Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48126146df50dd3ef1d99365720bec4c3e56825d.cer
File:                     48126146df50dd3ef1d99365720bec4c3e56825d.cer (raw, json)
Hash identifier:          vXJVirN3saoxiLakUXPrh7KVDyppPsEiY4KEITPBWgY=
Subject key identifier:   6D:13:04:3A:1F:A1:90:BC:7F:65:85:C3:B3:77:25:CF:A0:FC:6A:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E61B91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b86f48d-4c07-4bfc-ad36-40d07ddafb5c/48126146df50dd3ef1d99365720bec4c3e56825d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b86f48d-4c07-4bfc-ad36-40d07ddafb5c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 23:42:54 +0000
Certificate not after:    Sun 20 Oct 2024 14:00:00 +0000
Subordinate resources:    AS: 263149
                          IP: 200.23.157.0 -- 200.23.158.255
                          IP: 2801:c4:90::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15080337 (0xe61b91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 18 23:42:54 2023 GMT
            Not After : Oct 20 14:00:00 2024 GMT
        Subject: CN=48126146df50dd3ef1d99365720bec4c3e56825d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ce:54:52:d5:a0:24:23:4e:41:d9:c3:4b:bc:
                    35:c7:c3:1e:7b:94:8e:1e:f1:bf:24:2c:46:0d:1f:
                    9e:6d:18:02:ef:20:97:be:87:ee:03:96:86:14:3b:
                    19:ac:ff:43:2b:58:a3:1e:cd:66:0a:a1:31:80:f6:
                    97:45:07:38:4f:3a:f8:ff:22:40:ea:5e:fd:9d:65:
                    53:7d:06:f2:8f:09:cc:0e:5b:e1:af:9e:73:90:16:
                    3e:d3:b0:37:f4:ab:1a:36:7b:8b:cb:87:91:f6:37:
                    ba:a9:4c:02:7a:7e:12:28:1f:14:23:d4:c5:53:fa:
                    6e:0a:c8:fa:17:02:8a:de:de:d5:a4:78:e0:5c:77:
                    bd:1e:26:d9:86:a6:47:76:b8:9a:5f:4d:f9:c0:f3:
                    34:52:90:c9:a6:67:20:bc:81:53:7f:aa:5b:4a:b3:
                    e3:85:a6:3a:5f:fb:6c:6d:80:c1:b8:14:e6:6c:dd:
                    1e:35:78:69:2c:18:b6:e4:17:ec:23:9c:c6:61:a4:
                    a0:53:03:db:4c:c7:4b:33:d4:26:0c:58:d7:71:7a:
                    bc:b8:39:9f:e8:f1:1f:10:79:e8:5b:8b:0d:4d:e4:
                    ab:6d:ad:07:c6:55:fb:18:cb:a8:ff:34:67:33:f4:
                    b2:7a:03:54:70:1d:fb:af:3f:ed:76:e7:66:5c:52:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:13:04:3A:1F:A1:90:BC:7F:65:85:C3:B3:77:25:CF:A0:FC:6A:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b86f48d-4c07-4bfc-ad36-40d07ddafb5c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b86f48d-4c07-4bfc-ad36-40d07ddafb5c/48126146df50dd3ef1d99365720bec4c3e56825d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.157.0-200.23.158.255
