Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42ba12f2acc277d21aafc97a163141a0caaef911.cer
File:                     42ba12f2acc277d21aafc97a163141a0caaef911.cer (raw, json)
Hash identifier:          VeXUhtqRcMNNDT7Ot0eaiMTO1GdN0aPwF2LYxrzCZR4=
Subject key identifier:   DD:49:15:C7:F9:46:D4:9B:64:4B:1B:0B:24:44:C1:D3:AC:9D:61:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D42CF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/97aca067-a5c0-4a76-bc49-50141ce04f87/42ba12f2acc277d21aafc97a163141a0caaef911.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/97aca067-a5c0-4a76-bc49-50141ce04f87/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Oct 2022 17:50:23 +0000
Certificate not after:    Sat 16 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 272871
                          IP: 2803:da90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13905140 (0xd42cf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 17:50:23 2022 GMT
            Not After : Mar 16 06:00:00 2024 GMT
        Subject: CN=42ba12f2acc277d21aafc97a163141a0caaef911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:9c:75:35:12:05:e2:ba:72:da:2b:15:ea:
                    8c:d7:76:ea:ee:5c:bc:8a:33:f0:25:0b:cc:b5:1a:
                    35:2f:07:23:6f:69:a2:99:61:a2:15:61:34:6e:f1:
                    ec:d1:26:bc:9e:7c:6e:d1:04:06:17:d2:ff:cc:0e:
                    55:0b:f8:5e:00:b9:e9:46:a6:a1:8e:76:bc:93:1a:
                    8a:6d:d0:ae:ae:b6:1d:ff:fd:d3:38:01:f2:ec:24:
                    9c:a1:b8:f1:ca:ab:a1:ef:99:64:5d:45:80:b4:a8:
                    81:22:0f:90:ae:83:cf:4b:bc:0f:a9:ec:70:59:7d:
                    8d:06:d7:48:97:29:30:40:88:b2:7b:df:15:50:c6:
                    75:b7:5b:f7:60:b6:3b:d8:2d:10:ab:8e:fd:3c:cf:
                    86:f6:09:e6:ce:28:46:d2:b4:05:29:99:5d:54:75:
                    07:17:16:29:c5:a3:cc:08:00:ff:03:20:a9:7e:da:
                    0c:17:a5:75:20:d4:71:d9:cb:3b:16:01:ca:51:22:
                    d8:01:39:93:5a:a9:9f:5f:10:83:b7:57:ff:2e:ec:
                    77:60:35:95:88:5e:03:93:61:65:b0:9c:43:be:fe:
                    df:fb:86:78:e7:14:9c:c7:7f:4b:61:ac:39:84:aa:
                    22:01:e6:b0:9d:7d:d1:e3:a9:d4:48:ec:a5:36:9e:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:15:C7:F9:46:D4:9B:64:4B:1B:0B:24:44:C1:D3:AC:9D:61:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/97aca067-a5c0-4a76-bc49-50141ce04f87/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/97aca067-a5c0-4a76-bc49-50141ce04f87/42ba12f2acc277d21aafc97a163141a0caaef911.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272871

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:13:09:26:d0:41:69:ef:76:20:1f:30:0b:61:c9:31:1e:
         29:29:01:27:8b:ee:9e:85:30:98:bc:ba:82:7a:a1:62:45:58:
         dc:12:ef:1f:1a:ee:f9:06:e5:ee:ec:46:dc:60:45:5c:85:1e:
         48:98:97:8e:b5:af:77:80:68:06:52:1f:3b:60:bb:9b:98:8c:
         b2:52:e4:27:23:41:9b:fc:c1:3e:44:c9:07:40:9f:95:8a:65:
         20:f4:57:91:ff:96:a6:68:4e:35:d2:e7:f9:b1:37:43:e3:d8:
         3c:10:0c:ba:d0:4b:38:be:cd:71:bd:25:6a:0e:22:f6:5a:e5:
         da:20:c1:8a:8f:1b:44:1f:5a:ff:f7:f6:3e:71:72:ec:08:25:
         89:d5:7d:7d:be:68:85:0f:7e:e3:f9:ec:21:0d:78:d9:d9:96:
         28:eb:47:4c:45:ab:88:3d:d0:00:9d:af:39:ca:40:7d:98:d6:
         53:5d:c6:79:a6:a4:a6:62:b2:1e:78:c0:c6:7b:98:73:db:d7:
         b7:7a:2e:52:02:a3:32:90:0e:eb:a0:58:d2:31:5c:06:51:f5:
         e0:bf:f4:33:0c:18:40:3f:3c:31:62:35:00:09:f7:b7:9b:de:
         fe:79:be:f9:6d:9a:18:b7:52:a1:5b:f3:c4:c8:b3:c5:0f:ef:
         39:7c:77:da
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEANQs9DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTAwNzE3NTAyM1oXDTI0MDMxNjA2MDAw
MFowMzExMC8GA1UEAxMoNDJiYTEyZjJhY2MyNzdkMjFhYWZjOTdhMTYzMTQxYTBj
YWFlZjkxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIIonHU1EgXi
unLaKxXqjNd26u5cvIoz8CULzLUaNS8HI29poplhohVhNG7x7NEmvJ58btEEBhfS
/8wOVQv4XgC56UamoY52vJMaim3Qrq62Hf/90zgB8uwknKG48cqroe+ZZF1FgLSo
gSIPkK6Dz0u8D6nscFl9jQbXSJcpMECIsnvfFVDGdbdb92C2O9gtEKuO/TzPhvYJ
5s4oRtK0BSmZXVR1BxcWKcWjzAgA/wMgqX7aDBeldSDUcdnLOxYBylEi2AE5k1qp
n18Qg7dX/y7sd2A1lYheA5NhZbCcQ77+3/uGeOcUnMd/S2GsOYSqIgHmsJ190eOp
1EjspTaebZsCAwEAAaOCAvswggL3MB0GA1UdDgQWBBTdSRXH+UbUm2RLGwskRMHT
rJ1h7TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85N2FjYTA2Ny1hNWMw
LTRhNzYtYmM0OS01MDE0MWNlMDRmODcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTdhY2EwNjctYTVjMC00
YTc2LWJjNDktNTAxNDFjZTA0Zjg3LzQyYmExMmYyYWNjMjc3ZDIxYWFmYzk3YTE2
MzE0MWEwY2FhZWY5MTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD2pAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCnnMA0GCSqGSIb3DQEBCwUAA4IBAQCpZRMJJtBBae92IB8wC2HJ
MR4pKQEni+6ehTCYvLqCeqFiRVjcEu8fGu75BuXu7EbcYEVchR5ImJeOta93gGgG
Uh87YLubmIyyUuQnI0Gb/ME+RMkHQJ+VimUg9FeR/5amaE410uf5sTdD49g8EAy6
0Es4vs1xvSVqDiL2WuXaIMGKjxtEH1r/9/Y+cXLsCCWJ1X19vmiFD37j+ewhDXjZ
2ZYo60dMRauIPdAAna85ykB9mNZTXcZ5pqSmYrIeeMDGe5hz29e3ei5SAqMykA7r
oFjSMVwGUfXgv/QzDBhAPzwxYjUACfe3m97+eb75bZoYt1KhW/PEyLPFD+85fHfa
-----END CERTIFICATE-----