Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4400957bdc3ae7b6df0217c92317e7b5033daee4.cer
File:                     4400957bdc3ae7b6df0217c92317e7b5033daee4.cer (raw, json)
Hash identifier:          fryN7ik6emDom+L7R37jfE4Lb1uAkMj8XxfEwcxg1Tc=
Subject key identifier:   AC:04:9B:D8:70:09:31:D8:81:6D:F3:64:21:1B:F0:76:E9:DF:0C:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA01E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/4400957bdc3ae7b6df0217c92317e7b5033daee4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 18:40:09 +0000
Certificate not after:    Sat 04 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 273084
                          IP: 2803:5f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16384482 (0xfa01e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 18 18:40:09 2023 GMT
            Not After : Jan  4 05:00:00 2025 GMT
        Subject: CN=4400957bdc3ae7b6df0217c92317e7b5033daee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:0d:c1:24:cb:23:6a:61:7d:31:09:a4:35:
                    38:2c:95:2e:e4:48:de:af:4d:91:41:e7:8d:bb:50:
                    c4:8d:ad:00:71:a2:8e:20:da:33:b6:c9:50:a2:e6:
                    00:f9:08:a3:e0:0b:75:fa:bc:00:af:31:4a:06:e3:
                    f5:3a:c5:5d:60:b2:7c:04:9c:31:4b:3a:54:53:e6:
                    60:3a:a9:43:c9:d8:9a:ab:07:7e:44:d1:05:0b:a6:
                    40:ec:47:4b:ba:b4:ba:31:6f:a0:89:b5:32:c3:0b:
                    2d:4c:82:4f:23:55:96:16:40:10:a3:74:3b:9b:1a:
                    cd:f5:19:e7:15:6c:69:e0:98:bf:a1:ba:fc:06:21:
                    9a:60:0f:da:bc:33:40:81:e5:66:9a:32:4f:69:41:
                    5b:3a:58:ae:95:1c:eb:1a:02:ca:7d:2b:9b:89:6e:
                    b9:a4:c9:db:f5:c3:cd:b9:1e:73:70:b9:fc:93:7a:
                    9a:f9:29:05:1c:b9:2e:46:69:9e:e2:31:a2:eb:0f:
                    58:65:2c:99:5a:70:43:04:8a:cd:e9:63:67:b9:50:
                    51:11:00:f9:e0:0c:d6:9d:1f:23:57:89:83:29:9a:
                    85:c4:33:a4:bc:8b:d2:3d:48:79:66:cc:d4:3c:61:
                    35:d8:6c:71:e6:cf:09:02:b1:8c:c4:e1:0f:c5:b2:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:9B:D8:70:09:31:D8:81:6D:F3:64:21:1B:F0:76:E9:DF:0C:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/4400957bdc3ae7b6df0217c92317e7b5033daee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273084

    Signature Algorithm: sha256WithRSAEncryption
         c0:ae:22:11:65:be:d0:ac:e4:f7:54:a6:64:28:4b:d2:62:ad:
         10:c3:fa:14:76:f8:26:f5:50:a5:de:54:2d:c1:9c:0a:d1:03:
         cc:fc:44:d8:df:60:87:dd:89:6f:3f:40:2b:cc:2a:c7:4d:21:
         4d:ca:ad:a8:e7:89:4b:5b:75:c3:3f:d2:48:f4:49:de:49:ba:
         7a:63:6d:0c:7e:79:5b:38:51:2d:76:10:77:46:0b:20:a4:77:
         fd:9c:83:89:b1:87:ad:64:20:df:bb:b4:dd:3d:33:42:8b:09:
         67:ea:a8:89:41:76:04:fc:7e:e9:f4:2f:31:04:9f:da:8c:75:
         64:c0:a5:21:23:ff:b7:8c:87:20:a4:d6:9a:d0:d8:99:42:18:
         92:85:cd:b5:e3:d4:d5:55:66:10:03:48:ef:fd:f3:0f:02:27:
         31:84:62:ce:9f:f1:c7:1e:08:7c:22:e1:90:ed:0f:d5:ba:be:
         0a:2b:7b:d8:96:83:06:a9:54:ad:15:cd:36:e0:d2:f8:5f:db:
         bd:a3:f7:ce:f3:e5:74:80:e5:e8:c3:93:de:02:e9:f3:e8:7f:
         c5:a8:0f:d7:72:44:73:8c:22:19:c4:9f:7e:87:24:b6:b2:1d:
         5f:1d:d3:68:cd:8a:77:64:0a:4d:b3:7c:a4:6a:10:97:20:67:
         16:32:e2:b1
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPoB4jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkxODE4NDAwOVoXDTI1MDEwNDA1MDAw
MFowMzExMC8GA1UEAxMoNDQwMDk1N2JkYzNhZTdiNmRmMDIxN2M5MjMxN2U3YjUw
MzNkYWVlNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI5mDcEkyyNq
YX0xCaQ1OCyVLuRI3q9NkUHnjbtQxI2tAHGijiDaM7bJUKLmAPkIo+ALdfq8AK8x
Sgbj9TrFXWCyfAScMUs6VFPmYDqpQ8nYmqsHfkTRBQumQOxHS7q0ujFvoIm1MsML
LUyCTyNVlhZAEKN0O5sazfUZ5xVsaeCYv6G6/AYhmmAP2rwzQIHlZpoyT2lBWzpY
rpUc6xoCyn0rm4luuaTJ2/XDzbkec3C5/JN6mvkpBRy5LkZpnuIxousPWGUsmVpw
QwSKzeljZ7lQUREA+eAM1p0fI1eJgymahcQzpLyL0j1IeWbM1DxhNdhscebPCQKx
jMThD8Wyz80CAwEAAaOCAvswggL3MB0GA1UdDgQWBBSsBJvYcAkx2IFt82QhG/B2
6d8M/zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mNDUxMjAwNC04OTc0
LTQ0NGQtYjhiMC04YTgxZmEwZTJkMzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjQ1MTIwMDQtODk3NC00
NDRkLWI4YjAtOGE4MWZhMGUyZDMwLzQ0MDA5NTdiZGMzYWU3YjZkZjAyMTdjOTIz
MTdlN2I1MDMzZGFlZTQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDX5AwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCq8MA0GCSqGSIb3DQEBCwUAA4IBAQDAriIRZb7QrOT3VKZkKEvS
Yq0Qw/oUdvgm9VCl3lQtwZwK0QPM/ETY32CH3YlvP0ArzCrHTSFNyq2o54lLW3XD
P9JI9EneSbp6Y20MfnlbOFEtdhB3RgsgpHf9nIOJsYetZCDfu7TdPTNCiwln6qiJ
QXYE/H7p9C8xBJ/ajHVkwKUhI/+3jIcgpNaa0NiZQhiShc2149TVVWYQA0jv/fMP
AicxhGLOn/HHHgh8IuGQ7Q/Vur4KK3vYloMGqVStFc024NL4X9u9o/fO8+V0gOXo
w5PeAunz6H/FqA/XckRzjCIZxJ9+hyS2sh1fHdNozYp3ZApNs3ykahCXIGcWMuKx
-----END CERTIFICATE-----