Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4531168f68694b29e7e04725ceab8d88fc6eb313.cer
File:                     4531168f68694b29e7e04725ceab8d88fc6eb313.cer (raw, json)
Hash identifier:          8bw9Dct8NqBrBLjchsYAsrhY6UOFqJmu0Q0L+nWbpYs=
Subject key identifier:   06:8F:63:5E:EC:12:D2:8E:39:FB:16:E3:F1:F8:3B:F8:F5:A0:FB:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67FE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2748d80a-7f2b-498f-aef4-86077c891162/4531168f68694b29e7e04725ceab8d88fc6eb313.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2748d80a-7f2b-498f-aef4-86077c891162/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Apr 2023 22:25:13 +0000
Certificate not after:    Sun 24 Mar 2024 21:46:18 +0000
Subordinate resources:    AS: 272155
                          IP: 2803:890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15106021 (0xe67fe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 22:25:13 2023 GMT
            Not After : Mar 24 21:46:18 2024 GMT
        Subject: CN=4531168f68694b29e7e04725ceab8d88fc6eb313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:da:09:37:8b:a9:21:59:7e:74:90:c8:1d:
                    24:d5:96:6d:3a:ac:57:b3:d4:5b:4b:df:72:71:ad:
                    41:1e:72:98:3b:2d:90:c9:c2:1d:00:0d:01:f1:ee:
                    ec:86:cc:39:3e:a0:8d:c3:ea:85:31:ff:2c:44:5a:
                    88:a1:67:3e:8b:e2:5e:29:7f:a3:b6:6e:f3:45:d1:
                    8c:30:1e:57:be:9c:e4:fa:6a:d5:1d:96:ee:3e:43:
                    10:c2:bf:0c:89:32:a6:4a:e5:75:fb:7c:62:24:55:
                    96:46:26:51:ea:9d:05:a6:ca:8e:1e:49:87:18:1c:
                    24:5b:07:be:d1:71:c9:62:45:1d:99:33:a5:e8:ba:
                    dd:41:f7:b6:cf:87:b1:a1:17:80:73:9c:aa:6e:42:
                    6c:76:86:a0:6b:46:a1:c9:b2:ab:67:a3:9e:d0:2f:
                    da:f1:9a:70:51:d6:18:35:f0:1f:ed:5c:52:b5:e8:
                    a6:7d:46:11:0b:a2:48:4d:55:96:04:d3:db:a4:a3:
                    23:70:21:41:03:cc:bb:bd:ca:68:a5:87:50:75:15:
                    0f:68:4e:23:7f:f3:b8:8a:47:54:9f:17:27:8f:2d:
                    49:65:c8:a2:a6:ff:51:e5:37:45:67:cc:87:f2:28:
                    60:b3:52:92:42:83:36:51:53:49:3f:37:87:a8:5f:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:63:5E:EC:12:D2:8E:39:FB:16:E3:F1:F8:3B:F8:F5:A0:FB:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2748d80a-7f2b-498f-aef4-86077c891162/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2748d80a-7f2b-498f-aef4-86077c891162/4531168f68694b29e7e04725ceab8d88fc6eb313.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272155

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:3e:2d:82:f0:fb:0d:27:cc:aa:9f:e7:24:97:9b:35:1f:
         ee:74:db:f8:bf:bb:6f:fb:1c:9b:81:94:d2:97:47:6f:bd:68:
         0e:91:5c:3c:69:69:b6:db:e4:3a:bf:ef:8c:81:c8:40:d5:9c:
         7a:6d:77:18:0c:bc:99:cf:9b:3e:bc:d9:f9:d9:b4:42:db:31:
         96:2b:c4:45:4e:d4:3b:d8:72:de:b2:d9:4a:ae:3f:74:4b:d1:
         2f:4f:51:87:8f:97:42:5a:38:a1:f9:62:72:78:05:14:17:d3:
         1b:38:87:a3:e6:a0:1e:3b:7e:d5:43:a0:c2:a7:41:e4:b5:b3:
         aa:84:fb:d6:a3:07:71:06:32:e9:6e:ed:19:2d:06:1b:72:7b:
         3e:dc:68:f5:47:2e:e8:2b:f7:1e:d7:b1:e0:16:7e:ca:34:2e:
         f2:89:56:c2:39:66:4d:75:d8:fe:51:58:22:50:8b:a2:fc:15:
         d6:38:ab:4f:4c:e5:6e:34:8a:3d:f4:64:ab:0b:3f:8b:61:95:
         77:9a:21:84:c3:cb:65:ee:eb:32:26:0e:40:98:56:03:b6:65:
         37:0c:16:da:2b:a9:7c:b0:96:d0:1d:c8:83:e1:c1:7c:c2:e3:
         98:4b:6d:c0:1d:58:d8:98:19:ce:63:8e:46:20:ac:b5:82:69:
         dc:7b:d3:3b
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOZ/5TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxOTIyMjUxM1oXDTI0MDMyNDIxNDYx
OFowMzExMC8GA1UEAxMoNDUzMTE2OGY2ODY5NGIyOWU3ZTA0NzI1Y2VhYjhkODhm
YzZlYjMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKeG2gk3i6kh
WX50kMgdJNWWbTqsV7PUW0vfcnGtQR5ymDstkMnCHQANAfHu7IbMOT6gjcPqhTH/
LERaiKFnPoviXil/o7Zu80XRjDAeV76c5Ppq1R2W7j5DEMK/DIkypkrldft8YiRV
lkYmUeqdBabKjh5JhxgcJFsHvtFxyWJFHZkzpei63UH3ts+HsaEXgHOcqm5CbHaG
oGtGocmyq2ejntAv2vGacFHWGDXwH+1cUrXopn1GEQuiSE1VlgTT26SjI3AhQQPM
u73KaKWHUHUVD2hOI3/zuIpHVJ8XJ48tSWXIoqb/UeU3RWfMh/IoYLNSkkKDNlFT
ST83h6hf5k8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQGj2Ne7BLSjjn7FuPx+Dv4
9aD7bTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNzQ4ZDgwYS03ZjJi
LTQ5OGYtYWVmNC04NjA3N2M4OTExNjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjc0OGQ4MGEtN2YyYi00
OThmLWFlZjQtODYwNzdjODkxMTYyLzQ1MzExNjhmNjg2OTRiMjllN2UwNDcyNWNl
YWI4ZDg4ZmM2ZWIzMTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDCJAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCcbMA0GCSqGSIb3DQEBCwUAA4IBAQAl+j4tgvD7DSfMqp/nJJeb
NR/udNv4v7tv+xybgZTSl0dvvWgOkVw8aWm22+Q6v++MgchA1Zx6bXcYDLyZz5s+
vNn52bRC2zGWK8RFTtQ72HLestlKrj90S9EvT1GHj5dCWjih+WJyeAUUF9MbOIej
5qAeO37VQ6DCp0HktbOqhPvWowdxBjLpbu0ZLQYbcns+3Gj1Ry7oK/ce17HgFn7K
NC7yiVbCOWZNddj+UVgiUIui/BXWOKtPTOVuNIo99GSrCz+LYZV3miGEw8tl7usy
Jg5AmFYDtmU3DBbaK6l8sJbQHciD4cF8wuOYS23AHVjYmBnOY45GIKy1gmnce9M7
-----END CERTIFICATE-----