Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23133d8873a6b86fbe8399cfb6e6b62c2be023cd.cer
File:                     23133d8873a6b86fbe8399cfb6e6b62c2be023cd.cer (raw, json)
Hash identifier:          XKJpPXrr67Bb6D1XIo9BH5anSxSNgALHou3gCpuk16Y=
Subject key identifier:   9C:00:33:16:6C:C0:70:09:12:37:B0:6F:EA:A3:B4:48:00:14:A7:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E87297
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4293a3b4-7c9e-4823-a9bf-ce14b5a06ae6/23133d8873a6b86fbe8399cfb6e6b62c2be023cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4293a3b4-7c9e-4823-a9bf-ce14b5a06ae6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 18:56:32 +0000
Certificate not after:    Thu 04 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 52396
                          IP: 186.179.80.0/20
                          IP: 2803:8e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15233687 (0xe87297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 18:56:32 2023 GMT
            Not After : Apr  4 06:00:00 2024 GMT
        Subject: CN=23133d8873a6b86fbe8399cfb6e6b62c2be023cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:73:2d:77:97:68:fd:b8:ed:6d:11:ba:75:
                    a3:ca:91:0e:42:60:70:8c:96:a6:c9:e4:d7:14:9f:
                    df:b2:89:49:1d:28:08:fc:19:49:eb:ba:95:60:dc:
                    d4:81:59:4c:6e:18:38:21:ee:b4:54:e1:14:fe:bf:
                    c0:97:ce:04:a3:c2:f3:ed:d9:dd:24:41:60:c0:15:
                    04:c7:8c:ef:c6:a0:72:5f:4c:70:78:65:45:df:ea:
                    6b:e2:ed:75:59:1c:93:7e:c5:6b:ba:36:bf:a3:b1:
                    5c:71:a0:f8:d0:78:ee:31:90:c6:37:75:5e:28:6b:
                    62:09:58:98:2a:18:c0:a5:47:b8:8a:8c:ff:55:db:
                    d2:08:34:8b:10:cb:02:09:77:73:89:89:f8:c0:1c:
                    7f:45:49:ee:72:df:82:f4:cb:2c:51:bb:16:f3:25:
                    5f:20:02:39:47:9b:de:49:14:8f:83:18:7d:d3:4d:
                    9d:e5:65:44:6f:71:7f:af:84:b4:14:62:6f:ca:60:
                    c1:ab:b1:54:72:0b:2f:13:56:f9:9b:f3:6e:ac:e5:
                    bf:cb:32:2f:52:18:be:15:fc:f0:20:a6:41:13:49:
                    13:fb:74:c6:73:20:fc:f3:e6:7c:9b:a1:5d:9e:ff:
                    95:b7:73:4f:f7:4e:65:d3:2e:7e:e4:f8:6f:f4:32:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:00:33:16:6C:C0:70:09:12:37:B0:6F:EA:A3:B4:48:00:14:A7:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4293a3b4-7c9e-4823-a9bf-ce14b5a06ae6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4293a3b4-7c9e-4823-a9bf-ce14b5a06ae6/23133d8873a6b86fbe8399cfb6e6b62c2be023cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.80.0/20
                IPv6:
                  2803:8e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52396

    Signature Algorithm: sha256WithRSAEncryption
         7b:17:68:d5:20:24:f8:13:e6:70:40:e8:fa:3d:e1:00:97:ce:
         68:a3:8e:18:58:f5:89:b8:a5:1d:e5:fd:7a:00:a7:d7:05:03:
         ff:af:1d:93:fd:6f:69:03:93:5c:b8:db:18:34:63:83:15:8d:
         de:ef:17:8b:92:61:d9:6c:d1:f9:ae:82:20:2c:30:14:0d:1c:
         b5:91:0c:f1:fc:f2:45:d5:98:fc:ae:6b:39:69:c7:97:c7:1a:
         49:29:d6:af:b8:88:0a:3a:2f:3f:83:fb:94:59:5c:53:3a:42:
         5d:46:d4:3d:b1:19:2f:55:79:90:d2:dd:4a:a3:f4:1e:69:04:
         a0:57:a5:93:dd:6b:6a:f8:6d:91:88:99:f1:1d:70:43:74:30:
         bd:ae:2e:35:e9:81:ba:a5:7d:dc:95:44:9f:f4:4b:ce:e5:9a:
         3b:80:83:e7:a3:19:9c:c7:55:64:1b:7b:87:bf:7c:09:bb:33:
         eb:64:51:99:27:76:56:88:65:b1:8c:5d:56:19:a7:10:8e:86:
         d3:e8:c2:5f:e0:54:3a:28:f4:a4:fa:6c:cc:a3:ae:3f:3a:d9:
         bb:98:d2:49:5a:a2:d9:b4:28:f8:94:13:5e:ee:ab:2d:59:17:
         0a:94:94:8e:cb:3c:02:71:14:61:8c:6d:ca:0d:a0:50:30:58:
         7f:12:9e:e2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOhylzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwNDE4NTYzMloXDTI0MDQwNDA2MDAw
MFowMzExMC8GA1UEAxMoMjMxMzNkODg3M2E2Yjg2ZmJlODM5OWNmYjZlNmI2MmMy
YmUwMjNjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Pcy13l2j9
uO1tEbp1o8qRDkJgcIyWpsnk1xSf37KJSR0oCPwZSeu6lWDc1IFZTG4YOCHutFTh
FP6/wJfOBKPC8+3Z3SRBYMAVBMeM78agcl9McHhlRd/qa+LtdVkck37Fa7o2v6Ox
XHGg+NB47jGQxjd1XihrYglYmCoYwKVHuIqM/1Xb0gg0ixDLAgl3c4mJ+MAcf0VJ
7nLfgvTLLFG7FvMlXyACOUeb3kkUj4MYfdNNneVlRG9xf6+EtBRib8pgwauxVHIL
LxNW+Zvzbqzlv8syL1IYvhX88CCmQRNJE/t0xnMg/PPmfJuhXZ7/lbdzT/dOZdMu
fuT4b/QyNvsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBScADMWbMBwCRI3sG/qo7RI
ABSn6TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MjkzYTNiNC03Yzll
LTQ4MjMtYTliZi1jZTE0YjVhMDZhZTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDI5M2EzYjQtN2M5ZS00
ODIzLWE5YmYtY2UxNGI1YTA2YWU2LzIzMTMzZDg4NzNhNmI4NmZiZTgzOTljZmI2
ZTZiNjJjMmJlMDIzY2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLqzUDANBAIAAjAHAwUAKAOOADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzKwwDQYJKoZIhvcNAQELBQADggEBAHsX
aNUgJPgT5nBA6Po94QCXzmijjhhY9Ym4pR3l/XoAp9cFA/+vHZP9b2kDk1y42xg0
Y4MVjd7vF4uSYdls0fmugiAsMBQNHLWRDPH88kXVmPyuazlpx5fHGkkp1q+4iAo6
Lz+D+5RZXFM6Ql1G1D2xGS9VeZDS3Uqj9B5pBKBXpZPda2r4bZGImfEdcEN0ML2u
LjXpgbqlfdyVRJ/0S87lmjuAg+ejGZzHVWQbe4e/fAm7M+tkUZkndlaIZbGMXVYZ
pxCOhtPowl/gVDoo9KT6bMyjrj862buY0klaotm0KPiUE17uqy1ZFwqUlI7LPAJx
FGGMbcoNoFAwWH8SnuI=
-----END CERTIFICATE-----