Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1cc04bf7d73255f0350976591a6a71774f83cb25.cer
File:                     1cc04bf7d73255f0350976591a6a71774f83cb25.cer (raw, json)
Hash identifier:          w1eqt2iFkgHzsZC04m1MCbHf9cmr0a0M1XpmJe5GaGs=
Subject key identifier:   3B:81:4B:84:02:E8:B8:79:9A:C8:46:06:0F:80:76:69:BD:EB:9C:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E538E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/52dc71fa-2f84-47e6-b733-b6f9d9672136/1cc04bf7d73255f0350976591a6a71774f83cb25.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/52dc71fa-2f84-47e6-b733-b6f9d9672136/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 17:49:16 +0000
Certificate not after:    Wed 27 Mar 2024 23:09:51 +0000
Subordinate resources:    AS: 52506
                          IP: 207.248.85.0/24
                          IP: 2801:1e:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15022307 (0xe538e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 17:49:16 2023 GMT
            Not After : Mar 27 23:09:51 2024 GMT
        Subject: CN=1cc04bf7d73255f0350976591a6a71774f83cb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:f3:89:fa:02:ff:82:c3:85:6f:92:da:a0:
                    ef:f4:e9:47:fd:71:ed:6e:92:f6:f6:db:bc:0a:60:
                    8d:89:6d:2b:a3:10:d4:c1:09:16:b3:0f:60:95:d7:
                    94:e5:5b:d3:64:8c:5b:dd:93:45:37:3d:34:e8:89:
                    16:c6:d5:40:58:d1:d2:fb:dc:09:e7:09:65:4e:9a:
                    55:8f:0e:c7:42:12:30:46:bf:38:c8:89:9d:15:03:
                    a6:90:6a:26:7d:5e:89:26:ff:75:b1:69:32:02:05:
                    01:89:6b:b4:ba:a8:07:a0:e0:59:bc:58:c4:8c:5e:
                    e0:64:c5:a6:a9:4b:72:84:e1:18:17:15:54:ed:31:
                    64:8a:0f:17:a4:fd:31:b9:38:27:4e:35:57:a2:42:
                    35:20:63:b0:74:02:93:5c:2e:9e:e1:b1:0f:97:d7:
                    43:6d:3c:c3:fa:20:5a:3e:4a:19:92:8f:c7:15:bd:
                    33:c7:5f:23:b8:cc:28:6b:ab:31:9e:8d:04:26:06:
                    1b:d1:83:e6:36:b1:f9:d9:1e:75:48:48:3f:6b:31:
                    36:27:79:2e:08:a3:b1:e9:05:f4:42:bd:dc:d0:51:
                    bc:9f:f8:a9:42:95:9c:93:d2:b9:0a:dc:f6:d4:ea:
                    25:4a:e7:c5:19:66:a6:d7:e8:fb:38:50:b9:5c:91:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:4B:84:02:E8:B8:79:9A:C8:46:06:0F:80:76:69:BD:EB:9C:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52dc71fa-2f84-47e6-b733-b6f9d9672136/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52dc71fa-2f84-47e6-b733-b6f9d9672136/1cc04bf7d73255f0350976591a6a71774f83cb25.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.85.0/24
                IPv6:
                  2801:1e:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52506

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:26:a9:96:a5:01:5f:83:f9:d6:b7:05:5e:4d:e1:f6:4c:
         74:e9:70:d8:01:ba:a2:ad:5f:bd:86:23:1e:13:e7:f6:f0:71:
         da:f5:b6:04:b3:55:c3:96:22:24:2a:1b:de:e4:c0:07:50:fd:
         ad:86:73:6d:79:39:cf:6d:cf:e5:90:2a:14:0c:c2:4b:0d:a2:
         06:1e:04:f7:17:af:19:a6:55:b6:c0:2c:fb:2c:3e:45:16:a7:
         96:7f:6c:86:ef:c6:62:4b:41:06:47:e8:5a:ba:70:dc:d5:60:
         2e:bd:5c:1b:a1:c3:25:01:dd:8c:64:b2:51:e9:f3:6a:c5:78:
         b3:81:ce:c8:3c:06:5a:57:f2:24:5b:10:dd:4a:52:cf:56:4b:
         72:eb:b4:06:af:3a:ff:0d:82:25:63:cd:5d:c0:4e:9a:3f:ff:
         cc:a3:ea:f4:e2:70:2b:b9:4b:3d:f1:10:f7:65:0d:64:59:e5:
         3c:4c:f5:69:86:3a:71:84:fb:fb:d1:d2:85:9b:95:24:ff:d5:
         f4:1d:9f:b3:1b:1f:2b:f3:65:14:49:be:a2:f3:ba:04:38:b9:
         35:3e:70:24:f7:1e:c0:8a:ce:77:f6:64:aa:76:a8:69:9e:13:
         77:0a:e2:6a:d0:b7:ab:0d:55:07:3f:a5:55:10:d9:04:82:9f:
         99:99:31:09
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOU44zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMjE3NDkxNloXDTI0MDMyNzIzMDk1
MVowMzExMC8GA1UEAxMoMWNjMDRiZjdkNzMyNTVmMDM1MDk3NjU5MWE2YTcxNzc0
ZjgzY2IyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJx784n6Av+C
w4Vvktqg7/TpR/1x7W6S9vbbvApgjYltK6MQ1MEJFrMPYJXXlOVb02SMW92TRTc9
NOiJFsbVQFjR0vvcCecJZU6aVY8Ox0ISMEa/OMiJnRUDppBqJn1eiSb/dbFpMgIF
AYlrtLqoB6DgWbxYxIxe4GTFpqlLcoThGBcVVO0xZIoPF6T9Mbk4J041V6JCNSBj
sHQCk1wunuGxD5fXQ208w/ogWj5KGZKPxxW9M8dfI7jMKGurMZ6NBCYGG9GD5jax
+dkedUhIP2sxNid5LgijsekF9EK93NBRvJ/4qUKVnJPSuQrc9tTqJUrnxRlmptfo
+zhQuVyRQscCAwEAAaOCAwswggMHMB0GA1UdDgQWBBQ7gUuEAui4eZrIRgYPgHZp
veuctDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81MmRjNzFmYS0yZjg0
LTQ3ZTYtYjczMy1iNmY5ZDk2NzIxMzYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTJkYzcxZmEtMmY4NC00
N2U2LWI3MzMtYjZmOWQ5NjcyMTM2LzFjYzA0YmY3ZDczMjU1ZjAzNTA5NzY1OTFh
NmE3MTc3NGY4M2NiMjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAM/4VTAPBAIAAjAJAwcAKAEAHiAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNGjANBgkqhkiG9w0BAQsFAAOCAQEA
oAImqZalAV+D+da3BV5N4fZMdOlw2AG6oq1fvYYjHhPn9vBx2vW2BLNVw5YiJCob
3uTAB1D9rYZzbXk5z23P5ZAqFAzCSw2iBh4E9xevGaZVtsAs+yw+RRanln9shu/G
YktBBkfoWrpw3NVgLr1cG6HDJQHdjGSyUenzasV4s4HOyDwGWlfyJFsQ3UpSz1ZL
cuu0Bq86/w2CJWPNXcBOmj//zKPq9OJwK7lLPfEQ92UNZFnlPEz1aYY6cYT7+9HS
hZuVJP/V9B2fsxsfK/NlFEm+ovO6BDi5NT5wJPcewIrOd/ZkqnaoaZ4TdwriatC3
qw1VBz+lVRDZBIKfmZkxCQ==
-----END CERTIFICATE-----