Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58d7fd1e1831122b711403dc02afdbacc235ee2e.cer
File:                     58d7fd1e1831122b711403dc02afdbacc235ee2e.cer (raw, json)
Hash identifier:          AQmWlJs2GYe/G36b71rVSnRTOBnt3nz+QU71RCnE7ug=
Subject key identifier:   8E:E0:B0:CA:62:83:B9:A3:24:42:A8:3F:F2:57:B5:78:06:8E:29:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9EAEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed446089-e2f1-4329-aea9-d7ce9546c215/58d7fd1e1831122b711403dc02afdbacc235ee2e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed446089-e2f1-4329-aea9-d7ce9546c215/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 21:26:06 +0000
Certificate not after:    Fri 22 Nov 2024 17:10:00 +0000
Subordinate resources:    IP: 2801:1ca::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15330027 (0xe9eaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 21:26:06 2023 GMT
            Not After : Nov 22 17:10:00 2024 GMT
        Subject: CN=58d7fd1e1831122b711403dc02afdbacc235ee2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:e4:90:05:d8:49:0e:d1:e2:9b:64:8f:33:
                    d5:5f:19:d6:8c:bd:95:0f:cb:3b:3d:78:9d:0f:b3:
                    b2:c2:ca:30:c2:48:a5:08:a0:3a:8a:74:57:00:3c:
                    68:cd:99:e8:94:f3:71:88:2b:73:1e:0c:7c:dc:03:
                    6e:93:29:5e:70:b9:fc:dc:e3:9d:4a:62:92:86:73:
                    03:76:80:51:6c:b7:60:d9:45:cf:12:b6:02:2e:54:
                    26:1f:f2:8e:3f:b7:07:0a:7b:ed:df:e4:ed:a5:81:
                    b9:e2:88:2d:e7:f7:55:fd:5d:1c:de:26:31:2e:ad:
                    5c:7b:e0:92:68:3e:73:82:54:25:cb:8f:99:46:34:
                    11:12:d5:fe:9b:5e:22:8a:6e:38:c4:54:78:80:5b:
                    7c:8d:20:6a:a6:7b:66:0c:36:df:d9:76:68:2d:f7:
                    04:75:09:c2:de:94:4a:8d:68:fb:a9:7c:ff:69:89:
                    3a:7e:17:f2:c4:fb:8c:42:15:f5:d0:54:39:02:6c:
                    3b:ed:3a:d1:b7:b4:e7:31:1c:13:64:8a:81:3d:2a:
                    c3:7c:6c:e1:31:1f:8c:02:c0:f3:59:c6:58:67:97:
                    d1:6f:fb:12:86:df:0b:d1:2b:18:3e:61:3e:73:e5:
                    b4:10:78:ae:62:46:6a:92:d0:d2:22:b7:e3:3c:41:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:B0:CA:62:83:B9:A3:24:42:A8:3F:F2:57:B5:78:06:8E:29:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed446089-e2f1-4329-aea9-d7ce9546c215/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed446089-e2f1-4329-aea9-d7ce9546c215/58d7fd1e1831122b711403dc02afdbacc235ee2e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ca::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:97:6e:64:2f:54:19:6f:9b:2b:44:05:61:3e:e1:c3:0b:
         ef:8a:f2:28:8d:0e:7e:c7:12:73:8d:62:f4:bd:69:9a:86:8f:
         03:51:62:09:06:11:46:4e:ed:e6:e8:78:31:a2:aa:dd:73:c9:
         d3:1a:33:5c:41:3a:1c:0d:04:0c:94:21:00:45:5d:95:83:73:
         da:35:58:da:fd:66:71:53:5d:ce:9c:91:25:66:a6:32:e3:6d:
         f8:28:21:4b:21:38:3a:06:a4:07:50:9a:da:31:d1:f7:ca:53:
         b9:5d:2d:02:33:1d:1d:a6:56:44:2d:3c:02:48:5b:81:62:31:
         e5:0a:35:56:27:77:95:72:45:50:05:92:fa:58:4a:f1:53:13:
         73:df:bc:40:78:f6:e6:76:6b:f9:b5:07:c6:63:90:d8:0c:07:
         f0:88:ef:85:0d:c7:96:34:30:67:cb:2f:fd:ee:71:a1:94:84:
         d0:a2:93:0c:9d:c1:df:4b:f2:0e:94:41:31:4f:8b:3b:13:c7:
         fc:44:81:49:7e:02:ad:f3:14:f9:d9:35:e2:0d:44:16:10:58:
         57:e8:6d:63:ec:8f:e2:b1:9a:42:c6:2b:1a:b6:9e:b3:98:fc:
         20:f1:20:4b:61:9f:7c:6b:d4:b6:dc:47:9b:f9:4c:df:3d:32:
         c0:d1:c6:54
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAOnq6zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxNTIxMjYwNloXDTI0MTEyMjE3MTAw
MFowMzExMC8GA1UEAxMoNThkN2ZkMWUxODMxMTIyYjcxMTQwM2RjMDJhZmRiYWNj
MjM1ZWUyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKAQ5JAF2EkO
0eKbZI8z1V8Z1oy9lQ/LOz14nQ+zssLKMMJIpQigOop0VwA8aM2Z6JTzcYgrcx4M
fNwDbpMpXnC5/NzjnUpikoZzA3aAUWy3YNlFzxK2Ai5UJh/yjj+3Bwp77d/k7aWB
ueKILef3Vf1dHN4mMS6tXHvgkmg+c4JUJcuPmUY0ERLV/pteIopuOMRUeIBbfI0g
aqZ7Zgw239l2aC33BHUJwt6USo1o+6l8/2mJOn4X8sT7jEIV9dBUOQJsO+060be0
5zEcE2SKgT0qw3xs4TEfjALA81nGWGeX0W/7EobfC9ErGD5hPnPltBB4rmJGapLQ
0iK34zxBb9MCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBSO4LDKYoO5oyRCqD/yV7V4
Bo4p0TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZDQ0NjA4OS1lMmYx
LTQzMjktYWVhOS1kN2NlOTU0NmMyMTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWQ0NDYwODktZTJmMS00
MzI5LWFlYTktZDdjZTk1NDZjMjE1LzU4ZDdmZDFlMTgzMTEyMmI3MTE0MDNkYzAy
YWZkYmFjYzIzNWVlMmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAcoAADANBgkqhkiG9w0BAQsF
AAOCAQEARi2XbmQvVBlvmytEBWE+4cML74ryKI0OfscSc41i9L1pmoaPA1FiCQYR
Rk7t5uh4MaKq3XPJ0xozXEE6HA0EDJQhAEVdlYNz2jVY2v1mcVNdzpyRJWamMuNt
+CghSyE4OgakB1Ca2jHR98pTuV0tAjMdHaZWRC08AkhbgWIx5Qo1Vid3lXJFUAWS
+lhK8VMTc9+8QHj25nZr+bUHxmOQ2AwH8IjvhQ3HljQwZ8sv/e5xoZSE0KKTDJ3B
30vyDpRBMU+LOxPH/ESBSX4CrfMU+dk14g1EFhBYV+htY+yP4rGaQsYrGraes5j8
IPEgS2GffGvUttxHm/lM3z0ywNHGVA==
-----END CERTIFICATE-----