Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5715064e618633421a0e582feda9541e9f9d7ace.cer
File:                     5715064e618633421a0e582feda9541e9f9d7ace.cer (raw, json)
Hash identifier:          ahevZyRpOjfpQmKxmjSJW+7IYpdfkQOXehL/2Cfsba0=
Subject key identifier:   28:6B:FD:BD:F9:B2:14:0D:3B:6C:69:8E:FF:1E:CE:21:EE:54:2C:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEDA53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02944966-3020-4582-a6cf-73c4538d5aba/5715064e618633421a0e582feda9541e9f9d7ace.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02944966-3020-4582-a6cf-73c4538d5aba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 15:45:20 +0000
Certificate not after:    Wed 23 Oct 2024 21:13:33 +0000
Subordinate resources:    IP: 2801:176::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15653459 (0xeeda53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 15:45:20 2023 GMT
            Not After : Oct 23 21:13:33 2024 GMT
        Subject: CN=5715064e618633421a0e582feda9541e9f9d7ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:f6:d5:26:60:f1:20:66:67:f9:1d:b4:dd:
                    17:f7:ed:4f:1c:45:02:51:b2:53:cc:b9:02:d6:18:
                    8a:a4:a8:03:8e:3e:ab:9b:b7:54:c6:57:86:35:3b:
                    ee:ee:06:19:3d:dc:28:79:61:32:e5:19:25:fe:0e:
                    b9:fe:74:1c:64:87:bd:c9:f6:37:d8:da:ea:ab:1c:
                    0b:4f:0d:25:0d:bb:5b:59:b3:eb:35:b4:84:74:ff:
                    df:4c:5b:54:f3:4b:de:e8:85:23:d6:81:ad:71:c2:
                    cb:11:75:aa:d4:18:9c:8f:c7:53:45:48:a6:2f:81:
                    d9:26:d5:0b:1d:6e:fe:39:6e:d2:7a:de:41:7d:fd:
                    26:f7:11:c3:5c:3f:e3:16:68:60:9f:d7:e4:9a:68:
                    78:50:e4:38:53:51:c1:61:56:bf:4e:ca:a0:a4:8b:
                    0a:d3:78:21:48:1e:3c:79:ce:27:2e:d2:94:38:4e:
                    a3:30:48:09:a0:c2:38:66:a0:3a:8b:1d:fb:a4:05:
                    5f:81:9f:1c:b0:92:92:2a:83:99:58:8a:ed:95:20:
                    e7:fd:26:fd:bb:aa:d9:c5:bb:d2:ca:df:5b:51:89:
                    57:6d:2c:19:74:5e:45:73:4d:35:6d:30:86:fe:35:
                    c4:b6:33:2e:a6:70:c7:72:9f:9f:be:11:44:44:b0:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:FD:BD:F9:B2:14:0D:3B:6C:69:8E:FF:1E:CE:21:EE:54:2C:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02944966-3020-4582-a6cf-73c4538d5aba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02944966-3020-4582-a6cf-73c4538d5aba/5715064e618633421a0e582feda9541e9f9d7ace.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:176::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:ea:12:37:cb:f7:cb:d1:88:84:d4:23:09:49:28:9f:9f:
         7a:85:0b:b7:85:67:39:39:bf:cb:68:a0:3a:58:d7:53:1f:30:
         7f:f0:fd:8f:dd:20:2a:7f:c0:c3:88:db:95:30:22:a4:05:98:
         c3:be:d6:b2:70:7f:36:07:bd:9d:d4:2b:2f:ef:51:61:c7:e1:
         30:3b:cf:b7:86:e5:1a:18:6d:77:f3:f8:29:05:55:66:6f:8c:
         cc:00:50:db:d6:d7:57:c7:06:db:59:52:70:1e:91:30:4d:67:
         1c:3b:c7:c8:41:5e:e5:9e:da:6c:06:dc:ce:14:77:70:b8:0c:
         d6:f6:6d:d8:be:f2:ed:9d:92:e5:b4:61:c6:d1:06:e7:2c:17:
         3b:41:08:57:b3:25:92:0c:4d:46:fe:6e:37:e9:95:aa:66:5f:
         34:2b:01:ac:24:90:5a:5b:32:0c:f0:8b:cd:3a:94:0b:09:b4:
         bc:4d:31:5d:70:95:e3:0c:ec:fc:26:65:04:db:a8:bb:02:96:
         f0:00:2a:d8:36:4b:e2:31:d4:22:d3:d5:ad:16:05:02:cc:e9:
         43:90:e7:8a:af:de:23:97:d2:17:df:84:d2:aa:7b:ca:39:f5:
         a4:0a:c9:7e:ef:a1:6d:c5:1e:6a:55:03:c3:2a:53:3d:d3:e2:
         d1:2d:38:1d
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAO7aUzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyMTE1NDUyMFoXDTI0MTAyMzIxMTMz
M1owMzExMC8GA1UEAxMoNTcxNTA2NGU2MTg2MzM0MjFhMGU1ODJmZWRhOTU0MWU5
ZjlkN2FjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQl9tUmYPEg
Zmf5HbTdF/ftTxxFAlGyU8y5AtYYiqSoA44+q5u3VMZXhjU77u4GGT3cKHlhMuUZ
Jf4Ouf50HGSHvcn2N9ja6qscC08NJQ27W1mz6zW0hHT/30xbVPNL3uiFI9aBrXHC
yxF1qtQYnI/HU0VIpi+B2SbVCx1u/jlu0nreQX39JvcRw1w/4xZoYJ/X5JpoeFDk
OFNRwWFWv07KoKSLCtN4IUgePHnOJy7SlDhOozBICaDCOGagOosd+6QFX4GfHLCS
kiqDmViK7ZUg5/0m/buq2cW70srfW1GJV20sGXReRXNNNW0whv41xLYzLqZwx3Kf
n74RRESwbmkCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQoa/29+bIUDTtsaY7/Hs4h
7lQsuTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMjk0NDk2Ni0zMDIw
LTQ1ODItYTZjZi03M2M0NTM4ZDVhYmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDI5NDQ5NjYtMzAyMC00
NTgyLWE2Y2YtNzNjNDUzOGQ1YWJhLzU3MTUwNjRlNjE4NjMzNDIxYTBlNTgyZmVk
YTk1NDFlOWY5ZDdhY2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAXYAADANBgkqhkiG9w0BAQsF
AAOCAQEAPYXqEjfL98vRiITUIwlJKJ+feoULt4VnOTm/y2igOljXUx8wf/D9j90g
Kn/Aw4jblTAipAWYw77WsnB/Nge9ndQrL+9RYcfhMDvPt4blGhhtd/P4KQVVZm+M
zABQ29bXV8cG21lScB6RME1nHDvHyEFe5Z7abAbczhR3cLgM1vZt2L7y7Z2S5bRh
xtEG5ywXO0EIV7MlkgxNRv5uN+mVqmZfNCsBrCSQWlsyDPCLzTqUCwm0vE0xXXCV
4wzs/CZlBNuouwKW8AAq2DZL4jHUItPVrRYFAszpQ5Dniq/eI5fSF9+E0qp7yjn1
pArJfu+hbcUealUDwypTPdPi0S04HQ==
-----END CERTIFICATE-----