Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e42c08b06a64276483ab8de87eeb84dbbd9163f.cer
File:                     4e42c08b06a64276483ab8de87eeb84dbbd9163f.cer (raw, json)
Hash identifier:          TnJYbVn+cz0HNTmpVsfIhOceP22YlIVU2hsD8+xI9bY=
Subject key identifier:   F5:9E:30:AB:05:7E:E4:E2:B0:E0:37:70:E0:20:E2:26:6A:47:35:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010ABDE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cba5d002-b355-4a44-812f-4e95148eee97/4e42c08b06a64276483ab8de87eeb84dbbd9163f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cba5d002-b355-4a44-812f-4e95148eee97/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 15:21:35 +0000
Certificate not after:    Sun 17 Aug 2025 14:46:33 +0000
Subordinate resources:    AS: 273360
                          IP: 2804:8d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17481190 (0x10abde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 16 15:21:35 2024 GMT
            Not After : Aug 17 14:46:33 2025 GMT
        Subject: CN=4e42c08b06a64276483ab8de87eeb84dbbd9163f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:34:76:e2:a0:21:80:06:be:22:a6:de:e0:
                    e3:bc:5c:70:ca:72:da:3f:84:54:07:ed:11:69:b4:
                    18:dc:3a:22:15:83:6b:43:b8:64:eb:b6:35:5f:67:
                    53:6e:45:37:e5:d0:98:89:97:c8:f1:34:ed:18:cd:
                    d6:68:28:be:fa:d6:39:00:92:ab:e4:82:61:9a:21:
                    29:5e:27:4d:0f:8b:8a:e6:8e:41:c8:98:58:78:53:
                    6f:c5:d6:c6:66:d3:4f:2e:d0:61:50:9b:1b:21:13:
                    5b:dd:dc:09:32:09:7b:0e:57:d4:fd:0f:dc:3a:51:
                    78:01:8e:dc:ff:65:bf:04:ea:e4:b4:80:32:da:2f:
                    b1:bd:94:3c:41:ec:67:0e:52:2f:a4:0d:05:92:a0:
                    26:c5:c6:cb:04:0d:c1:e0:81:98:1b:12:9a:35:e2:
                    e1:a3:43:7b:e6:6e:84:e9:ab:79:ac:b2:f8:60:80:
                    3c:8c:e5:55:80:20:4a:c0:42:01:67:0a:8a:bb:a0:
                    6c:00:d2:b1:d9:11:86:bd:96:02:26:fa:2e:98:b3:
                    8d:58:bc:82:5d:09:39:60:e6:06:c0:e2:3f:7b:37:
                    66:3e:9c:8d:45:2c:85:dd:1c:a6:6f:2f:d1:38:d1:
                    8b:9c:5c:58:11:3c:1c:a7:bf:c0:9b:f4:a1:22:60:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:30:AB:05:7E:E4:E2:B0:E0:37:70:E0:20:E2:26:6A:47:35:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cba5d002-b355-4a44-812f-4e95148eee97/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cba5d002-b355-4a44-812f-4e95148eee97/4e42c08b06a64276483ab8de87eeb84dbbd9163f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273360

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:62:fb:f7:88:b2:7c:d3:9f:70:96:86:de:c1:f8:b1:a1:
         52:a0:2e:ee:09:63:fa:04:68:fd:38:84:ce:be:af:7d:14:67:
         67:57:aa:70:97:a4:68:39:ff:56:ee:18:fc:ff:34:b2:17:25:
         d6:c7:01:f6:3f:8b:a5:b1:45:b8:b8:fe:e2:fd:55:4f:d7:c8:
         c1:7f:0d:5c:17:29:5f:1b:73:5e:83:05:fd:6b:cb:aa:32:e6:
         02:82:f0:fb:24:90:a8:fa:08:cc:59:0f:e7:39:1a:a9:ae:12:
         7c:db:09:5a:d6:06:a5:67:e4:20:2f:bb:a3:41:81:24:85:0f:
         42:e7:b4:80:6f:2c:74:13:22:61:f0:30:fc:2f:ab:53:7c:87:
         43:00:39:29:09:53:3f:a2:8d:ad:db:d8:cd:3a:fc:d1:4f:75:
         1e:8b:0b:04:6f:d7:70:ab:80:73:90:de:74:0c:24:3b:04:13:
         d9:33:6b:38:d6:11:df:02:1d:a5:a8:f8:74:85:39:38:3d:83:
         46:dd:a3:ba:9b:69:14:6d:dc:34:42:c8:ab:21:78:63:b6:ee:
         0d:39:07:33:08:dd:86:0e:11:f5:dc:22:0c:29:21:63:4d:ff:
         b1:a3:9a:7a:4e:70:47:f7:3f:6b:fd:c7:76:9c:9b:c7:3a:a4:
         b7:bf:ca:ca
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQq95jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIxNjE1MjEzNVoXDTI1MDgxNzE0NDYz
M1owMzExMC8GA1UEAxMoNGU0MmMwOGIwNmE2NDI3NjQ4M2FiOGRlODdlZWI4NGRi
YmQ5MTYzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfyNHbioCGA
Br4ipt7g47xccMpy2j+EVAftEWm0GNw6IhWDa0O4ZOu2NV9nU25FN+XQmImXyPE0
7RjN1mgovvrWOQCSq+SCYZohKV4nTQ+LiuaOQciYWHhTb8XWxmbTTy7QYVCbGyET
W93cCTIJew5X1P0P3DpReAGO3P9lvwTq5LSAMtovsb2UPEHsZw5SL6QNBZKgJsXG
ywQNweCBmBsSmjXi4aNDe+ZuhOmreayy+GCAPIzlVYAgSsBCAWcKirugbADSsdkR
hr2WAib6LpizjVi8gl0JOWDmBsDiP3s3Zj6cjUUshd0cpm8v0TjRi5xcWBE8HKe/
wJv0oSJgqJECAwEAAaOCAvswggL3MB0GA1UdDgQWBBT1njCrBX7k4rDgN3DgIOIm
akc1+TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYmE1ZDAwMi1iMzU1
LTRhNDQtODEyZi00ZTk1MTQ4ZWVlOTcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2JhNWQwMDItYjM1NS00
YTQ0LTgxMmYtNGU5NTE0OGVlZTk3LzRlNDJjMDhiMDZhNjQyNzY0ODNhYjhkZTg3
ZWViODRkYmJkOTE2M2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEjXwwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCvQMA0GCSqGSIb3DQEBCwUAA4IBAQBKpmL794iyfNOfcJaG3sH4
saFSoC7uCWP6BGj9OITOvq99FGdnV6pwl6RoOf9W7hj8/zSyFyXWxwH2P4ulsUW4
uP7i/VVP18jBfw1cFylfG3NegwX9a8uqMuYCgvD7JJCo+gjMWQ/nORqprhJ82wla
1galZ+QgL7ujQYEkhQ9C57SAbyx0EyJh8DD8L6tTfIdDADkpCVM/oo2t29jNOvzR
T3UeiwsEb9dwq4BzkN50DCQ7BBPZM2s41hHfAh2lqPh0hTk4PYNG3aO6m2kUbdw0
QsirIXhjtu4NOQczCN2GDhH13CIMKSFjTf+xo5p6TnBH9z9r/cd2nJvHOqS3v8rK
-----END CERTIFICATE-----