Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4383829aa6915025fadcb4bbf75331e70af7916f.cer
File:                     4383829aa6915025fadcb4bbf75331e70af7916f.cer (raw, json)
Hash identifier:          7pxFJqUkYlxwqkUmImnc7DqAacRIepsoeQTnK0Ip2os=
Subject key identifier:   1F:3F:4A:45:F2:A2:3F:EF:56:13:69:8D:F8:37:32:E3:73:78:EB:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F841C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/4383829aa6915025fadcb4bbf75331e70af7916f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 14:15:44 +0000
Certificate not after:    Fri 28 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273075
                          IP: 2803:af90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16269768 (0xf841c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 14:15:44 2023 GMT
            Not After : Mar 28 06:00:00 2025 GMT
        Subject: CN=4383829aa6915025fadcb4bbf75331e70af7916f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:c7:cd:3e:46:d7:36:9d:1f:15:11:fe:c1:
                    2b:9b:61:0d:5a:2c:37:50:de:71:99:57:4d:c7:3d:
                    5e:f9:84:57:7b:ab:f9:e6:d1:91:80:2d:b0:2f:34:
                    bb:9d:63:55:15:36:83:00:59:87:76:a9:90:93:57:
                    97:fd:24:d4:5d:04:d4:45:5e:67:e1:93:2b:8c:7b:
                    e7:e7:14:a8:06:20:ef:f9:d3:ac:32:a1:73:39:80:
                    3b:b0:18:24:e8:36:1f:fb:b1:1a:d1:c0:0c:2a:a1:
                    29:c0:3a:87:8a:e9:d1:bb:7e:92:63:d5:51:bf:8f:
                    fb:31:82:0e:00:e6:fe:41:01:b2:4f:d7:9e:21:69:
                    66:91:60:f3:6d:cb:96:68:03:f8:1a:83:bb:93:3f:
                    80:d2:f2:8a:db:96:d7:99:b0:92:18:1b:4e:ad:f8:
                    42:10:e2:12:93:26:3b:44:ce:c6:de:77:3a:d9:7c:
                    2b:1f:48:34:0d:1f:74:bf:dc:87:af:5c:a1:23:97:
                    57:7f:e5:c1:aa:b4:d5:2e:d4:e7:4f:bb:34:fa:17:
                    88:7c:18:d3:ab:18:b8:d9:84:6e:a1:09:84:fe:85:
                    4e:82:6b:28:99:61:f3:51:c8:12:3e:1d:92:f8:e3:
                    c6:88:a6:36:81:a9:5a:b0:1e:13:97:44:d4:89:f0:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:4A:45:F2:A2:3F:EF:56:13:69:8D:F8:37:32:E3:73:78:EB:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/4383829aa6915025fadcb4bbf75331e70af7916f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273075

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:9a:ff:26:8d:2d:a2:0c:25:8f:74:04:45:f7:1d:b6:3d:
         4b:5b:e0:c8:27:ee:12:cf:24:4c:48:f0:39:5d:81:63:c1:5d:
         9f:6b:b5:93:63:cc:86:7f:a7:9b:86:90:2c:2d:ae:d2:43:77:
         6c:b1:5f:d6:a8:81:63:ad:7b:ef:8e:bf:7f:27:02:6d:7b:e0:
         3d:f9:72:fa:fa:66:ac:66:8c:46:cc:6e:68:7b:1f:0d:30:8e:
         b2:ec:0c:a2:b3:4d:66:04:cf:50:c0:27:45:0a:0f:2a:cc:3c:
         a2:a6:9b:35:f6:ee:67:b0:cd:ed:41:4c:b3:f0:db:d0:ef:49:
         e3:3a:31:7a:15:61:ff:99:33:21:2e:aa:e3:4c:1b:0b:18:12:
         10:72:fc:d5:a8:7f:df:e1:7b:64:d2:07:d5:3e:ef:51:90:1d:
         b2:9b:42:62:50:8c:f3:9a:5a:8e:ff:55:71:1a:d0:dc:4c:c9:
         bc:42:b4:4b:c2:22:bc:c7:29:f4:6c:63:8c:01:bd:3b:a3:5a:
         c4:a7:c8:85:89:6c:75:4d:5b:a5:17:e8:3c:d9:ff:16:0b:b5:
         df:cf:0c:c2:22:4e:4b:3d:24:ee:cf:1f:91:29:9e:d8:fa:ec:
         24:d8:1c:f0:ef:ee:52:42:ca:c3:73:9b:83:38:a1:1b:4a:1f:
         ec:3a:9c:b8
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPhByDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkwNTE0MTU0NFoXDTI1MDMyODA2MDAw
MFowMzExMC8GA1UEAxMoNDM4MzgyOWFhNjkxNTAyNWZhZGNiNGJiZjc1MzMxZTcw
YWY3OTE2ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIEux80+Rtc2
nR8VEf7BK5thDVosN1DecZlXTcc9XvmEV3ur+ebRkYAtsC80u51jVRU2gwBZh3ap
kJNXl/0k1F0E1EVeZ+GTK4x75+cUqAYg7/nTrDKhczmAO7AYJOg2H/uxGtHADCqh
KcA6h4rp0bt+kmPVUb+P+zGCDgDm/kEBsk/XniFpZpFg823LlmgD+BqDu5M/gNLy
ituW15mwkhgbTq34QhDiEpMmO0TOxt53Otl8Kx9INA0fdL/ch69coSOXV3/lwaq0
1S7U50+7NPoXiHwY06sYuNmEbqEJhP6FToJrKJlh81HIEj4dkvjjxoimNoGpWrAe
E5dE1InwFv8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQfP0pF8qI/71YTaY34NzLj
c3jr9zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMTMxYmNiYS0yNjAy
LTRiNGMtODg2Ny1kODU1ZmIzYjhkNzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTEzMWJjYmEtMjYwMi00
YjRjLTg4NjctZDg1NWZiM2I4ZDc3LzQzODM4MjlhYTY5MTUwMjVmYWRjYjRiYmY3
NTMzMWU3MGFmNzkxNmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDr5AwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCqzMA0GCSqGSIb3DQEBCwUAA4IBAQAQwpr/Jo0togwlj3QERfcd
tj1LW+DIJ+4SzyRMSPA5XYFjwV2fa7WTY8yGf6ebhpAsLa7SQ3dssV/WqIFjrXvv
jr9/JwJte+A9+XL6+masZoxGzG5oex8NMI6y7Ayis01mBM9QwCdFCg8qzDyipps1
9u5nsM3tQUyz8NvQ70njOjF6FWH/mTMhLqrjTBsLGBIQcvzVqH/f4Xtk0gfVPu9R
kB2ym0JiUIzzmlqO/1VxGtDcTMm8QrRLwiK8xyn0bGOMAb07o1rEp8iFiWx1TVul
F+g82f8WC7XfzwzCIk5LPSTuzx+RKZ7Y+uwk2Bzw7+5SQsrDc5uDOKEbSh/sOpy4
-----END CERTIFICATE-----