Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598b97879dbe469735c547a94e3b8220402f1cd0.cer
File:                     598b97879dbe469735c547a94e3b8220402f1cd0.cer (raw, json)
Hash identifier:          ZZYj9h6jNVRSaH4XiU4zSRIbh8cFO3ZYqZtxbZv7Z1Q=
Subject key identifier:   22:40:AB:32:6C:85:48:AC:B6:46:BB:96:F2:FC:75:C4:B1:07:30:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E455CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 22:37:24 +0000
Certificate not after:    Sat 09 Nov 2024 15:00:28 +0000
Subordinate resources:    AS: 272932
                          IP: 2803:a190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14964173 (0xe455cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 22:37:24 2023 GMT
            Not After : Nov  9 15:00:28 2024 GMT
        Subject: CN=598b97879dbe469735c547a94e3b8220402f1cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:ea:45:55:9f:1e:4a:f0:47:41:f2:54:a0:
                    56:84:7d:de:74:7a:cc:23:86:39:bb:b4:5f:a0:e6:
                    a7:2c:80:8d:9b:81:1a:9a:6b:41:6b:1c:4f:3e:63:
                    3c:86:9e:bd:11:4c:69:13:9d:99:d2:fb:17:1c:d4:
                    2a:28:d1:39:04:4a:ad:22:1f:15:38:d7:0a:6c:f4:
                    69:e3:72:22:33:8e:06:2c:26:c5:2b:6d:95:90:27:
                    6e:a8:13:87:0c:2f:2e:1e:b3:6b:e3:de:4b:84:bb:
                    cc:60:db:f8:e6:c4:02:67:b3:13:dd:1e:1f:1e:1b:
                    a9:cd:72:96:d9:d7:f4:b6:59:9c:e3:8d:a1:77:ef:
                    64:b0:bb:44:dc:b2:97:e4:3a:fe:5f:1e:87:63:24:
                    60:de:f1:2b:4d:7f:ad:7f:f9:b4:dd:1c:33:e1:c9:
                    3f:6d:6c:81:70:93:ce:da:ab:f4:4f:82:8e:a1:1c:
                    7f:5e:99:9a:2b:02:ab:bd:6f:a9:e6:10:9c:f2:e6:
                    94:cd:45:57:d8:41:26:1b:af:7d:be:3c:31:35:51:
                    b0:1b:f2:10:54:7b:da:5b:d7:6f:30:73:b9:f7:bc:
                    7d:73:83:02:5b:cd:7a:89:2f:cb:b6:da:24:4e:0a:
                    20:4d:09:6f:9d:0e:9b:36:98:a0:06:a3:3c:1f:f9:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:40:AB:32:6C:85:48:AC:B6:46:BB:96:F2:FC:75:C4:B1:07:30:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272932

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:16:30:4f:a0:58:7b:fb:51:03:4e:39:75:92:0d:ff:ec:
         a6:57:35:0e:10:97:c0:be:32:50:d0:c7:d9:79:2a:0c:ff:ef:
         b6:4d:d9:da:18:01:74:ef:4a:94:8b:ed:4d:37:dc:b3:55:8a:
         93:9c:8f:d4:69:df:26:da:88:6e:c9:2b:30:f0:0e:81:58:c3:
         97:9f:0b:16:21:86:7d:1a:92:0b:bf:b3:9f:1d:a8:07:77:f7:
         f5:95:88:ba:4a:03:21:7a:b3:e3:67:51:02:d3:9a:3a:94:17:
         fe:1c:ff:24:39:bb:f6:d9:21:0a:d1:09:27:f4:14:e9:28:6f:
         3d:c6:0e:a5:22:9b:8d:f9:11:d6:27:18:6f:f5:e3:99:0c:fd:
         46:be:e3:fd:bd:7c:d0:73:43:28:0c:82:72:a3:7e:57:86:02:
         8b:a9:36:97:8f:e2:13:f7:34:77:ee:ac:bc:ba:56:af:54:27:
         88:7d:fb:86:de:d2:5d:3a:dd:ca:00:14:74:2d:99:f9:4a:1b:
         4b:5e:4d:b6:ce:0c:f4:5e:92:33:19:38:fe:86:15:72:25:cf:
         c6:10:3e:9c:68:5f:26:51:16:7f:5c:fe:bc:08:40:0d:2f:a8:
         f7:ea:8b:68:f6:d5:ac:42:20:3b:d9:0c:0f:3b:18:bc:bd:6a:
         5a:4b:06:75
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAORVzTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwODIyMzcyNFoXDTI0MTEwOTE1MDAy
OFowMzExMC8GA1UEAxMoNTk4Yjk3ODc5ZGJlNDY5NzM1YzU0N2E5NGUzYjgyMjA0
MDJmMWNkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5E6kVVnx5K
8EdB8lSgVoR93nR6zCOGObu0X6DmpyyAjZuBGpprQWscTz5jPIaevRFMaROdmdL7
FxzUKijROQRKrSIfFTjXCmz0aeNyIjOOBiwmxSttlZAnbqgThwwvLh6za+PeS4S7
zGDb+ObEAmezE90eHx4bqc1yltnX9LZZnOONoXfvZLC7RNyyl+Q6/l8eh2MkYN7x
K01/rX/5tN0cM+HJP21sgXCTztqr9E+CjqEcf16ZmisCq71vqeYQnPLmlM1FV9hB
Jhuvfb48MTVRsBvyEFR72lvXbzBzufe8fXODAlvNeokvy7baJE4KIE0Jb50OmzaY
oAajPB/55W8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQiQKsybIVIrLZGu5by/HXE
sQcwJjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83OTJkM2UzOS00NDcz
LTQyZTItYWJiZC1kNmM1MGY2MjIwN2EvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzkyZDNlMzktNDQ3My00
MmUyLWFiYmQtZDZjNTBmNjIyMDdhLzU5OGI5Nzg3OWRiZTQ2OTczNWM1NDdhOTRl
M2I4MjIwNDAyZjFjZDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDoZAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCokMA0GCSqGSIb3DQEBCwUAA4IBAQAtCBYwT6BYe/tRA045dZIN
/+ymVzUOEJfAvjJQ0MfZeSoM/++2TdnaGAF070qUi+1NN9yzVYqTnI/Uad8m2ohu
ySsw8A6BWMOXnwsWIYZ9GpILv7OfHagHd/f1lYi6SgMherPjZ1EC05o6lBf+HP8k
Obv22SEK0Qkn9BTpKG89xg6lIpuN+RHWJxhv9eOZDP1GvuP9vXzQc0MoDIJyo35X
hgKLqTaXj+IT9zR37qy8ulavVCeIffuG3tJdOt3KABR0LZn5ShtLXk22zgz0XpIz
GTj+hhVyJc/GED6caF8mURZ/XP68CEANL6j36oto9tWsQiA72QwPOxi8vWpaSwZ1
-----END CERTIFICATE-----