Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3139585eccedda9aff96569dabd3367a0849085f.cer
File:                     3139585eccedda9aff96569dabd3367a0849085f.cer (raw, json)
Hash identifier:          XtfQA3nZt+NY/lhsTclt8PR7KIOwEuR0z2sgpVeJcJg=
Subject key identifier:   8E:39:17:58:E2:3E:E9:0F:E7:C0:B1:7E:15:A8:D5:EA:DA:9E:09:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3AF12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eac8afa1-0e59-447a-b1af-c44a0e97e475/3139585eccedda9aff96569dabd3367a0849085f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eac8afa1-0e59-447a-b1af-c44a0e97e475/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 20:39:04 +0000
Certificate not after:    Tue 21 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 10795

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14921490 (0xe3af12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 20:39:04 2023 GMT
            Not After : Jan 21 14:00:00 2025 GMT
        Subject: CN=3139585eccedda9aff96569dabd3367a0849085f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:de:03:fb:43:d6:77:26:2c:3b:66:d2:ed:
                    d5:22:4d:cf:86:a5:a2:1e:9e:9e:39:ce:d5:b8:69:
                    7a:25:2d:d7:e6:b8:ac:45:4d:d7:00:6e:18:44:23:
                    ab:56:1f:26:90:6a:fe:c1:43:c8:41:03:7c:5b:6e:
                    80:b0:5b:a9:01:c5:d4:3f:50:5c:e6:ff:10:44:b4:
                    00:55:b9:e0:de:ee:2e:2d:38:ac:3d:a0:d5:d7:b6:
                    e3:da:45:fa:80:27:28:56:2b:b0:b9:46:42:7d:cd:
                    59:f0:8c:96:7a:f5:b9:05:29:a9:d6:73:09:9b:da:
                    b7:ae:82:36:fb:b3:9b:0f:cc:1b:50:04:4e:53:a9:
                    3d:da:ee:30:1a:71:27:d4:d2:2c:11:31:8b:6f:04:
                    e8:02:74:06:6d:87:11:ba:29:58:1c:df:a9:74:08:
                    dd:66:92:ea:bb:02:c1:63:92:3f:1f:96:2f:96:49:
                    e7:43:b0:4c:06:c8:43:7e:48:66:d3:af:91:78:51:
                    3f:c5:82:16:16:bf:72:fa:e5:78:58:7c:58:87:6e:
                    40:98:ad:0e:06:ab:ae:06:63:a6:52:1c:e7:b7:a4:
                    0f:26:8e:52:4a:fc:e1:ff:a2:e6:6e:1d:8f:75:aa:
                    57:a8:8e:66:d2:98:33:6f:9a:ac:c0:c9:fb:c5:93:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:17:58:E2:3E:E9:0F:E7:C0:B1:7E:15:A8:D5:EA:DA:9E:09:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eac8afa1-0e59-447a-b1af-c44a0e97e475/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eac8afa1-0e59-447a-b1af-c44a0e97e475/3139585eccedda9aff96569dabd3367a0849085f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10795

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:16:5c:66:83:2a:89:68:4c:fc:66:4c:21:be:5d:ad:65:
         a4:10:7b:d9:ae:5a:00:bf:bd:57:5e:06:09:e9:2a:4c:44:7b:
         80:db:5f:5f:84:77:ae:f8:ad:73:c9:f5:ce:3d:71:04:3c:20:
         b7:99:a1:1d:b1:1e:29:02:bb:1b:d7:18:05:2a:cd:0b:54:80:
         7d:22:84:8b:8c:e6:64:38:44:38:1a:f4:10:5b:27:f5:d9:d8:
         44:e5:b4:1c:04:9b:f3:1f:72:d3:56:7d:6e:34:f6:19:70:be:
         68:21:07:a2:95:f2:31:e6:c6:35:da:37:ef:ec:a1:a1:4f:89:
         00:52:fe:6d:36:3a:b1:42:a8:83:49:a8:f1:7a:ec:2d:ce:c9:
         cd:fc:a4:48:33:03:52:42:d6:69:53:0c:c5:ca:85:25:c2:63:
         87:26:fc:6c:2f:7e:a1:c1:bc:10:69:9f:0b:87:a4:6d:42:85:
         e4:3c:c8:2e:e3:8a:ad:a5:d4:15:8b:24:47:c0:63:91:6e:9b:
         27:52:92:b3:9e:c7:1d:47:bf:7d:be:91:fb:45:40:19:5e:59:
         2d:b5:5a:48:ea:83:89:b0:94:1a:26:d5:46:7f:35:e2:08:31:
         be:2f:12:93:bc:df:7d:27:25:de:ce:9a:43:9c:e7:a4:74:a1:
         34:71:1c:55
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIEAOOvEjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwNDIwMzkwNFoXDTI1MDEyMTE0MDAw
MFowMzExMC8GA1UEAxMoMzEzOTU4NWVjY2VkZGE5YWZmOTY1NjlkYWJkMzM2N2Ew
ODQ5MDg1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOtL3gP7Q9Z3
Jiw7ZtLt1SJNz4aloh6enjnO1bhpeiUt1+a4rEVN1wBuGEQjq1YfJpBq/sFDyEED
fFtugLBbqQHF1D9QXOb/EES0AFW54N7uLi04rD2g1de249pF+oAnKFYrsLlGQn3N
WfCMlnr1uQUpqdZzCZvat66CNvuzmw/MG1AETlOpPdruMBpxJ9TSLBExi28E6AJ0
Bm2HEbopWBzfqXQI3WaS6rsCwWOSPx+WL5ZJ50OwTAbIQ35IZtOvkXhRP8WCFha/
cvrleFh8WIduQJitDgarrgZjplIc57ekDyaOUkr84f+i5m4dj3WqV6iOZtKYM2+a
rMDJ+8WT52cCAwEAAaOCAtgwggLUMB0GA1UdDgQWBBSOORdY4j7pD+fAsX4VqNXq
2p4J1zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYWM4YWZhMS0wZTU5
LTQ0N2EtYjFhZi1jNDRhMGU5N2U0NzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWFjOGFmYTEtMGU1OS00
NDdhLWIxYWYtYzQ0YTBlOTdlNDc1LzMxMzk1ODVlY2NlZGRhOWFmZjk2NTY5ZGFi
ZDMzNjdhMDg0OTA4NWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgIqKzANBgkqhkiG9w0BAQsFAAOCAQEAC6oW
XGaDKoloTPxmTCG+Xa1lpBB72a5aAL+9V14GCekqTER7gNtfX4R3rvitc8n1zj1x
BDwgt5mhHbEeKQK7G9cYBSrNC1SAfSKEi4zmZDhEOBr0EFsn9dnYROW0HASb8x9y
01Z9bjT2GXC+aCEHopXyMebGNdo37+yhoU+JAFL+bTY6sUKog0mo8XrsLc7Jzfyk
SDMDUkLWaVMMxcqFJcJjhyb8bC9+ocG8EGmfC4ekbUKF5DzILuOKraXUFYskR8Bj
kW6bJ1KSs57HHUe/fb6R+0VAGV5ZLbVaSOqDibCUGibVRn814ggxvi8Sk7zffScl
3s6aQ5znpHShNHEcVQ==
-----END CERTIFICATE-----