Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3203505ab76bd3839a8949841a4e1f0daf411624.cer
File:                     3203505ab76bd3839a8949841a4e1f0daf411624.cer (raw, json)
Hash identifier:          +EvTwEnUklwHRGpdbVE8RP6j8xkIG2Y+uRruV7tn0pY=
Subject key identifier:   A9:2A:04:C3:AE:50:46:DB:6C:DB:22:E1:0E:AE:C3:1B:C4:5C:65:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F70C0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/3203505ab76bd3839a8949841a4e1f0daf411624.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 04:03:33 +0000
Certificate not after:    Wed 18 Jun 2025 21:09:43 +0000
Subordinate resources:    AS: 273062
                          IP: 2803:1790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16190475 (0xf70c0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 04:03:33 2023 GMT
            Not After : Jun 18 21:09:43 2025 GMT
        Subject: CN=3203505ab76bd3839a8949841a4e1f0daf411624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:f8:69:dd:a4:ea:5a:98:c5:5c:59:df:5f:
                    af:c2:44:10:d1:38:ce:bc:ef:90:f3:12:8b:9e:bd:
                    fa:a8:74:c2:95:74:bd:00:3d:c5:c7:7a:99:b0:a6:
                    45:97:31:56:45:4b:e6:0a:5d:11:04:f2:48:d8:d5:
                    e8:47:9c:29:85:f2:de:34:5d:a3:10:28:47:5e:3f:
                    8f:55:75:48:7a:c5:0b:06:76:5f:8a:2c:07:6f:6b:
                    cc:9c:84:ff:e2:05:c6:ba:03:85:1d:23:21:9b:1b:
                    04:51:09:90:fc:3b:2a:15:57:1e:a3:47:6b:03:63:
                    8d:05:31:fe:62:c5:96:0b:5d:56:70:f8:c8:46:9e:
                    37:f7:ca:e1:d3:c9:75:c5:88:fb:9c:5a:94:14:b1:
                    98:a8:cb:40:de:59:43:73:2d:73:89:fc:f0:57:4b:
                    8d:70:de:ac:37:c3:d2:d9:59:a3:38:7d:42:04:06:
                    3e:db:3c:1e:d6:91:52:2b:87:bc:a9:0f:0a:1b:95:
                    ce:58:9f:f3:cb:ec:ed:7f:9e:51:f0:44:1b:8b:94:
                    21:7c:90:2c:8a:16:68:47:1c:67:95:38:de:b7:29:
                    b4:7e:2d:91:b7:29:8d:7e:52:42:11:17:df:11:fe:
                    ab:61:5c:41:0a:c5:bb:65:1a:76:6c:a2:13:f7:07:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2A:04:C3:AE:50:46:DB:6C:DB:22:E1:0E:AE:C3:1B:C4:5C:65:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/3203505ab76bd3839a8949841a4e1f0daf411624.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273062

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:37:f2:c5:51:d6:e4:a1:2e:79:27:7a:db:c7:af:15:45:
         dd:b6:e5:fe:a4:9a:f6:7f:27:06:04:00:71:56:42:05:a1:7b:
         ee:8a:01:bf:e7:10:d5:49:a8:c0:d8:07:a2:2d:86:ed:f0:fb:
         36:6b:27:4b:11:e0:db:69:c2:f1:53:7a:c2:ab:20:d1:ee:fe:
         24:56:85:45:3e:68:4d:c7:d1:52:4f:7a:f5:61:db:38:90:8e:
         e1:6e:e0:d3:3e:66:f1:bf:9a:0b:89:78:b1:c7:ea:95:16:97:
         19:fa:6f:e0:a3:f9:58:ca:85:b5:30:be:ba:53:c1:a5:34:59:
         d8:4d:3b:f6:2a:15:e9:0c:d9:82:60:21:82:e1:9f:29:57:2e:
         ee:28:4f:aa:29:d7:2d:0e:d4:0f:5c:53:24:64:9f:ee:ea:e8:
         3f:25:17:12:d4:8b:cd:15:8e:76:b1:93:c3:f5:e6:83:97:3b:
         ed:45:17:14:35:9c:04:41:df:8f:fd:d9:67:94:b4:fb:28:92:
         6f:04:9c:8e:03:d2:9d:8e:58:a1:d3:03:66:30:55:13:1b:67:
         fa:5c:8b:dc:12:1b:2c:cd:8b:16:98:68:99:33:a9:0a:72:26:
         d2:b0:74:64:4e:8f:95:8c:74:96:b8:e4:b7:20:17:f9:d6:b6:
         b0:ff:f0:d2
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPcMCzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyOTA0MDMzM1oXDTI1MDYxODIxMDk0
M1owMzExMC8GA1UEAxMoMzIwMzUwNWFiNzZiZDM4MzlhODk0OTg0MWE0ZTFmMGRh
ZjQxMTYyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI/++GndpOpa
mMVcWd9fr8JEENE4zrzvkPMSi569+qh0wpV0vQA9xcd6mbCmRZcxVkVL5gpdEQTy
SNjV6EecKYXy3jRdoxAoR14/j1V1SHrFCwZ2X4osB29rzJyE/+IFxroDhR0jIZsb
BFEJkPw7KhVXHqNHawNjjQUx/mLFlgtdVnD4yEaeN/fK4dPJdcWI+5xalBSxmKjL
QN5ZQ3Mtc4n88FdLjXDerDfD0tlZozh9QgQGPts8HtaRUiuHvKkPChuVzlif88vs
7X+eUfBEG4uUIXyQLIoWaEccZ5U43rcptH4tkbcpjX5SQhEX3xH+q2FcQQrFu2Ua
dmyiE/cHf0kCAwEAAaOCAvswggL3MB0GA1UdDgQWBBSpKgTDrlBG22zbIuEOrsMb
xFxlOjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMGJhMzVjMS1hNTMx
LTQwMDItYWEzNS1iNzk2N2VjOTM5NmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTBiYTM1YzEtYTUzMS00
MDAyLWFhMzUtYjc5NjdlYzkzOTZlLzMyMDM1MDVhYjc2YmQzODM5YTg5NDk4NDFh
NGUxZjBkYWY0MTE2MjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDF5AwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCqmMA0GCSqGSIb3DQEBCwUAA4IBAQB6ljfyxVHW5KEueSd628ev
FUXdtuX+pJr2fycGBABxVkIFoXvuigG/5xDVSajA2AeiLYbt8Ps2aydLEeDbacLx
U3rCqyDR7v4kVoVFPmhNx9FST3r1Yds4kI7hbuDTPmbxv5oLiXixx+qVFpcZ+m/g
o/lYyoW1ML66U8GlNFnYTTv2KhXpDNmCYCGC4Z8pVy7uKE+qKdctDtQPXFMkZJ/u
6ug/JRcS1IvNFY52sZPD9eaDlzvtRRcUNZwEQd+P/dlnlLT7KJJvBJyOA9Kdjlih
0wNmMFUTG2f6XIvcEhsszYsWmGiZM6kKcibSsHRkTo+VjHSWuOS3IBf51raw//DS
-----END CERTIFICATE-----