Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a6fa3b6b0d498449aed7761c80c2782d287a995.cer
File:                     1a6fa3b6b0d498449aed7761c80c2782d287a995.cer (raw, json)
Hash identifier:          cSMKfY91w0IU1xMr2pd2veKQfYXDj3gnhUimDNcS68A=
Subject key identifier:   15:BB:60:2C:5F:7F:B4:9B:B9:3E:D4:96:EF:B0:92:FA:73:98:D7:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F64980
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cb54c126-8c96-4b68-b88d-92cf14ee4577/1a6fa3b6b0d498449aed7761c80c2782d287a995.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cb54c126-8c96-4b68-b88d-92cf14ee4577/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 07:43:40 +0000
Certificate not after:    Wed 21 Aug 2024 15:18:23 +0000
Subordinate resources:    IP: 2803:ef80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16140672 (0xf64980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 23 07:43:40 2023 GMT
            Not After : Aug 21 15:18:23 2024 GMT
        Subject: CN=1a6fa3b6b0d498449aed7761c80c2782d287a995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:d0:44:3e:c3:5f:ea:c2:63:28:d8:51:df:
                    73:a5:f5:9f:2b:8e:05:31:53:71:64:57:8d:11:be:
                    cc:37:39:e6:99:b8:f7:d3:a6:19:9c:c2:3c:f4:80:
                    e4:19:25:b4:1a:f1:03:c1:3f:81:50:25:69:9c:04:
                    7f:b8:f6:2c:8f:56:c1:8f:08:74:ed:b7:cd:74:4f:
                    6f:b5:0f:24:0e:95:90:12:9f:08:65:5a:e5:a6:9e:
                    df:b8:e6:9d:93:83:c8:6e:65:f4:d2:1a:6a:6d:06:
                    04:ff:e9:a6:0c:34:74:a3:bb:32:a7:59:5d:78:1e:
                    aa:1d:cb:f5:98:eb:40:16:a9:9c:73:24:e6:61:0f:
                    ee:59:39:1b:29:98:de:ee:bb:38:de:ef:d7:b7:e1:
                    e5:97:6a:b4:07:92:70:b4:67:88:3d:a2:5b:7c:1d:
                    39:bb:40:3d:89:4c:66:4b:bc:5b:79:d9:43:57:c2:
                    40:f5:64:72:a3:7b:d4:de:21:28:38:92:5b:f7:9a:
                    a6:b7:2f:46:cc:b1:7f:76:bb:a0:5d:7b:fc:cd:80:
                    66:15:28:b4:5a:52:07:e9:b3:bb:cd:bc:80:8c:0d:
                    db:fa:a1:6b:46:d9:45:f5:5f:22:6a:06:c5:d0:c1:
                    95:08:4c:a2:4c:aa:04:f9:7c:d8:a9:9e:72:08:93:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:60:2C:5F:7F:B4:9B:B9:3E:D4:96:EF:B0:92:FA:73:98:D7:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cb54c126-8c96-4b68-b88d-92cf14ee4577/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cb54c126-8c96-4b68-b88d-92cf14ee4577/1a6fa3b6b0d498449aed7761c80c2782d287a995.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef80::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:93:f0:2d:1d:ce:47:4a:86:10:9e:59:3d:31:a0:47:50:
         8e:de:01:70:fd:f8:32:30:3f:55:b2:a8:07:c3:13:f8:b8:1e:
         9a:7e:91:df:a6:04:fa:fd:24:29:21:d8:83:58:86:b6:f7:c3:
         b8:52:20:7f:38:2a:92:e7:cd:20:f9:eb:d6:09:6d:fd:38:00:
         a1:91:65:99:74:c6:9a:bc:67:43:e4:0f:d2:38:c5:5d:fa:5d:
         29:d8:10:d0:89:e0:b6:b3:da:f4:87:59:1c:0c:91:e2:7e:41:
         1f:06:28:25:ff:06:41:9a:8f:ab:26:d0:44:49:08:80:c4:88:
         91:c7:08:a9:2b:06:fa:03:1d:c1:a6:c3:f4:be:6c:01:22:50:
         81:f9:c8:6b:65:ed:a1:9e:4c:58:e4:98:29:14:40:99:18:03:
         06:ca:00:f8:d1:2e:bb:1e:6b:e2:cc:74:2e:2e:d7:9f:14:8d:
         74:58:f5:49:4c:17:8d:f2:b5:af:f0:d4:b3:44:4e:f8:36:fc:
         d1:38:7a:ed:4f:72:e4:c5:40:fa:76:d8:45:37:5e:bc:65:98:
         67:c5:88:5b:51:34:08:2a:9a:a1:58:65:73:6a:27:da:9e:56:
         39:c4:9c:13:94:00:c9:c5:b6:ba:8c:36:9a:b1:eb:1d:43:25:
         c6:0a:85:45
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIEAPZJgDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyMzA3NDM0MFoXDTI0MDgyMTE1MTgy
M1owMzExMC8GA1UEAxMoMWE2ZmEzYjZiMGQ0OTg0NDlhZWQ3NzYxYzgwYzI3ODJk
Mjg3YTk5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJhL0EQ+w1/q
wmMo2FHfc6X1nyuOBTFTcWRXjRG+zDc55pm499OmGZzCPPSA5BkltBrxA8E/gVAl
aZwEf7j2LI9WwY8IdO23zXRPb7UPJA6VkBKfCGVa5aae37jmnZODyG5l9NIaam0G
BP/ppgw0dKO7MqdZXXgeqh3L9ZjrQBapnHMk5mEP7lk5GymY3u67ON7v17fh5Zdq
tAeScLRniD2iW3wdObtAPYlMZku8W3nZQ1fCQPVkcqN71N4hKDiSW/eaprcvRsyx
f3a7oF17/M2AZhUotFpSB+mzu828gIwN2/qha0bZRfVfImoGxdDBlQhMokyqBPl8
2KmecgiTuKUCAwEAAaOCAt8wggLbMB0GA1UdDgQWBBQVu2AsX3+0m7k+1JbvsJL6
c5jXsTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYjU0YzEyNi04Yzk2
LTRiNjgtYjg4ZC05MmNmMTRlZTQ1NzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2I1NGMxMjYtOGM5Ni00
YjY4LWI4OGQtOTJjZjE0ZWU0NTc3LzFhNmZhM2I2YjBkNDk4NDQ5YWVkNzc2MWM4
MGMyNzgyZDI4N2E5OTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD74AwDQYJKoZIhvcNAQELBQAD
ggEBAJixk/AtHc5HSoYQnlk9MaBHUI7eAXD9+DIwP1WyqAfDE/i4Hpp+kd+mBPr9
JCkh2INYhrb3w7hSIH84KpLnzSD569YJbf04AKGRZZl0xpq8Z0PkD9I4xV36XSnY
ENCJ4Laz2vSHWRwMkeJ+QR8GKCX/BkGaj6sm0ERJCIDEiJHHCKkrBvoDHcGmw/S+
bAEiUIH5yGtl7aGeTFjkmCkUQJkYAwbKAPjRLrsea+LMdC4u158UjXRY9UlMF43y
ta/w1LNETvg2/NE4eu1PcuTFQPp22EU3XrxlmGfFiFtRNAgqmqFYZXNqJ9qeVjnE
nBOUAMnFtrqMNpqx6x1DJcYKhUU=
-----END CERTIFICATE-----