWM4YWZkOTVhOTFj
OTYyMzUwZWI1N2Q2MTkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gFKDANBgkqhkiG9w0BAQsFAAOC
AQEALNTUg92ZcA8kku1h2axb1D9kxrz88Im2p1mkcP1mm0w7Kg6cOqTh7YlaETjT
Dol04kMQrLgyi/1cUK4SAFZVq3YKw8Cl+hPLlOQL1T6BM30xEZ9BJp731kinXQbl
/OrHZRaBrCFNqWMhxUlrOhPGt3+mkJ/jUxCWAMU5p79NaY9t/dOm1eCzq9WdNQYN
fPIj672CA5RCEHRFA1V6z9P5j5VnbexT1F4MBGzrz0Viv/MT4AvRfJXQ/882hCQV
6B7TlpeQ1bBU3Wj/hVDq71JvdyG2EOmT2pMAa2UmHAZKTA+C84gZIGq/U1mOJ+lo
5KrTvZRWjhHRJgz85JrWpEzdjQ==
-----END CERTIFICATE-----