Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b292ab24c997bcec5de7e4d55bc894e8dce33b0.cer
File:                     4b292ab24c997bcec5de7e4d55bc894e8dce33b0.cer (raw, json)
Hash identifier:          zzO4lhcQ+OfDeMfF0YsIlY2HQo7R1McYPpyYtpgj6x4=
Subject key identifier:   62:80:EA:FA:F4:48:03:2E:B3:E6:70:46:A5:D1:29:CF:C7:20:F4:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AA314
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/66effb10-da5a-4aae-b3be-9a138118e7ba/4b292ab24c997bcec5de7e4d55bc894e8dce33b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/66effb10-da5a-4aae-b3be-9a138118e7ba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 19:27:07 +0000
Certificate not after:    Fri 11 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 27679
                          AS: 28031

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17474324 (0x10aa314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 19:27:07 2024 GMT
            Not After : Apr 11 06:00:00 2025 GMT
        Subject: CN=4b292ab24c997bcec5de7e4d55bc894e8dce33b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:8a:b1:7a:bc:8c:12:fa:2a:c2:d6:b1:6c:
                    4d:71:7a:32:fb:fe:8f:0e:1d:42:ad:44:a6:84:3e:
                    45:87:49:4c:60:4a:9e:ca:87:e1:dd:e2:a5:88:61:
                    f4:24:23:cb:fa:b4:0e:24:02:83:0e:2e:e5:5c:a0:
                    0c:e7:8c:5e:47:19:fc:f6:77:15:4c:9f:1d:cb:d2:
                    67:c3:a8:15:56:7b:ac:03:7c:04:bf:b2:aa:71:a3:
                    6d:49:30:fe:a5:19:22:e7:d3:e7:54:5b:d5:4d:9f:
                    dd:bd:f8:a6:a8:9a:d2:ba:10:c0:0d:13:eb:cf:0d:
                    ef:80:0d:c5:1d:c1:53:d9:66:84:73:3f:39:b9:76:
                    fe:cb:03:b5:3a:c9:91:e1:b2:0f:76:46:bd:30:00:
                    e4:97:71:81:e5:1e:d2:86:fb:7d:71:0b:79:b1:0d:
                    74:f1:fa:bf:9a:f1:8a:9f:dc:a6:61:97:25:89:10:
                    e4:98:17:5f:46:ef:af:85:bf:04:7a:76:09:af:b5:
                    b4:6d:c4:a6:af:ec:a9:b9:80:f4:81:b6:2a:56:77:
                    e6:d5:30:4f:1f:8a:c0:9e:a1:fd:87:a3:a6:47:d9:
                    12:d4:35:57:53:04:3a:aa:be:55:bd:c8:e9:64:ac:
                    24:c6:75:25:c7:f8:cc:fe:ec:59:06:70:49:30:e2:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:EA:FA:F4:48:03:2E:B3:E6:70:46:A5:D1:29:CF:C7:20:F4:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/66effb10-da5a-4aae-b3be-9a138118e7ba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/66effb10-da5a-4aae-b3be-9a138118e7ba/4b292ab24c997bcec5de7e4d55bc894e8dce33b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27679
                  28031

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:cf:b1:73:8e:c5:62:fb:da:81:cc:46:1b:74:c0:01:bb:
         5c:12:00:cf:73:72:18:9b:e1:3f:99:c0:3a:a0:47:45:f2:f5:
         d1:c0:92:33:e2:6f:0f:93:a4:70:f4:ff:94:87:b7:db:71:96:
         e2:d0:64:c9:19:12:c7:a2:bc:d0:4a:8d:60:e4:bc:f3:83:4d:
         4e:1b:8a:71:ed:80:27:d2:18:94:24:b7:ca:fb:62:96:0d:ff:
         15:fd:50:59:18:71:8f:67:2c:0d:a1:50:eb:35:44:9d:07:ce:
         ac:62:85:ad:ec:fc:8d:01:cb:3d:4f:3b:10:b1:51:be:3e:f5:
         c4:7b:42:5d:9a:b9:2a:10:bf:cc:2d:8b:00:5f:bf:ed:43:65:
         fa:5c:cf:80:db:2e:b4:74:9c:d0:ce:03:d1:a6:e7:48:7e:01:
         b1:64:7d:42:f3:97:24:97:e2:b5:d6:5a:ab:27:ae:28:8d:09:
         cd:68:1c:fb:c3:ac:de:c9:68:66:0f:ca:77:a2:19:d8:64:f3:
         54:8d:fc:df:20:c1:b8:68:e3:bb:a6:9f:bc:8a:1b:02:c3:8b:
         21:86:5e:33:78:81:27:8e:fa:bf:0d:e2:80:b8:0b:88:cd:24:
         b8:16:b4:88:2b:37:3b:ac:14:ef:76:a7:e8:d1:77:e4:de:17:
         8e:fc:c7:4f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIEAQqjFDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIxNTE5MjcwN1oXDTI1MDQxMTA2MDAw
MFowMzExMC8GA1UEAxMoNGIyOTJhYjI0Yzk5N2JjZWM1ZGU3ZTRkNTViYzg5NGU4
ZGNlMzNiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALgmirF6vIwS
+irC1rFsTXF6Mvv+jw4dQq1EpoQ+RYdJTGBKnsqH4d3ipYhh9CQjy/q0DiQCgw4u
5VygDOeMXkcZ/PZ3FUyfHcvSZ8OoFVZ7rAN8BL+yqnGjbUkw/qUZIufT51Rb1U2f
3b34pqia0roQwA0T688N74ANxR3BU9lmhHM/Obl2/ssDtTrJkeGyD3ZGvTAA5Jdx
geUe0ob7fXELebENdPH6v5rxip/cpmGXJYkQ5JgXX0bvr4W/BHp2Ca+1tG3Epq/s
qbmA9IG2KlZ35tUwTx+KwJ6h/YejpkfZEtQ1V1MEOqq+Vb3I6WSsJMZ1Jcf4zP7s
WQZwSTDiXEECAwEAAaOCAtwwggLYMB0GA1UdDgQWBBRigOr69EgDLrPmcEal0SnP
xyD0/TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NmVmZmIxMC1kYTVh
LTRhYWUtYjNiZS05YTEzODExOGU3YmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjZlZmZiMTAtZGE1YS00
YWFlLWIzYmUtOWExMzgxMThlN2JhLzRiMjkyYWIyNGM5OTdiY2VjNWRlN2U0ZDU1
YmM4OTRlOGRjZTMzYjAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAd
BggrBgEFBQcBCAEB/wQOMAygCjAIAgJsHwICbX8wDQYJKoZIhvcNAQELBQADggEB
AB0Zz7FzjsVi+9qBzEYbdMABu1wSAM9zchib4T+ZwDqgR0Xy9dHAkjPibw+TpHD0
/5SHt9txluLQZMkZEseivNBKjWDkvPODTU4binHtgCfSGJQkt8r7YpYN/xX9UFkY
cY9nLA2hUOs1RJ0Hzqxiha3s/I0Byz1POxCxUb4+9cR7Ql2auSoQv8wtiwBfv+1D
Zfpcz4DbLrR0nNDOA9Gm50h+AbFkfULzlySX4rXWWqsnriiNCc1oHPvDrN7JaGYP
yneiGdhk81SN/N8gwbho47umn7yKGwLDiyGGXjN4gSeO+r8N4oC4C4jNJLgWtIgr
NzusFO92p+jRd+TeF478x08=
-----END CERTIFICATE-----