Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/319e12ff78d1a18d4ed510d50124459e5d9bc7e3.cer
File:                     319e12ff78d1a18d4ed510d50124459e5d9bc7e3.cer (raw, json)
Hash identifier:          4TEihXdfPi3Xq1+y3lEfjZ1Z0AgWy2LJlczC9ukU3DY=
Subject key identifier:   DA:C4:CA:0C:8F:62:67:57:EC:FB:4E:F9:1E:FF:8F:3D:FF:D5:2C:38
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA48C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/589c5b44-4d83-4623-9194-713132e5ddbd/319e12ff78d1a18d4ed510d50124459e5d9bc7e3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/589c5b44-4d83-4623-9194-713132e5ddbd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 21:07:04 +0000
Certificate not after:    Thu 23 Jan 2025 17:33:32 +0000
Subordinate resources:    AS: 270140
                          IP: 179.0.100.0/22
                          IP: 2806:3d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15354053 (0xea48c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 21:07:04 2023 GMT
            Not After : Jan 23 17:33:32 2025 GMT
        Subject: CN=319e12ff78d1a18d4ed510d50124459e5d9bc7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:21:e8:48:b2:a9:0f:99:59:64:aa:cb:1d:
                    7b:68:f2:6c:3a:71:83:d2:e6:ff:05:c6:9c:70:6e:
                    36:4c:f1:63:25:a8:e0:19:5e:18:ba:c1:cb:45:fa:
                    6f:eb:05:9a:de:dc:37:b9:ec:27:59:40:a4:7a:fa:
                    1a:13:ef:1a:d9:e6:80:5d:20:dd:59:47:3f:f8:e8:
                    a6:95:17:0f:82:81:2e:4e:73:d8:af:e8:9e:31:12:
                    ba:78:27:d9:4d:02:7a:dd:24:ce:3f:86:45:8a:30:
                    99:06:b7:a6:ef:3d:20:c7:d1:7d:bf:2a:be:aa:dd:
                    6f:e3:0d:d5:4b:33:15:ec:61:16:8a:9d:2c:48:8d:
                    9a:75:9f:59:86:29:75:eb:b4:bc:b5:bf:80:f6:f0:
                    3a:70:5a:48:f1:88:48:d1:e9:73:37:f7:6a:b1:09:
                    34:b5:18:3c:4a:a4:1c:fe:e2:85:b0:fd:36:16:3e:
                    c7:b9:f5:6e:d2:90:04:c3:f1:2d:63:bd:e2:7b:e7:
                    af:62:b1:d1:97:2a:75:fa:e8:5c:e2:53:43:51:ef:
                    41:a2:d2:99:3d:ab:da:aa:7c:1d:2f:2b:25:04:85:
                    3a:3c:f0:a9:7d:9d:88:a4:fa:cb:9b:a1:1c:8d:73:
                    5f:15:ec:62:02:f8:dc:da:b8:e0:b8:88:97:aa:cb:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:CA:0C:8F:62:67:57:EC:FB:4E:F9:1E:FF:8F:3D:FF:D5:2C:38
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/589c5b44-4d83-4623-9194-713132e5ddbd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/589c5b44-4d83-4623-9194-713132e5ddbd/319e12ff78d1a18d4ed510d50124459e5d9bc7e3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.100.0/22
                IPv6:
                  2806:3d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270140

    Signature Algorithm: sha256WithRSAEncryption
         93:59:1c:0f:4e:e7:73:df:3e:52:4a:95:11:fc:61:c3:df:c9:
         7f:20:12:2a:12:80:29:b7:53:98:3f:31:d6:55:1f:ec:99:bd:
         ae:42:9a:9f:58:28:bb:fa:13:83:36:1b:8d:29:5e:ca:a4:ec:
         4b:b4:77:db:dd:56:9f:e6:2e:1e:b9:69:24:37:62:a8:b9:f5:
         df:97:30:54:28:c4:ad:47:ee:7d:8b:75:ba:a8:0e:e2:25:98:
         15:a7:01:14:06:36:30:4d:81:b0:cb:98:71:0f:39:32:fc:b7:
         22:1e:42:23:f2:9f:ee:69:19:a2:4d:f9:fe:ab:ce:77:aa:1a:
         3b:e4:9c:ab:ba:27:fe:66:31:d1:9e:26:8a:86:2b:d2:7e:f5:
         6a:50:9f:ce:68:8d:1e:ba:43:04:fe:96:2a:3f:89:da:31:36:
         c5:46:2a:89:6b:16:e2:e5:52:e6:95:69:9f:fe:9e:83:7e:e7:
         2a:3b:8c:ae:f4:cd:58:a0:c0:77:21:ed:df:96:d8:29:8a:32:
         84:76:4b:45:bd:ed:f8:25:b2:58:c6:bf:8b:48:10:58:3d:cf:
         45:53:20:cf:a2:3e:dd:ed:f9:23:fe:8c:76:fa:53:88:4d:20:
         f9:6c:f0:01:4e:d0:c6:63:a5:83:5a:f5:e8:c5:11:21:53:6b:
         ec:1f:63:4d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOpIxTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxNzIxMDcwNFoXDTI1MDEyMzE3MzMz
MlowMzExMC8GA1UEAxMoMzE5ZTEyZmY3OGQxYTE4ZDRlZDUxMGQ1MDEyNDQ1OWU1
ZDliYzdlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7eIehIsqkP
mVlkqssde2jybDpxg9Lm/wXGnHBuNkzxYyWo4BleGLrBy0X6b+sFmt7cN7nsJ1lA
pHr6GhPvGtnmgF0g3VlHP/joppUXD4KBLk5z2K/onjESungn2U0Cet0kzj+GRYow
mQa3pu89IMfRfb8qvqrdb+MN1UszFexhFoqdLEiNmnWfWYYpdeu0vLW/gPbwOnBa
SPGISNHpczf3arEJNLUYPEqkHP7ihbD9NhY+x7n1btKQBMPxLWO94nvnr2Kx0Zcq
dfroXOJTQ1HvQaLSmT2r2qp8HS8rJQSFOjzwqX2diKT6y5uhHI1zXxXsYgL43Nq4
4LiIl6rLFeUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTaxMoMj2JnV+z7Tvke/489
/9UsODAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81ODljNWI0NC00ZDgz
LTQ2MjMtOTE5NC03MTMxMzJlNWRkYmQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTg5YzViNDQtNGQ4My00
NjIzLTkxOTQtNzEzMTMyZTVkZGJkLzMxOWUxMmZmNzhkMWExOGQ0ZWQ1MTBkNTAx
MjQ0NTllNWQ5YmM3ZTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArMAZDANBAIAAjAHAwUAKAYD2DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHzwwDQYJKoZIhvcNAQELBQADggEBAJNZ
HA9O53PfPlJKlRH8YcPfyX8gEioSgCm3U5g/MdZVH+yZva5Cmp9YKLv6E4M2G40p
Xsqk7Eu0d9vdVp/mLh65aSQ3Yqi59d+XMFQoxK1H7n2LdbqoDuIlmBWnARQGNjBN
gbDLmHEPOTL8tyIeQiPyn+5pGaJN+f6rzneqGjvknKu6J/5mMdGeJoqGK9J+9WpQ
n85ojR66QwT+lio/idoxNsVGKolrFuLlUuaVaZ/+noN+5yo7jK70zVigwHch7d+W
2CmKMoR2S0W97fglsljGv4tIEFg9z0VTIM+iPt3t+SP+jHb6U4hNIPls8AFO0MZj
pYNa9ejFESFTa+wfY00=
-----END CERTIFICATE-----