Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c76dfe6832d28ce49a16b84a719874f801ebe5c.cer
File:                     4c76dfe6832d28ce49a16b84a719874f801ebe5c.cer (raw, json)
Hash identifier:          t+Ik7vWR9euqBuDmqPbX4Kt+J/cH5m7sq/8onEKD6vY=
Subject key identifier:   72:71:BB:93:E1:72:48:85:5C:66:B3:1D:E2:11:CC:D6:5E:FF:1A:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B556F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/4c76dfe6832d28ce49a16b84a719874f801ebe5c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 17:57:28 +0000
Certificate not after:    Fri 04 Jul 2025 06:00:00 +0000
Subordinate resources:    AS: 273078
                          IP: 2803:9a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17519983 (0x10b556f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 21 17:57:28 2024 GMT
            Not After : Jul  4 06:00:00 2025 GMT
        Subject: CN=4c76dfe6832d28ce49a16b84a719874f801ebe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:1b:95:32:b8:52:83:90:1f:dd:6f:fd:b2:
                    7e:01:c3:25:8a:10:fd:f7:8c:3f:f7:4d:5d:2c:8e:
                    e2:4f:eb:d1:73:fd:bd:1f:98:f6:83:7b:5b:62:24:
                    57:a9:6b:65:ef:ec:0a:ff:73:8e:09:14:c8:db:3d:
                    54:58:60:ab:90:a9:a4:a0:10:92:91:36:4e:6e:89:
                    48:78:d8:02:fa:01:1b:a9:58:15:49:7e:92:0a:22:
                    08:0f:86:68:ff:ea:37:d5:df:ad:36:86:6a:68:e3:
                    32:52:d6:5c:2a:13:8d:f5:c2:01:ae:36:7b:ba:d8:
                    87:e6:05:85:ab:cd:05:9f:3a:54:17:e6:be:0f:c4:
                    4a:5e:01:c1:7c:f4:23:1b:01:76:2c:3a:a1:dd:4d:
                    09:0a:9f:2a:ea:47:d4:2c:95:13:7c:03:d9:f2:b5:
                    70:d1:69:c1:f3:3f:a1:f6:17:f8:91:7f:71:b9:d1:
                    8c:f9:7e:72:01:f4:00:1c:64:a9:ac:7b:84:f2:ac:
                    a8:4f:8d:d2:47:92:b7:3c:f3:36:61:16:73:e6:16:
                    cf:7a:64:94:48:22:9c:87:88:1c:60:2e:be:d8:ad:
                    8e:4a:0f:58:59:1c:62:75:e4:8e:c9:a9:06:29:32:
                    7c:e9:25:1c:ab:aa:9b:c1:b5:f8:67:d3:a5:2f:74:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:BB:93:E1:72:48:85:5C:66:B3:1D:E2:11:CC:D6:5E:FF:1A:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/4c76dfe6832d28ce49a16b84a719874f801ebe5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273078

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:03:14:4c:a1:7f:b5:e8:13:88:e7:ee:4c:c3:81:8d:52:
         f1:1e:73:20:18:71:55:f9:4a:43:68:fc:22:d4:c1:2b:0e:e1:
         47:08:81:6a:73:24:d3:09:4a:1f:95:6a:64:41:56:12:30:25:
         1e:52:97:e3:93:76:a3:26:db:86:a1:6e:9a:e8:eb:03:0f:02:
         16:f2:4e:a2:d3:56:60:27:cf:9d:60:10:94:fc:e1:59:cb:ef:
         20:aa:27:73:69:6b:9f:40:e7:91:ab:67:07:bb:c4:0c:71:cf:
         40:21:f1:eb:21:06:83:c0:8b:b2:f6:3a:6a:e3:ab:47:6e:30:
         0d:c0:14:1a:16:bf:02:d8:13:49:80:4a:53:40:b4:b5:48:eb:
         f1:a4:ce:98:be:ab:ee:dc:bd:96:bf:74:69:f0:ce:cf:58:94:
         1f:e2:1e:33:18:82:a9:6f:87:7e:7b:70:f1:e0:75:96:d5:46:
         65:29:30:fd:c2:7a:54:96:75:5a:f5:48:db:20:81:1e:81:3a:
         e2:ea:a1:14:ae:c0:fb:90:e4:55:af:61:4a:5e:e2:ff:3e:27:
         84:f2:b6:dc:66:f9:a1:08:1b:95:c2:20:73:c0:57:1e:25:1f:
         c6:eb:c8:d9:1e:ea:fe:eb:30:c7:67:75:f0:59:eb:cb:cb:15:
         b5:b1:af:4d
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQtVbzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyMTE3NTcyOFoXDTI1MDcwNDA2MDAw
MFowMzExMC8GA1UEAxMoNGM3NmRmZTY4MzJkMjhjZTQ5YTE2Yjg0YTcxOTg3NGY4
MDFlYmU1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJVG5UyuFKD
kB/db/2yfgHDJYoQ/feMP/dNXSyO4k/r0XP9vR+Y9oN7W2IkV6lrZe/sCv9zjgkU
yNs9VFhgq5CppKAQkpE2Tm6JSHjYAvoBG6lYFUl+kgoiCA+GaP/qN9XfrTaGamjj
MlLWXCoTjfXCAa42e7rYh+YFhavNBZ86VBfmvg/ESl4BwXz0IxsBdiw6od1NCQqf
KupH1CyVE3wD2fK1cNFpwfM/ofYX+JF/cbnRjPl+cgH0ABxkqax7hPKsqE+N0keS
tzzzNmEWc+YWz3pklEginIeIHGAuvtitjkoPWFkcYnXkjsmpBikyfOklHKuqm8G1
+GfTpS905NUCAwEAAaOCAvswggL3MB0GA1UdDgQWBBRycbuT4XJIhVxmsx3iEczW
Xv8amDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNWEzZTg5OS1mODMw
LTQ5YTYtODQ5OS1kZjhiMTc2MTBhNmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjVhM2U4OTktZjgzMC00
OWE2LTg0OTktZGY4YjE3NjEwYTZmLzRjNzZkZmU2ODMyZDI4Y2U0OWExNmI4NGE3
MTk4NzRmODAxZWJlNWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDmlAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCq2MA0GCSqGSIb3DQEBCwUAA4IBAQA6fwMUTKF/tegTiOfuTMOB
jVLxHnMgGHFV+UpDaPwi1MErDuFHCIFqcyTTCUoflWpkQVYSMCUeUpfjk3ajJtuG
oW6a6OsDDwIW8k6i01ZgJ8+dYBCU/OFZy+8gqidzaWufQOeRq2cHu8QMcc9AIfHr
IQaDwIuy9jpq46tHbjANwBQaFr8C2BNJgEpTQLS1SOvxpM6Yvqvu3L2Wv3Rp8M7P
WJQf4h4zGIKpb4d+e3Dx4HWW1UZlKTD9wnpUlnVa9UjbIIEegTri6qEUrsD7kORV
r2FKXuL/PieE8rbcZvmhCBuVwiBzwFceJR/G68jZHur+6zDHZ3XwWevLyxW1sa9N
-----END CERTIFICATE-----