Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a8ebba9982db1a75d89d51615332e4f6141837b.cer
File:                     1a8ebba9982db1a75d89d51615332e4f6141837b.cer (raw, json)
Hash identifier:          QcU1hB4ZMgHWb/xP60odazyMetaATAhOGkvYitDmRP0=
Subject key identifier:   5D:1E:71:69:B6:65:35:D2:3B:E3:AA:CD:90:1A:88:85:89:90:98:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E81721
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f26b6554-6d46-4fef-bf30-f98d900d08a6/1a8ebba9982db1a75d89d51615332e4f6141837b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f26b6554-6d46-4fef-bf30-f98d900d08a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 15:45:57 +0000
Certificate not after:    Tue 14 May 2024 17:47:14 +0000
Subordinate resources:    IP: 170.254.48.0/22
                          IP: 2801:17:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15210273 (0xe81721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 15:45:57 2023 GMT
            Not After : May 14 17:47:14 2024 GMT
        Subject: CN=1a8ebba9982db1a75d89d51615332e4f6141837b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:8a:51:65:f1:49:82:85:4a:76:59:93:ea:
                    ef:0f:4b:e1:b1:7c:dc:e1:b2:8a:72:89:5f:f2:1c:
                    49:e9:16:7d:08:37:10:58:a7:36:e3:f6:2e:9f:90:
                    5f:eb:80:e1:ba:4e:92:96:b8:22:0c:a7:60:88:fe:
                    39:30:f3:90:49:52:29:50:24:7a:fc:b9:cc:7d:ff:
                    ff:cb:90:87:8e:cb:27:01:78:a7:78:18:2f:a2:0d:
                    c3:6b:53:d1:d2:43:8c:26:65:f7:dd:a1:16:5b:c8:
                    36:ac:a2:42:d9:53:d0:37:e7:59:33:ed:b7:e7:4b:
                    9a:ed:1f:cf:bb:dc:51:a0:82:8a:c5:00:93:9d:ee:
                    61:4d:07:6e:77:c0:0d:5c:68:95:4d:cb:99:46:73:
                    9e:db:00:c9:b0:c7:89:47:62:2a:ef:91:1a:59:10:
                    00:91:e6:b2:4c:59:6f:01:43:db:0b:5b:cc:2e:80:
                    64:8e:ff:45:ef:97:b2:71:76:15:d1:83:aa:1b:aa:
                    ec:99:25:4d:47:8e:3a:30:f5:b3:44:f2:06:83:71:
                    06:06:a2:6e:b3:ba:f3:8d:02:b2:3d:cb:d6:b5:80:
                    6a:fb:86:04:d5:7e:33:a4:18:1b:63:52:33:a9:c9:
                    77:a9:a1:73:9e:ef:78:d1:b1:ee:0a:76:28:1a:04:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1E:71:69:B6:65:35:D2:3B:E3:AA:CD:90:1A:88:85:89:90:98:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f26b6554-6d46-4fef-bf30-f98d900d08a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f26b6554-6d46-4fef-bf30-f98d900d08a6/1a8ebba9982db1a75d89d51615332e4f6141837b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.48.0/22
                IPv6:
                  2801:17:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:7c:32:53:c4:f8:98:66:5d:55:07:11:8f:78:a4:6d:7b:
         75:b8:5b:94:d4:49:55:d7:20:08:1c:98:f3:b3:d9:62:88:92:
         3f:6f:9d:48:6e:5c:7a:47:32:14:18:5f:84:f5:f6:69:6c:5a:
         1f:4c:88:5d:5d:59:81:58:da:18:69:b4:9e:d2:3a:9f:07:fe:
         45:aa:12:fe:d7:aa:e9:46:2b:fd:d9:d9:d3:f5:c3:45:00:e3:
         f6:38:2d:86:60:d2:15:c8:6e:e1:31:d0:70:ca:48:62:84:c5:
         03:a5:ab:c9:76:be:68:f2:9b:21:35:5c:07:1d:16:a1:3b:fc:
         18:fc:e7:4a:c3:ad:78:23:06:ad:51:4d:98:d0:29:c1:84:02:
         ca:34:f4:6d:8b:bb:42:1d:bd:49:a0:d3:ed:3a:2d:1b:01:ee:
         2d:0a:36:02:eb:6b:64:43:cb:32:af:72:f0:b8:39:b1:f5:91:
         8b:42:39:bd:4b:47:20:46:48:81:03:4c:94:4b:92:36:ab:05:
         32:74:6b:a9:f8:6b:90:71:f6:db:d4:0e:b8:f7:6d:48:4b:09:
         13:53:4b:04:94:3a:af:86:74:7f:c5:90:e8:ef:a8:f7:2a:4b:
         33:bc:14:02:99:69:5e:bb:7e:7e:ed:79:da:02:f1:24:26:01:
         e9:b3:06:71
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIEAOgXITANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwMjE1NDU1N1oXDTI0MDUxNDE3NDcx
NFowMzExMC8GA1UEAxMoMWE4ZWJiYTk5ODJkYjFhNzVkODlkNTE2MTUzMzJlNGY2
MTQxODM3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIrilFl8UmC
hUp2WZPq7w9L4bF83OGyinKJX/IcSekWfQg3EFinNuP2Lp+QX+uA4bpOkpa4Igyn
YIj+OTDzkElSKVAkevy5zH3//8uQh47LJwF4p3gYL6INw2tT0dJDjCZl992hFlvI
NqyiQtlT0DfnWTPtt+dLmu0fz7vcUaCCisUAk53uYU0HbnfADVxolU3LmUZzntsA
ybDHiUdiKu+RGlkQAJHmskxZbwFD2wtbzC6AZI7/Re+XsnF2FdGDqhuq7JklTUeO
OjD1s0TyBoNxBgaibrO6840Csj3L1rWAavuGBNV+M6QYG2NSM6nJd6mhc57veNGx
7gp2KBoEoqsCAwEAAaOCAu8wggLrMB0GA1UdDgQWBBRdHnFptmU10jvjqs2QGoiF
iZCYxjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMjZiNjU1NC02ZDQ2
LTRmZWYtYmYzMC1mOThkOTAwZDA4YTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjI2YjY1NTQtNmQ0Ni00
ZmVmLWJmMzAtZjk4ZDkwMGQwOGE2LzFhOGViYmE5OTgyZGIxYTc1ZDg5ZDUxNjE1
MzMyZTRmNjE0MTgzN2IubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAqr+MDAPBAIAAjAJAwcAKAEAF5AA
MA0GCSqGSIb3DQEBCwUAA4IBAQBdlXwyU8T4mGZdVQcRj3ikbXt1uFuU1ElV1yAI
HJjzs9liiJI/b51Iblx6RzIUGF+E9fZpbFofTIhdXVmBWNoYabSe0jqfB/5FqhL+
16rpRiv92dnT9cNFAOP2OC2GYNIVyG7hMdBwykhihMUDpavJdr5o8pshNVwHHRah
O/wY/OdKw614IwatUU2Y0CnBhALKNPRti7tCHb1JoNPtOi0bAe4tCjYC62tkQ8sy
r3LwuDmx9ZGLQjm9S0cgRkiBA0yUS5I2qwUydGup+GuQcfbb1A64921ISwkTU0sE
lDqvhnR/xZDo76j3KkszvBQCmWleu35+7XnaAvEkJgHpswZx
-----END CERTIFICATE-----