Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/321b1831cee731b2ceaee03f33ccf4511d69f1f3.cer
File:                     321b1831cee731b2ceaee03f33ccf4511d69f1f3.cer (raw, json)
Hash identifier:          8fxwt218Bta3Mk3X7czkx0whGMpPMvrrrPAMnVLxHL0=
Subject key identifier:   2C:80:11:03:D4:6C:FE:E0:2F:11:79:21:5B:EC:41:4A:CD:6D:0A:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0CE99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/232bf488-b14f-4ec7-a6ac-1410287e9a7e/321b1831cee731b2ceaee03f33ccf4511d69f1f3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/232bf488-b14f-4ec7-a6ac-1410287e9a7e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 14:50:30 +0000
Certificate not after:    Wed 31 Jan 2024 15:55:59 +0000
Subordinate resources:    AS: 272106
                          IP: 2803:d710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14732953 (0xe0ce99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  7 14:50:30 2023 GMT
            Not After : Jan 31 15:55:59 2024 GMT
        Subject: CN=321b1831cee731b2ceaee03f33ccf4511d69f1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:98:34:d4:25:80:0f:ca:af:13:60:c9:5a:
                    1d:40:d6:f6:35:d5:af:f6:42:39:86:5c:10:35:25:
                    aa:48:fb:3e:f1:3f:8f:0f:d9:3d:4b:27:31:05:8a:
                    3c:ae:c6:74:65:df:69:63:b4:d5:15:80:24:64:5d:
                    95:b6:79:05:a2:2c:16:40:c8:5f:ba:2d:7e:3d:c6:
                    85:ad:02:49:57:2d:c1:41:0b:a8:7f:f9:07:a0:a9:
                    5e:e3:55:5b:78:d2:b8:97:55:34:aa:7e:0c:58:e8:
                    63:98:1c:4b:77:eb:66:6c:4b:bc:67:71:c3:71:e4:
                    5e:5a:ae:48:0e:ad:0b:13:1b:27:fb:2e:c9:a4:dd:
                    20:51:c7:2c:2b:8c:ca:e1:c5:86:bc:1e:96:7b:c7:
                    20:fd:19:e1:56:39:6b:77:56:aa:6c:13:92:58:e0:
                    77:75:23:3c:85:48:06:a3:03:59:36:26:ef:b7:61:
                    fb:9e:c2:56:2c:0c:f7:a3:89:77:9e:c6:0c:f8:fb:
                    bc:df:e6:d5:b0:9a:b3:3c:0a:cc:43:7d:c9:25:19:
                    48:7d:9e:3d:27:76:10:04:cf:fb:84:3b:59:60:2d:
                    d2:03:65:d2:35:54:08:cb:51:de:95:57:bd:94:a2:
                    54:d6:36:fb:6d:36:c4:74:ec:44:6b:c9:53:a9:8e:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:80:11:03:D4:6C:FE:E0:2F:11:79:21:5B:EC:41:4A:CD:6D:0A:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/232bf488-b14f-4ec7-a6ac-1410287e9a7e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/232bf488-b14f-4ec7-a6ac-1410287e9a7e/321b1831cee731b2ceaee03f33ccf4511d69f1f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272106

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:21:af:0b:35:a1:5c:29:17:d8:9b:38:6a:80:ea:50:d9:
         38:fd:11:de:ed:76:7c:63:67:53:63:1c:1e:22:fd:0c:cb:bb:
         5b:0f:0b:6c:8e:49:18:87:f0:59:f1:ff:f5:f6:5f:ed:a3:6b:
         f3:63:56:43:a5:53:cb:3f:ea:34:64:fa:96:c7:41:a3:c2:df:
         81:b8:93:9b:85:8d:8d:ff:04:13:86:8a:77:28:c8:ea:6c:96:
         60:af:1d:89:d7:93:6c:4d:21:8d:01:d0:27:40:87:2b:80:b0:
         36:1c:dd:0f:62:cd:ee:2d:cd:44:a6:8c:84:ea:c3:3c:7e:4c:
         e4:ee:be:f1:e3:3b:88:de:5e:9c:c0:38:89:58:eb:92:3f:13:
         ee:96:86:18:56:15:d7:86:f0:b4:b3:b6:44:c6:d4:9e:1f:61:
         06:d0:e7:f3:62:f4:ed:6c:b9:6f:7c:06:9d:a7:34:9c:f4:bc:
         df:79:c5:d2:fa:25:0f:f1:01:dc:9f:0b:e8:16:c4:0d:8b:31:
         c2:1b:f0:3a:5a:a6:a7:56:e8:45:36:ca:9d:fb:f7:58:ed:10:
         d9:50:e9:ea:2c:ed:16:be:f3:44:8c:8c:f2:e0:a1:b0:1d:b8:
         17:cd:38:e7:98:f3:63:29:29:bc:40:02:8c:87:0b:b7:4a:47:
         8a:70:52:8d
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAODOmTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDMwNzE0NTAzMFoXDTI0MDEzMTE1NTU1
OVowMzExMC8GA1UEAxMoMzIxYjE4MzFjZWU3MzFiMmNlYWVlMDNmMzNjY2Y0NTEx
ZDY5ZjFmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIgLmDTUJYAP
yq8TYMlaHUDW9jXVr/ZCOYZcEDUlqkj7PvE/jw/ZPUsnMQWKPK7GdGXfaWO01RWA
JGRdlbZ5BaIsFkDIX7otfj3Gha0CSVctwUELqH/5B6CpXuNVW3jSuJdVNKp+DFjo
Y5gcS3frZmxLvGdxw3HkXlquSA6tCxMbJ/suyaTdIFHHLCuMyuHFhrwelnvHIP0Z
4VY5a3dWqmwTkljgd3UjPIVIBqMDWTYm77dh+57CViwM96OJd57GDPj7vN/m1bCa
szwKzEN9ySUZSH2ePSd2EATP+4Q7WWAt0gNl0jVUCMtR3pVXvZSiVNY2+202xHTs
RGvJU6mOiSECAwEAAaOCAvswggL3MB0GA1UdDgQWBBQsgBED1Gz+4C8ReSFb7EFK
zW0KxDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yMzJiZjQ4OC1iMTRm
LTRlYzctYTZhYy0xNDEwMjg3ZTlhN2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjMyYmY0ODgtYjE0Zi00
ZWM3LWE2YWMtMTQxMDI4N2U5YTdlLzMyMWIxODMxY2VlNzMxYjJjZWFlZTAzZjMz
Y2NmNDUxMWQ2OWYxZjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD1xAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCbqMA0GCSqGSIb3DQEBCwUAA4IBAQAImiGvCzWhXCkX2Js4aoDq
UNk4/RHe7XZ8Y2dTYxweIv0My7tbDwtsjkkYh/BZ8f/19l/to2vzY1ZDpVPLP+o0
ZPqWx0Gjwt+BuJObhY2N/wQThop3KMjqbJZgrx2J15NsTSGNAdAnQIcrgLA2HN0P
Ys3uLc1EpoyE6sM8fkzk7r7x4zuI3l6cwDiJWOuSPxPuloYYVhXXhvC0s7ZExtSe
H2EG0OfzYvTtbLlvfAadpzSc9LzfecXS+iUP8QHcnwvoFsQNizHCG/A6WqanVuhF
Nsqd+/dY7RDZUOnqLO0WvvNEjIzy4KGwHbgXzTjnmPNjKSm8QAKMhwu3SkeKcFKN
-----END CERTIFICATE-----