Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c883b7d986cb076af473d009d9bf1f9f37991cf.cer
File:                     3c883b7d986cb076af473d009d9bf1f9f37991cf.cer (raw, json)
Hash identifier:          xo7ihedbeNsp3tq/9Wxzo0+K2SWHhqYk3tzKHLHbckw=
Subject key identifier:   5F:9A:5B:C2:57:DE:8F:A3:F0:EA:88:22:23:CD:C4:01:49:BD:92:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF07A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a25ad19a-baaa-4d95-97ed-ac218b50d7cd/3c883b7d986cb076af473d009d9bf1f9f37991cf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a25ad19a-baaa-4d95-97ed-ac218b50d7cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:54 +0000
Certificate not after:    Mon 14 Jul 2025 20:42:16 +0000
Subordinate resources:    AS: 53087
                          IP: 177.75.64.0/20
                          IP: 187.33.224.0/19
                          IP: 2804:298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16713641 (0xff07a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:54 2023 GMT
            Not After : Jul 14 20:42:16 2025 GMT
        Subject: CN=3c883b7d986cb076af473d009d9bf1f9f37991cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:7a:fd:39:a4:95:24:52:9d:87:6d:2a:36:
                    6b:10:a0:b4:cc:f7:82:1f:1a:3e:c6:03:86:2c:84:
                    8d:0f:79:4c:6e:76:79:c6:c3:94:5d:5a:cd:0a:69:
                    a8:22:f8:a8:c9:b6:e2:ec:8f:dc:68:c7:3e:c2:ed:
                    79:91:55:4b:e1:a0:e5:64:37:3d:75:ee:a2:f2:85:
                    fb:51:b9:45:df:8d:e5:06:8f:c8:d3:e6:15:3f:f9:
                    a5:ab:b7:16:cd:da:85:8d:67:66:44:c3:13:a8:83:
                    bc:43:99:1d:75:e6:a1:6a:5c:8b:2f:14:04:2b:f4:
                    19:91:7d:25:90:e1:b8:2b:b9:50:ae:b1:85:b6:a5:
                    fb:3c:36:23:38:1f:fb:17:4c:a9:0d:24:1e:c5:31:
                    22:39:e1:1c:29:a2:63:57:61:8b:37:3c:e2:5f:5e:
                    5c:ac:89:e3:2b:a2:89:79:4f:88:4d:c7:aa:83:06:
                    7c:59:1b:7c:18:10:15:68:93:fe:d6:16:f1:ba:2c:
                    22:47:5e:d6:5b:0e:68:c3:da:39:89:99:fb:3d:b9:
                    aa:b1:6a:d7:da:39:77:82:11:e6:52:c8:2e:ac:bc:
                    dc:c6:a5:cc:6b:2e:d8:38:cc:59:26:fb:5c:4d:17:
                    fa:29:f4:fc:bd:ab:bb:77:9d:ab:58:d3:ee:35:90:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:5B:C2:57:DE:8F:A3:F0:EA:88:22:23:CD:C4:01:49:BD:92:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a25ad19a-baaa-4d95-97ed-ac218b50d7cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a25ad19a-baaa-4d95-97ed-ac218b50d7cd/3c883b7d986cb076af473d009d9bf1f9f37991cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.64.0/20
                  187.33.224.0/19
                IPv6:
                  2804:298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53087

    Signature Algorithm: sha256WithRSAEncryption
         96:20:2e:f2:41:b6:77:29:77:9d:84:01:13:92:99:22:d1:f5:
         5c:08:d8:c3:7b:09:7e:a7:73:57:4b:c5:8d:8f:e4:3e:7b:a9:
         7b:0f:0e:79:e2:98:76:87:69:34:e9:96:bb:80:0d:62:0e:cd:
         f7:53:92:88:34:d2:28:08:3e:26:bf:2c:42:08:33:c6:d2:03:
         f8:87:af:32:37:bd:9a:ae:fb:df:93:fc:52:03:af:9b:5c:31:
         bb:11:60:39:2e:cd:c9:67:e8:55:85:84:df:39:24:60:af:93:
         d7:70:7f:83:84:d3:fb:20:85:ba:3e:51:32:59:b5:e8:04:8a:
         42:20:d9:fb:c4:61:6b:75:5b:06:1c:9c:4e:37:d0:3e:58:a2:
         bb:6c:bc:71:b1:11:d2:d8:44:21:f0:d4:e7:92:8d:0c:bc:60:
         ea:d2:c1:b4:38:60:03:27:04:80:a9:5f:9e:81:32:42:9a:f1:
         47:53:9a:9a:a6:4b:c7:22:c9:84:ba:68:fa:da:2a:b2:89:74:
         60:7f:2b:c8:56:bb:76:31:ca:2c:c8:90:2c:11:eb:bc:89:8c:
         34:e7:6a:23:bf:bb:a8:4c:d8:a4:a9:ac:42:94:bb:a6:e3:5f:
         ce:fd:97:54:6e:0b:75:1e:e8:4b:d8:02:9c:9b:47:c9:f5:63:
         67:60:19:68
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP8HqTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwNTA1NFoXDTI1MDcxNDIwNDIx
NlowMzExMC8GA1UEAxMoM2M4ODNiN2Q5ODZjYjA3NmFmNDczZDAwOWQ5YmYxZjlm
Mzc5OTFjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJg2ev05pJUk
Up2HbSo2axCgtMz3gh8aPsYDhiyEjQ95TG52ecbDlF1azQppqCL4qMm24uyP3GjH
PsLteZFVS+Gg5WQ3PXXuovKF+1G5Rd+N5QaPyNPmFT/5pau3Fs3ahY1nZkTDE6iD
vEOZHXXmoWpciy8UBCv0GZF9JZDhuCu5UK6xhbal+zw2Izgf+xdMqQ0kHsUxIjnh
HCmiY1dhizc84l9eXKyJ4yuiiXlPiE3HqoMGfFkbfBgQFWiT/tYW8bosIkde1lsO
aMPaOYmZ+z25qrFq19o5d4IR5lLILqy83MalzGsu2DjMWSb7XE0X+in0/L2ru3ed
q1jT7jWQoY0CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRfmlvCV96Po/DqiCIjzcQB
Sb2S2TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMjVhZDE5YS1iYWFh
LTRkOTUtOTdlZC1hYzIxOGI1MGQ3Y2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTI1YWQxOWEtYmFhYS00
ZDk1LTk3ZWQtYWMyMThiNTBkN2NkLzNjODgzYjdkOTg2Y2IwNzZhZjQ3M2QwMDlk
OWJmMWY5ZjM3OTkxY2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLFLQAMEBbsh4DANBAIAAjAHAwUA
KAQCmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz18wDQYJKoZIhvcNAQELBQAD
ggEBAJYgLvJBtncpd52EAROSmSLR9VwI2MN7CX6nc1dLxY2P5D57qXsPDnnimHaH
aTTplruADWIOzfdTkog00igIPia/LEIIM8bSA/iHrzI3vZqu+9+T/FIDr5tcMbsR
YDkuzcln6FWFhN85JGCvk9dwf4OE0/sghbo+UTJZtegEikIg2fvEYWt1WwYcnE43
0D5YortsvHGxEdLYRCHw1OeSjQy8YOrSwbQ4YAMnBICpX56BMkKa8UdTmpqmS8ci
yYS6aPraKrKJdGB/K8hWu3YxyizIkCwR67yJjDTnaiO/u6hM2KSprEKUu6bjX879
l1RuC3Ue6EvYApybR8n1Y2dgGWg=
-----END CERTIFICATE-----