Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/251efd98544a5927c0ba00ebcf2245f0eb0edd69.cer
File:                     251efd98544a5927c0ba00ebcf2245f0eb0edd69.cer (raw, json)
Hash identifier:          PDO5nQ4NIehgZJOEGiQavjt3/x/G83ae75bj/xcUrag=
Subject key identifier:   F9:8E:66:F4:5F:BA:AC:A5:BA:98:7D:16:09:40:8F:22:FB:B4:06:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108DABE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9f2214c5-4ab9-45ad-911d-7e3c9ec921a3/251efd98544a5927c0ba00ebcf2245f0eb0edd69.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9f2214c5-4ab9-45ad-911d-7e3c9ec921a3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 15:47:26 +0000
Certificate not after:    Tue 10 Jun 2025 15:00:00 +0000
Subordinate resources:    AS: 17249

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17357502 (0x108dabe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 15:47:26 2024 GMT
            Not After : Jun 10 15:00:00 2025 GMT
        Subject: CN=251efd98544a5927c0ba00ebcf2245f0eb0edd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:e4:1e:fe:22:ba:f8:d0:07:d3:ba:7d:e6:
                    41:9f:2b:fb:5e:cc:ec:61:42:d2:6b:cc:c0:6b:b7:
                    06:89:dd:9f:5c:c0:8f:18:ef:41:67:ed:91:06:c3:
                    e5:da:86:7a:37:49:fe:ba:38:fa:ce:88:ed:78:e7:
                    78:84:dd:5f:45:26:d5:5d:10:1a:e6:de:c9:c7:33:
                    b1:07:df:7b:5e:89:34:4c:a4:9e:bb:9d:1e:5f:cc:
                    cd:7b:fc:59:b0:7f:b1:3b:5b:61:34:42:2f:3a:88:
                    4e:9a:80:ed:b7:55:f4:ad:a3:06:22:bc:1b:7b:3d:
                    79:b5:f9:e3:e4:00:2e:0a:a8:0b:bb:1b:ac:77:b7:
                    41:7e:24:69:7a:dd:cd:f8:82:98:ed:81:29:f0:9c:
                    c1:2b:73:de:50:c6:4b:f9:46:aa:c6:95:c6:84:af:
                    18:04:4d:b6:1b:04:23:a7:db:2a:1a:49:e4:e1:f9:
                    07:4d:73:87:35:a4:34:75:fb:b6:16:ea:3b:b7:bc:
                    8e:cd:05:55:f5:6d:2a:ca:31:47:e9:6a:cc:85:a5:
                    10:ce:26:19:f7:fe:a1:1b:27:8b:e8:65:70:a7:7f:
                    a7:0b:ac:b0:6c:aa:da:69:1b:1e:92:d8:57:20:94:
                    72:7f:16:8c:8a:f6:98:23:20:af:06:53:8e:3e:1c:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:66:F4:5F:BA:AC:A5:BA:98:7D:16:09:40:8F:22:FB:B4:06:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9f2214c5-4ab9-45ad-911d-7e3c9ec921a3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9f2214c5-4ab9-45ad-911d-7e3c9ec921a3/251efd98544a5927c0ba00ebcf2245f0eb0edd69.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17249

    Signature Algorithm: sha256WithRSAEncryption
         c5:1e:4d:64:b2:6d:23:fe:cb:f8:7f:a3:d8:b1:48:1f:fb:7f:
         7f:38:b9:75:b4:52:76:89:8a:50:b9:42:81:69:a0:cf:ba:63:
         d5:55:30:6c:98:0a:5a:f8:01:72:0b:fb:03:b5:d8:3d:00:75:
         f6:24:d5:2f:e3:34:89:13:e8:2c:75:d1:1b:78:58:a3:8d:c5:
         70:df:b9:6f:0b:b8:d2:55:db:4c:c2:f4:10:98:00:e2:67:14:
         7c:bb:af:a4:b4:d4:32:73:2b:b0:6a:12:59:c7:9f:5c:7f:61:
         31:cf:31:1b:0e:50:4b:fa:ed:25:df:e2:9e:f0:43:b7:a2:fd:
         f2:0b:ca:d4:c5:a1:ec:7c:6b:f0:24:41:f3:e9:d6:16:7b:22:
         4e:43:cc:e2:7e:d3:15:3c:0c:f1:30:a9:3d:b1:22:9b:db:c2:
         79:64:ea:48:e3:2d:5c:21:68:03:8c:48:1a:50:30:30:df:2b:
         36:6c:2d:0e:50:94:94:0a:b6:98:7b:4c:82:6f:4b:55:b7:70:
         1c:35:eb:37:6e:6e:ed:9e:64:49:50:fc:a6:78:ac:6a:34:37:
         51:d7:1c:69:e2:ae:0a:20:42:2a:66:6f:dd:cf:38:a6:db:e9:
         b5:3d:15:b3:dd:e6:76:da:6e:53:95:57:cf:15:7c:a8:6d:ad:
         47:f4:7c:2b
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIEAQjavjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEzMDE1NDcyNloXDTI1MDYxMDE1MDAw
MFowMzExMC8GA1UEAxMoMjUxZWZkOTg1NDRhNTkyN2MwYmEwMGViY2YyMjQ1ZjBl
YjBlZGQ2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKO+5B7+Irr4
0AfTun3mQZ8r+17M7GFC0mvMwGu3Bondn1zAjxjvQWftkQbD5dqGejdJ/ro4+s6I
7XjneITdX0Um1V0QGubeycczsQffe16JNEyknrudHl/MzXv8WbB/sTtbYTRCLzqI
TpqA7bdV9K2jBiK8G3s9ebX54+QALgqoC7sbrHe3QX4kaXrdzfiCmO2BKfCcwStz
3lDGS/lGqsaVxoSvGARNthsEI6fbKhpJ5OH5B01zhzWkNHX7thbqO7e8js0FVfVt
KsoxR+lqzIWlEM4mGff+oRsni+hlcKd/pwussGyq2mkbHpLYVyCUcn8WjIr2mCMg
rwZTjj4cKx8CAwEAAaOCAtgwggLUMB0GA1UdDgQWBBT5jmb0X7qspbqYfRYJQI8i
+7QGoTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZjIyMTRjNS00YWI5
LTQ1YWQtOTExZC03ZTNjOWVjOTIxYTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWYyMjE0YzUtNGFiOS00
NWFkLTkxMWQtN2UzYzllYzkyMWEzLzI1MWVmZDk4NTQ0YTU5MjdjMGJhMDBlYmNm
MjI0NWYwZWIwZWRkNjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJDYTANBgkqhkiG9w0BAQsFAAOCAQEAxR5N
ZLJtI/7L+H+j2LFIH/t/fzi5dbRSdomKULlCgWmgz7pj1VUwbJgKWvgBcgv7A7XY
PQB19iTVL+M0iRPoLHXRG3hYo43FcN+5bwu40lXbTML0EJgA4mcUfLuvpLTUMnMr
sGoSWcefXH9hMc8xGw5QS/rtJd/invBDt6L98gvK1MWh7Hxr8CRB8+nWFnsiTkPM
4n7TFTwM8TCpPbEim9vCeWTqSOMtXCFoA4xIGlAwMN8rNmwtDlCUlAq2mHtMgm9L
VbdwHDXrN25u7Z5kSVD8pnisajQ3UdccaeKuCiBCKmZv3c84ptvptT0Vs93mdtpu
U5VXzxV8qG2tR/R8Kw==
-----END CERTIFICATE-----