Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer
File:                     4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer (raw, json)
Hash identifier:          3cm/rCrlLFhaom93ZCkztoM/cP89+Ff7t7j0LbgQljc=
Subject key identifier:   6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E046D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Mar 2023 19:47:49 +0000
Certificate not after:    Mon 16 Dec 2024 15:54:51 +0000
Subordinate resources:    IP: 2801:179::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14698194 (0xe046d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  1 19:47:49 2023 GMT
            Not After : Dec 16 15:54:51 2024 GMT
        Subject: CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:57:57:39:77:20:3b:9a:84:4f:0d:4a:0c:
                    c0:dc:a8:69:14:58:7a:39:53:a6:20:60:6f:bd:3d:
                    57:dc:02:1f:24:77:75:79:78:3a:f1:11:f2:0a:d5:
                    20:b1:d5:aa:8f:7f:be:38:8e:33:a4:93:a7:cb:35:
                    2f:16:36:d5:6c:b9:25:88:55:bc:a3:a2:08:23:0d:
                    83:8d:26:77:24:08:e1:2f:8f:07:93:03:44:a3:2a:
                    89:71:2e:b3:e8:1e:dd:8b:cb:95:77:07:5a:08:bd:
                    cc:c4:c6:d9:1d:34:4b:e1:65:a0:2e:26:b9:bc:59:
                    e5:98:1a:42:20:a3:9c:e0:1a:74:1b:92:1d:c8:b5:
                    9f:b6:72:99:c8:9c:b4:5d:69:fe:3a:8f:82:1a:3a:
                    a5:e0:44:66:22:f9:45:e4:e2:0d:25:d2:05:35:06:
                    e1:e3:90:82:ff:d5:29:6e:11:25:1e:63:46:7b:e4:
                    a7:81:2b:50:20:2d:da:e2:5e:ed:e4:e7:f6:47:2b:
                    d5:ba:20:1b:98:32:a5:2c:24:b7:31:64:56:3d:ac:
                    95:d5:3f:1a:1c:ee:f5:26:6d:ff:d6:45:21:71:86:
                    d5:38:57:3f:6f:0c:3f:3b:e8:3b:1a:3c:df:98:b6:
                    e6:79:b8:92:8f:94:40:fd:79:60:e5:d8:eb:9b:8c:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:179::/44

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:85:0d:fd:0c:e7:c1:20:4f:8f:e9:ee:7b:37:e7:c8:ad:
         6c:0a:8f:7a:78:88:68:1b:86:e8:a3:ba:ef:a8:8a:40:d1:78:
         3a:09:1f:7e:a5:7f:d1:dd:ca:99:08:06:1b:71:4c:0b:41:44:
         5d:a6:30:a5:0b:4c:c9:24:f7:7c:e8:26:ac:84:98:1e:00:66:
         f3:ca:6c:0e:a4:7f:c5:ce:a1:b8:5b:94:a9:4b:87:76:4c:96:
         5f:f3:14:8c:b6:fa:9d:19:e6:b5:68:e8:0c:9f:cb:09:97:50:
         de:88:f4:b3:b2:62:a4:d9:dd:61:57:7d:61:57:8f:bb:e1:28:
         d9:05:f3:b3:4e:2a:b4:85:28:94:b6:3a:d9:c1:9c:14:95:a2:
         1c:86:23:97:fe:5d:64:30:ad:9e:3b:ae:d1:89:7c:de:fd:9c:
         53:27:7f:ec:3a:62:b9:13:7f:9e:0d:87:b5:5d:6e:19:4f:a6:
         0f:8b:69:6e:b3:47:9e:38:f3:09:6b:0d:95:82:c5:36:ec:c6:
         5d:60:bc:05:a8:fa:5b:f3:10:da:f5:73:12:e9:e9:4b:cc:4b:
         96:fd:b7:d1:3f:2f:05:1d:d5:9a:c3:ca:4f:9c:00:f2:74:2c:
         2b:8a:54:3d:a2:8b:fc:62:26:86:78:25:e5:d8:0c:76:dc:fe:
         19:8a:2b:24
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAOBG0jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDMwMTE5NDc0OVoXDTI0MTIxNjE1NTQ1
MVowMzExMC8GA1UEAxMoNDk5NGVlMGU1MmUxMjc3YTFmMjJhNWY5ODZlMjJkOTkx
NGRiNDdhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJliV1c5dyA7
moRPDUoMwNyoaRRYejlTpiBgb709V9wCHyR3dXl4OvER8grVILHVqo9/vjiOM6ST
p8s1LxY21Wy5JYhVvKOiCCMNg40mdyQI4S+PB5MDRKMqiXEus+ge3YvLlXcHWgi9
zMTG2R00S+FloC4mubxZ5ZgaQiCjnOAadBuSHci1n7ZymcictF1p/jqPgho6peBE
ZiL5ReTiDSXSBTUG4eOQgv/VKW4RJR5jRnvkp4ErUCAt2uJe7eTn9kcr1bogG5gy
pSwktzFkVj2sldU/Ghzu9SZt/9ZFIXGG1ThXP28MPzvoOxo835i25nm4ko+UQP15
YOXY65uMyKsCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBRqmyqwNsveaNgnGEMIeLN5
Z+/sFDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YTlmN2Y2MC0wZGRh
LTRmOGYtODFkMi0zOTBjZGM1ZWMxY2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWE5ZjdmNjAtMGRkYS00
ZjhmLTgxZDItMzkwY2RjNWVjMWNlLzQ5OTRlZTBlNTJlMTI3N2ExZjIyYTVmOTg2
ZTIyZDk5MTRkYjQ3YTkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAXkAADANBgkqhkiG9w0BAQsF
AAOCAQEAZgyFDf0M58EgT4/p7ns358itbAqPeniIaBuG6KO676iKQNF4OgkffqV/
0d3KmQgGG3FMC0FEXaYwpQtMyST3fOgmrISYHgBm88psDqR/xc6huFuUqUuHdkyW
X/MUjLb6nRnmtWjoDJ/LCZdQ3oj0s7JipNndYVd9YVePu+Eo2QXzs04qtIUolLY6
2cGcFJWiHIYjl/5dZDCtnjuu0Yl83v2cUyd/7DpiuRN/ng2HtV1uGU+mD4tpbrNH
njjzCWsNlYLFNuzGXWC8Baj6W/MQ2vVzEunpS8xLlv230T8vBR3VmsPKT5wA8nQs
K4pUPaKL/GImhngl5dgMdtz+GYorJA==
-----END CERTIFICATE-----