Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ada0a2f21838106a124d124c7661f8e3ae4a301.cer
File:                     4ada0a2f21838106a124d124c7661f8e3ae4a301.cer (raw, json)
Hash identifier:          rIjGuUi5217EUIuIhVXjuMnMWJdHfUPHruaTpVLGVgw=
Subject key identifier:   36:6E:ED:C6:35:E1:A2:D8:AD:B2:DF:95:09:B2:C3:AC:AD:1D:6B:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100E749
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4ff0932-c94d-4aac-a219-9280ffddff87/4ada0a2f21838106a124d124c7661f8e3ae4a301.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4ff0932-c94d-4aac-a219-9280ffddff87/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 13:29:22 +0000
Certificate not after:    Thu 21 Aug 2025 02:06:26 +0000
Subordinate resources:    AS: 273107
                          IP: 2803:8850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16836425 (0x100e749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 13:29:22 2023 GMT
            Not After : Aug 21 02:06:26 2025 GMT
        Subject: CN=4ada0a2f21838106a124d124c7661f8e3ae4a301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:dd:2e:43:75:fb:d5:86:c9:c3:1a:16:4d:
                    35:93:b6:d3:75:1f:e8:c5:d2:d2:36:5f:71:c1:64:
                    25:72:84:97:2c:1d:1f:e0:57:1f:26:51:03:be:fe:
                    d5:be:ae:43:f9:f8:69:dd:9e:73:96:47:80:00:93:
                    7f:38:b5:31:d3:83:cb:30:19:52:81:ac:e4:80:ea:
                    19:21:39:49:21:af:dc:ce:f9:0e:cd:97:e8:a5:5c:
                    a7:1f:a1:4f:12:ab:7a:6f:64:15:a9:95:f6:0e:ac:
                    05:3e:d8:9d:0c:dd:4d:e7:9e:5f:49:e8:fa:8d:c2:
                    00:4c:71:67:df:7a:6a:79:ca:0c:d1:34:78:4c:67:
                    19:34:6f:00:a3:4e:c1:c4:d9:7c:0a:80:fe:22:dc:
                    5d:ab:5d:ef:8e:dc:f8:0e:d6:1d:cd:a3:7b:f9:ad:
                    60:55:19:dd:04:c6:86:91:0a:0f:b4:38:4a:fb:a6:
                    85:54:63:c5:af:b9:44:93:4d:b4:91:fc:52:98:18:
                    65:44:70:06:2f:ed:dd:c2:da:6a:48:2e:42:8f:20:
                    f8:ec:4c:e6:a1:f7:2d:f1:44:64:18:46:c1:80:e9:
                    a3:58:c3:a3:fe:d2:31:12:a8:a8:16:9d:ff:a9:ed:
                    10:57:e9:d8:0e:c7:92:73:31:4a:ef:d9:0e:51:82:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:ED:C6:35:E1:A2:D8:AD:B2:DF:95:09:B2:C3:AC:AD:1D:6B:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ff0932-c94d-4aac-a219-9280ffddff87/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ff0932-c94d-4aac-a219-9280ffddff87/4ada0a2f21838106a124d124c7661f8e3ae4a301.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273107

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:98:0c:bc:49:b1:8b:23:11:ab:6c:12:ab:ec:64:c7:b9:
         00:0e:c1:c5:8a:ce:28:fd:4a:32:d4:b9:a4:3b:a5:34:5d:fc:
         a7:72:d0:54:81:7e:d7:c1:af:19:e3:c8:2f:7d:b7:e3:54:ff:
         d2:39:1b:28:12:54:0d:1c:9c:95:ed:ae:36:b9:17:f3:0a:33:
         8d:50:99:bb:89:85:be:fa:d4:2d:99:fe:b8:f0:ab:47:22:d4:
         af:dc:57:79:87:b5:0f:d4:db:18:ed:35:73:09:e2:e4:04:eb:
         b5:38:49:4b:db:d6:e2:02:75:6e:86:84:52:32:2f:c2:b5:38:
         20:2f:61:bb:af:66:f0:4c:79:4c:ae:98:6b:a4:29:26:f3:c1:
         7e:40:45:da:eb:c0:07:dd:15:37:3f:f1:95:cc:d5:31:38:a3:
         f1:4f:b8:be:30:c2:7b:a8:1e:f6:d1:fc:45:b2:9e:8e:65:9f:
         c4:64:38:88:44:04:ed:79:0c:b8:ae:03:e7:4f:5b:81:14:50:
         9f:ae:cb:09:38:a7:d0:fd:4a:dd:31:16:99:19:69:57:10:b5:
         b0:c5:06:fa:9f:15:f2:ff:d1:7c:77:c0:e8:7f:bd:8d:a5:4f:
         ba:da:92:f0:de:e2:25:fd:45:9a:3a:43:39:dc:c5:81:4b:cb:
         6c:e0:1e:b8
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQDnSTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTExMDEzMjkyMloXDTI1MDgyMTAyMDYy
NlowMzExMC8GA1UEAxMoNGFkYTBhMmYyMTgzODEwNmExMjRkMTI0Yzc2NjFmOGUz
YWU0YTMwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrC3S5DdfvV
hsnDGhZNNZO203Uf6MXS0jZfccFkJXKElywdH+BXHyZRA77+1b6uQ/n4ad2ec5ZH
gACTfzi1MdODyzAZUoGs5IDqGSE5SSGv3M75Ds2X6KVcpx+hTxKrem9kFamV9g6s
BT7YnQzdTeeeX0no+o3CAExxZ996annKDNE0eExnGTRvAKNOwcTZfAqA/iLcXatd
747c+A7WHc2je/mtYFUZ3QTGhpEKD7Q4SvumhVRjxa+5RJNNtJH8UpgYZURwBi/t
3cLaakguQo8g+OxM5qH3LfFEZBhGwYDpo1jDo/7SMRKoqBad/6ntEFfp2A7HknMx
Su/ZDlGChgcCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQ2bu3GNeGi2K2y35UJssOs
rR1r5zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lNGZmMDkzMi1jOTRk
LTRhYWMtYTIxOS05MjgwZmZkZGZmODcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTRmZjA5MzItYzk0ZC00
YWFjLWEyMTktOTI4MGZmZGRmZjg3LzRhZGEwYTJmMjE4MzgxMDZhMTI0ZDEyNGM3
NjYxZjhlM2FlNGEzMDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDiFAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCrTMA0GCSqGSIb3DQEBCwUAA4IBAQBW/5gMvEmxiyMRq2wSq+xk
x7kADsHFis4o/Uoy1LmkO6U0XfynctBUgX7Xwa8Z48gvfbfjVP/SORsoElQNHJyV
7a42uRfzCjONUJm7iYW++tQtmf648KtHItSv3Fd5h7UP1NsY7TVzCeLkBOu1OElL
29biAnVuhoRSMi/CtTggL2G7r2bwTHlMrphrpCkm88F+QEXa68AH3RU3P/GVzNUx
OKPxT7i+MMJ7qB720fxFsp6OZZ/EZDiIRATteQy4rgPnT1uBFFCfrssJOKfQ/Urd
MRaZGWlXELWwxQb6nxXy/9F8d8Dof72NpU+62pLw3uIl/UWaOkM53MWBS8ts4B64
-----END CERTIFICATE-----