Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a6f642593b710f6a7362bac570a88a249c01a14.cer
File:                     3a6f642593b710f6a7362bac570a88a249c01a14.cer (raw, json)
Hash identifier:          rN96XixJ+449yvlThZ7uoStHoMroDzgPl49rN7pTYMw=
Subject key identifier:   30:98:52:3B:83:51:AE:32:FF:A2:63:39:15:90:D7:A1:FA:1D:66:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECDF29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/49b14bdb-3c58-4192-b69c-ac7c93bde8f3/3a6f642593b710f6a7362bac570a88a249c01a14.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/49b14bdb-3c58-4192-b69c-ac7c93bde8f3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 16:04:39 +0000
Certificate not after:    Sun 10 Nov 2024 20:28:56 +0000
Subordinate resources:    AS: 52434

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15523625 (0xecdf29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 16:04:39 2023 GMT
            Not After : Nov 10 20:28:56 2024 GMT
        Subject: CN=3a6f642593b710f6a7362bac570a88a249c01a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:eb:f0:91:7e:43:66:3d:4e:50:ff:cd:6c:
                    16:21:6e:e9:d2:ac:ea:9e:18:7d:bf:c0:70:8c:30:
                    e1:35:04:23:50:6b:41:10:28:40:80:44:16:ea:12:
                    49:79:58:5a:01:8e:51:91:e1:5f:ba:30:90:df:fd:
                    be:83:39:e8:3e:e7:de:db:0d:9a:0e:4d:30:f9:43:
                    f2:1a:1f:f5:ee:dd:c5:0c:cc:69:c1:5a:9b:99:d7:
                    1c:7f:cd:c2:d3:2a:68:d3:fc:6e:c5:49:b3:4b:da:
                    f6:68:a7:eb:7c:b4:2a:6a:79:91:a7:09:a7:a2:b0:
                    86:09:f5:66:23:47:5b:45:34:99:58:02:26:61:46:
                    ae:fb:07:ab:7e:e5:be:38:f3:9b:e2:cf:a9:e4:6b:
                    c1:dd:7d:1d:5c:ea:73:87:69:5a:e2:6b:6c:71:44:
                    19:3f:23:65:a3:76:14:ab:a5:f5:c8:89:3e:6c:ac:
                    53:39:80:24:26:1d:d5:06:59:36:50:17:94:1f:0d:
                    da:c2:f0:b5:eb:a4:bb:37:ad:bb:a0:79:b7:88:16:
                    42:d0:b1:a2:03:3f:8c:13:aa:8f:ea:c9:2c:6e:72:
                    98:e9:d9:c6:a7:25:1d:c5:00:ce:1b:05:bf:27:17:
                    1a:72:1c:27:db:a9:14:29:b3:c2:5f:45:15:96:c5:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:98:52:3B:83:51:AE:32:FF:A2:63:39:15:90:D7:A1:FA:1D:66:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/49b14bdb-3c58-4192-b69c-ac7c93bde8f3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/49b14bdb-3c58-4192-b69c-ac7c93bde8f3/3a6f642593b710f6a7362bac570a88a249c01a14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52434

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:96:fd:b3:c4:8d:0d:f1:74:45:c8:4b:9c:ea:e5:43:fa:
         84:ca:a7:03:93:e4:a7:23:95:6d:7f:21:27:13:94:a0:db:e1:
         74:46:33:f2:4e:cd:7d:82:be:09:ce:35:1c:78:8c:a7:72:ef:
         be:ee:4c:aa:89:a2:31:57:5c:b3:e3:41:06:88:e7:b5:ce:ec:
         c7:89:86:07:65:ad:d1:ed:e1:d5:9d:05:b0:8a:57:c7:8d:2d:
         13:e1:13:dc:98:b7:c9:e8:bb:fc:59:45:b8:69:c0:26:75:33:
         da:55:8d:cc:c4:bb:3c:d2:2a:5d:fa:31:d5:a7:26:58:69:42:
         54:b7:f0:b3:ef:7e:9a:3c:8f:58:09:5d:67:5d:5d:52:00:a3:
         1c:56:fe:45:9c:a8:5b:a2:80:67:e4:e1:af:bd:e8:f4:d2:28:
         91:e2:92:bd:61:3e:98:6f:a0:36:21:9d:88:25:b3:5b:f1:78:
         3f:33:c0:5f:b5:3f:59:ff:be:6a:7b:3e:43:ab:df:4d:e2:61:
         1d:c4:57:7c:06:90:c7:b2:1e:50:1f:d5:99:ca:1c:cf:cc:34:
         5a:04:c7:6b:36:66:80:3a:b6:95:27:08:55:97:5c:bd:d8:b3:
         85:af:f7:3a:1c:01:dd:6b:79:b5:be:2d:32:4b:1a:3c:3f:7a:
         c4:22:23:6c
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIEAOzfKTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwNjE2MDQzOVoXDTI0MTExMDIwMjg1
NlowMzExMC8GA1UEAxMoM2E2ZjY0MjU5M2I3MTBmNmE3MzYyYmFjNTcwYTg4YTI0
OWMwMWExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJS/6/CRfkNm
PU5Q/81sFiFu6dKs6p4Yfb/AcIww4TUEI1BrQRAoQIBEFuoSSXlYWgGOUZHhX7ow
kN/9voM56D7n3tsNmg5NMPlD8hof9e7dxQzMacFam5nXHH/NwtMqaNP8bsVJs0va
9min63y0Kmp5kacJp6Kwhgn1ZiNHW0U0mVgCJmFGrvsHq37lvjjzm+LPqeRrwd19
HVzqc4dpWuJrbHFEGT8jZaN2FKul9ciJPmysUzmAJCYd1QZZNlAXlB8N2sLwteuk
uzetu6B5t4gWQtCxogM/jBOqj+rJLG5ymOnZxqclHcUAzhsFvycXGnIcJ9upFCmz
wl9FFZbFcTsCAwEAAaOCAtkwggLVMB0GA1UdDgQWBBQwmFI7g1GuMv+iYzkVkNeh
+h1mxjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OWIxNGJkYi0zYzU4
LTQxOTItYjY5Yy1hYzdjOTNiZGU4ZjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDliMTRiZGItM2M1OC00
MTkyLWI2OWMtYWM3YzkzYmRlOGYzLzNhNmY2NDI1OTNiNzEwZjZhNzM2MmJhYzU3
MGE4OGEyNDljMDFhMTQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzNIwDQYJKoZIhvcNAQELBQADggEBALGX
lv2zxI0N8XRFyEuc6uVD+oTKpwOT5KcjlW1/IScTlKDb4XRGM/JOzX2CvgnONRx4
jKdy777uTKqJojFXXLPjQQaI57XO7MeJhgdlrdHt4dWdBbCKV8eNLRPhE9yYt8no
u/xZRbhpwCZ1M9pVjczEuzzSKl36MdWnJlhpQlS38LPvfpo8j1gJXWddXVIAoxxW
/kWcqFuigGfk4a+96PTSKJHikr1hPphvoDYhnYgls1vxeD8zwF+1P1n/vmp7PkOr
303iYR3EV3wGkMeyHlAf1ZnKHM/MNFoEx2s2ZoA6tpUnCFWXXL3Ys4Wv9zocAd1r
ebW+LTJLGjw/esQiI2w=
-----END CERTIFICATE-----