                IPv6:
                  2801:c4:90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263149

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:9e:f7:d5:04:1a:22:04:d0:02:74:c7:c9:46:a2:55:c2:
         b0:10:ac:a9:ac:e5:95:ec:bf:4f:1b:f9:f4:48:9a:b6:b3:c0:
         d3:47:73:ea:fd:00:e8:43:e7:ad:b7:0c:82:d7:51:7f:24:62:
         1a:c7:9a:4d:e6:f6:36:41:9d:e6:5a:c1:81:d2:9f:84:ec:5c:
         98:61:d2:fc:0a:41:23:30:a4:72:1d:1f:95:c0:55:5f:53:e9:
         24:57:56:1e:9d:30:0b:37:f7:02:ab:6e:37:1a:03:6f:b4:c0:
         76:99:61:cd:86:a0:26:74:05:b9:a4:61:6f:80:c7:25:db:8e:
         1c:be:31:2a:ab:40:72:63:ed:e3:33:86:e5:c0:01:5a:67:04:
         1c:d3:29:58:fd:c1:ff:a4:bb:84:1e:a3:99:fe:37:5b:1c:91:
         8e:57:49:94:49:a1:43:ee:03:1f:83:89:ba:07:a3:51:51:a4:
         42:5a:4b:04:d1:be:a6:af:76:1e:03:e2:6e:43:47:e7:fd:63:
         0c:30:80:eb:a9:76:d6:3a:f1:97:11:0c:e2:87:97:22:22:3c:
         9b:79:1f:50:0b:d2:b0:1c:c9:da:14:ee:28:7a:13:94:87:93:
         db:39:8d:e6:54:10:a3:e4:f4:51:32:81:1f:2b:6e:2c:e9:de:
         93:f2:23:28
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgIEAOYbkTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxODIzNDI1NFoXDTI0MTAyMDE0MDAw
MFowMzExMC8GA1UEAxMoNDgxMjYxNDZkZjUwZGQzZWYxZDk5MzY1NzIwYmVjNGMz
ZTU2ODI1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIfOVFLVoCQj
TkHZw0u8NcfDHnuUjh7xvyQsRg0fnm0YAu8gl76H7gOWhhQ7Gaz/QytYox7NZgqh
MYD2l0UHOE86+P8iQOpe/Z1lU30G8o8JzA5b4a+ec5AWPtOwN/SrGjZ7i8uHkfY3
uqlMAnp+EigfFCPUxVP6bgrI+hcCit7e1aR44Fx3vR4m2YamR3a4ml9N+cDzNFKQ
yaZnILyBU3+qW0qz44WmOl/7bG2AwbgU5mzdHjV4aSwYtuQX7COcxmGkoFMD20zH
SzPUJgxY13F6vLg5n+jxHxB56FuLDU3kq22tB8ZV+xjLqP80ZzP0snoDVHAd+68/
7XbnZlxSm+ECAwEAAaOCAxMwggMPMB0GA1UdDgQWBBRtEwQ6H6GQvH9lhcOzdyXP
oPxquDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84Yjg2ZjQ4ZC00YzA3
LTRiZmMtYWQzNi00MGQwN2RkYWZiNWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGI4NmY0OGQtNGMwNy00
YmZjLWFkMzYtNDBkMDdkZGFmYjVjLzQ4MTI2MTQ2ZGY1MGRkM2VmMWQ5OTM2NTcy
MGJlYzRjM2U1NjgyNWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwFAQCAAEwDjAMAwQAyBedAwQAyBeeMA8EAgACMAkD
BwAoAQDEAJAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPtMA0GCSqGSIb3DQEB
CwUAA4IBAQCuip731QQaIgTQAnTHyUaiVcKwEKyprOWV7L9PG/n0SJq2s8DTR3Pq
/QDoQ+ettwyC11F/JGIax5pN5vY2QZ3mWsGB0p+E7FyYYdL8CkEjMKRyHR+VwFVf
U+kkV1YenTALN/cCq243GgNvtMB2mWHNhqAmdAW5pGFvgMcl244cvjEqq0ByY+3j
M4blwAFaZwQc0ylY/cH/pLuEHqOZ/jdbHJGOV0mUSaFD7gMfg4m6B6NRUaRCWksE
0b6mr3YeA+JuQ0fn/WMMMIDrqXbWOvGXEQzih5ciIjybeR9QC9KwHMnaFO4oehOU
h5PbOY3mVBCj5PRRMoEfK24s6d6T8iMo
-----END CERTIFICATE-----