Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a07dffdabc0d233c208a3fc107d3671f631de6c.cer
File:                     4a07dffdabc0d233c208a3fc107d3671f631de6c.cer (raw, json)
Hash identifier:          YzAmpU9LLwAlArRpzmB6k9tK+UkhMPtcH7M99ZhM5MQ=
Subject key identifier:   32:6D:3D:BB:D8:7A:EE:0C:84:35:D0:8C:4F:9A:DF:AD:80:DC:4C:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9084A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d4e52fa2-c4bc-465f-981a-0c51249fecaa/4a07dffdabc0d233c208a3fc107d3671f631de6c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d4e52fa2-c4bc-465f-981a-0c51249fecaa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 23:20:44 +0000
Certificate not after:    Mon 09 Sep 2024 00:01:49 +0000
Subordinate resources:    AS: 272012
                          IP: 2803:3910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15272010 (0xe9084a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 23:20:44 2023 GMT
            Not After : Sep  9 00:01:49 2024 GMT
        Subject: CN=4a07dffdabc0d233c208a3fc107d3671f631de6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7b:d9:dd:d0:b6:60:15:8f:40:6a:29:fb:3f:
                    e5:e0:d7:d1:6e:db:4e:6f:21:e5:e3:9c:a6:9d:28:
                    9f:b8:66:4f:a4:cf:08:9e:61:ad:71:9b:d2:73:45:
                    ae:3e:05:85:13:f9:5f:2b:59:65:b5:ac:7a:a6:35:
                    9e:af:e5:37:24:bc:d3:78:95:fe:0b:f3:8c:5a:81:
                    40:19:d6:0c:7e:3c:85:1f:3b:0c:3f:4a:b0:d0:36:
                    6f:1d:61:84:ba:bb:b9:1f:3e:97:13:ff:28:6a:2f:
                    cd:82:94:8d:bc:68:c7:8d:2b:b4:38:57:85:d7:bf:
                    ac:88:b8:16:d4:24:7b:67:1e:f0:95:71:2e:3f:09:
                    cb:bb:98:c2:ac:b4:5e:47:0f:73:c9:a4:58:77:4f:
                    8a:e4:81:98:79:3a:18:dc:d8:aa:64:6b:af:fe:a6:
                    ce:7a:88:4d:7a:8d:13:03:bc:2a:1c:09:52:ca:3f:
                    27:59:ad:e2:d9:30:c7:52:3f:20:c0:f4:2e:9c:68:
                    7c:6a:fc:b7:12:bf:fd:fb:4b:37:5f:95:b1:33:26:
                    85:d2:87:1c:59:e5:ec:b7:3d:bd:6d:10:b5:27:0b:
                    97:81:39:b8:a9:93:62:b5:1c:9f:af:8c:50:d0:fe:
                    ec:42:67:0f:a8:bd:2a:b0:5b:19:b6:ef:8e:89:63:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:3D:BB:D8:7A:EE:0C:84:35:D0:8C:4F:9A:DF:AD:80:DC:4C:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d4e52fa2-c4bc-465f-981a-0c51249fecaa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d4e52fa2-c4bc-465f-981a-0c51249fecaa/4a07dffdabc0d233c208a3fc107d3671f631de6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272012

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:66:0f:5f:39:16:46:ed:75:d6:c3:64:26:28:46:d4:96:
         dd:c6:53:f9:42:74:68:d0:09:4e:24:6f:a1:a4:05:87:83:a0:
         df:de:ce:67:07:6f:02:6a:5c:f3:4e:a6:c4:bc:8b:4b:d8:c3:
         81:f8:84:af:af:13:db:a5:27:78:70:4d:7c:74:ac:23:58:c4:
         84:55:bc:57:06:ab:7f:25:a7:5e:eb:53:c4:e8:c0:8f:8f:d4:
         1d:85:57:9e:a5:d9:88:23:e4:f4:0f:b2:a3:88:58:c2:63:10:
         56:95:19:73:60:ed:7c:67:80:20:30:7f:62:85:c7:d1:84:5c:
         1e:35:a0:fe:ac:f1:94:a9:0e:c6:db:56:3c:26:eb:56:e5:5a:
         d4:ab:f2:18:9b:64:41:55:c3:4d:6a:99:08:5a:cc:76:5e:11:
         05:a8:d1:b1:bc:90:3f:d6:b6:63:64:2b:14:4a:61:ee:c8:04:
         9e:6e:6e:51:35:a1:75:cc:17:49:6f:e0:4e:c7:3a:6e:71:eb:
         bb:64:c9:8f:65:53:2e:49:48:b4:d5:1e:da:c0:04:69:84:76:
         8f:87:e2:71:16:c4:0f:b0:20:5f:29:72:4b:a4:9d:3f:b7:e8:
         4b:92:8a:be:9a:b2:ce:95:bb:a3:82:0a:28:10:cd:e4:fe:a2:
         2b:cd:b0:37
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOkISjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwODIzMjA0NFoXDTI0MDkwOTAwMDE0
OVowMzExMC8GA1UEAxMoNGEwN2RmZmRhYmMwZDIzM2MyMDhhM2ZjMTA3ZDM2NzFm
NjMxZGU2YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANx72d3QtmAV
j0BqKfs/5eDX0W7bTm8h5eOcpp0on7hmT6TPCJ5hrXGb0nNFrj4FhRP5XytZZbWs
eqY1nq/lNyS803iV/gvzjFqBQBnWDH48hR87DD9KsNA2bx1hhLq7uR8+lxP/KGov
zYKUjbxox40rtDhXhde/rIi4FtQke2ce8JVxLj8Jy7uYwqy0XkcPc8mkWHdPiuSB
mHk6GNzYqmRrr/6mznqITXqNEwO8KhwJUso/J1mt4tkwx1I/IMD0LpxofGr8txK/
/ftLN1+VsTMmhdKHHFnl7Lc9vW0QtScLl4E5uKmTYrUcn6+MUND+7EJnD6i9KrBb
GbbvjoljSI0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQybT272HruDIQ10IxPmt+t
gNxMFDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNGU1MmZhMi1jNGJj
LTQ2NWYtOTgxYS0wYzUxMjQ5ZmVjYWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDRlNTJmYTItYzRiYy00
NjVmLTk4MWEtMGM1MTI0OWZlY2FhLzRhMDdkZmZkYWJjMGQyMzNjMjA4YTNmYzEw
N2QzNjcxZjYzMWRlNmMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDORAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCaMMA0GCSqGSIb3DQEBCwUAA4IBAQBEPWYPXzkWRu111sNkJihG
1JbdxlP5QnRo0AlOJG+hpAWHg6Df3s5nB28CalzzTqbEvItL2MOB+ISvrxPbpSd4
cE18dKwjWMSEVbxXBqt/Jade61PE6MCPj9QdhVeepdmII+T0D7KjiFjCYxBWlRlz
YO18Z4AgMH9ihcfRhFweNaD+rPGUqQ7G21Y8JutW5VrUq/IYm2RBVcNNapkIWsx2
XhEFqNGxvJA/1rZjZCsUSmHuyASebm5RNaF1zBdJb+BOxzpuceu7ZMmPZVMuSUi0
1R7awARphHaPh+JxFsQPsCBfKXJLpJ0/t+hLkoq+mrLOlbujggooEM3k/qIrzbA3
-----END CERTIFICATE-----