Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c2f5e6c309b70a7595097fb52af4a162d483fac.cer
File:                     5c2f5e6c309b70a7595097fb52af4a162d483fac.cer (raw, json)
Hash identifier:          BdGg+PQaJuGXF2xcxSH2gsbmzpplfKVC+ZVzvdPuc/4=
Subject key identifier:   38:4A:BC:42:81:B0:E1:22:57:2C:ED:89:66:17:D9:75:AA:2B:30:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEF186
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/42ec3f38-9399-49f7-8325-03425d1ea777/5c2f5e6c309b70a7595097fb52af4a162d483fac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/42ec3f38-9399-49f7-8325-03425d1ea777/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:49:27 +0000
Certificate not after:    Wed 29 Jan 2025 13:56:36 +0000
Subordinate resources:    AS: 267332
                          IP: 45.233.244.0/22
                          IP: 2804:4bd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16707974 (0xfef186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:49:27 2023 GMT
            Not After : Jan 29 13:56:36 2025 GMT
        Subject: CN=5c2f5e6c309b70a7595097fb52af4a162d483fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:86:67:60:d5:2e:6c:d8:33:37:1d:7e:18:
                    b2:b7:1e:94:f3:9a:3b:31:6f:bf:ac:1a:9f:bc:e5:
                    e0:1c:65:e8:b5:0c:b1:32:5b:d4:57:53:7a:29:38:
                    db:bf:06:49:d2:9b:00:0f:da:f2:bc:e5:a6:b5:ad:
                    30:3e:60:fe:a3:0e:d2:85:fe:ea:23:64:e6:6e:0d:
                    b8:f2:2d:1b:1d:b2:33:05:d8:c1:74:17:62:ce:63:
                    16:38:65:f8:02:4c:3b:85:b4:4c:ad:23:da:fa:e5:
                    1f:a0:35:83:12:2f:f1:09:a1:47:de:77:bd:21:12:
                    e5:a2:2e:02:9b:38:bf:4b:da:83:79:42:9f:5a:01:
                    1a:37:93:43:5a:ef:b7:f0:47:e9:b8:89:68:ee:da:
                    bb:8c:1d:be:d1:18:cf:d8:e5:3e:a3:f7:d6:ad:91:
                    1d:2f:28:3b:ec:5d:b0:cf:94:31:45:70:a9:56:62:
                    94:fb:c6:10:e1:af:e9:e5:40:78:37:bd:71:bd:bd:
                    63:8f:65:ab:aa:97:fa:32:4d:14:e8:98:0b:90:bf:
                    1a:55:ff:91:bb:f8:26:60:41:82:42:ad:9c:29:2c:
                    7b:09:34:1b:aa:01:47:26:af:4b:a5:45:d4:26:66:
                    cb:e9:a2:3f:21:38:c6:df:e2:f1:7a:e6:dd:20:06:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:BC:42:81:B0:E1:22:57:2C:ED:89:66:17:D9:75:AA:2B:30:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/42ec3f38-9399-49f7-8325-03425d1ea777/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/42ec3f38-9399-49f7-8325-03425d1ea777/5c2f5e6c309b70a7595097fb52af4a162d483fac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/22
                IPv6:
                  2804:4bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267332

    Signature Algorithm: sha256WithRSAEncryption
         9b:87:42:ba:56:1c:14:62:5c:a9:43:e5:90:b4:85:d3:38:c0:
         bd:f8:60:af:14:61:35:54:3c:0f:85:04:29:17:99:c7:a8:f2:
         09:64:36:6b:6f:2f:6e:61:75:bc:b7:34:7c:d0:c0:5b:c7:e8:
         18:6d:d2:1c:53:23:21:b2:35:6c:19:ab:0a:7a:f5:ae:ec:08:
         25:4e:d9:b6:78:5e:d7:e7:32:0a:2e:21:25:81:8d:2a:96:41:
         da:2c:29:f8:83:2a:49:f2:f5:c1:85:be:15:d5:b9:c7:09:ee:
         ea:25:a4:d7:83:76:5b:a5:3c:5f:12:c8:9c:20:92:91:6f:01:
         bf:b0:8e:73:4a:93:81:30:57:10:2d:84:eb:b0:2b:de:7c:dc:
         8e:40:5f:36:63:6b:fb:f8:69:e6:6f:f7:64:9e:9f:b9:6a:f3:
         b8:a3:fb:9f:19:77:00:61:a1:2b:c7:72:df:68:69:80:a7:e0:
         79:42:33:7c:ec:42:e9:6a:52:bd:4d:4f:a6:a9:85:e7:f6:7f:
         52:1b:d8:7e:52:4d:9f:51:99:7c:a9:95:fd:aa:bb:cf:6e:c2:
         4e:c7:61:25:19:49:c4:43:47:b9:e0:f2:e4:62:32:38:df:4f:
         3d:bb:59:55:92:fb:74:1c:ef:8b:20:a9:02:b7:6a:51:88:c2:
         66:92:68:d1
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP7xhjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwNDkyN1oXDTI1MDEyOTEzNTYz
NlowMzExMC8GA1UEAxMoNWMyZjVlNmMzMDliNzBhNzU5NTA5N2ZiNTJhZjRhMTYy
ZDQ4M2ZhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK1Ehmdg1S5s
2DM3HX4YsrcelPOaOzFvv6wan7zl4Bxl6LUMsTJb1FdTeik4278GSdKbAA/a8rzl
prWtMD5g/qMO0oX+6iNk5m4NuPItGx2yMwXYwXQXYs5jFjhl+AJMO4W0TK0j2vrl
H6A1gxIv8QmhR953vSES5aIuAps4v0vag3lCn1oBGjeTQ1rvt/BH6biJaO7au4wd
vtEYz9jlPqP31q2RHS8oO+xdsM+UMUVwqVZilPvGEOGv6eVAeDe9cb29Y49lq6qX
+jJNFOiYC5C/GlX/kbv4JmBBgkKtnCksewk0G6oBRyavS6VF1CZmy+miPyE4xt/i
8Xrm3SAGE20CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQ4SrxCgbDhIlcs7YlmF9l1
qiswfzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MmVjM2YzOC05Mzk5
LTQ5ZjctODMyNS0wMzQyNWQxZWE3NzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDJlYzNmMzgtOTM5OS00
OWY3LTgzMjUtMDM0MjVkMWVhNzc3LzVjMmY1ZTZjMzA5YjcwYTc1OTUwOTdmYjUy
YWY0YTE2MmQ0ODNmYWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3p9DANBAIAAjAHAwUAKARL2DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFEQwDQYJKoZIhvcNAQELBQADggEBAJuH
QrpWHBRiXKlD5ZC0hdM4wL34YK8UYTVUPA+FBCkXmceo8glkNmtvL25hdby3NHzQ
wFvH6Bht0hxTIyGyNWwZqwp69a7sCCVO2bZ4XtfnMgouISWBjSqWQdosKfiDKkny
9cGFvhXVuccJ7uolpNeDdlulPF8SyJwgkpFvAb+wjnNKk4EwVxAthOuwK9583I5A
XzZja/v4aeZv92Sen7lq87ij+58ZdwBhoSvHct9oaYCn4HlCM3zsQulqUr1NT6ap
hef2f1Ib2H5STZ9RmXyplf2qu89uwk7HYSUZScRDR7ng8uRiMjjfTz27WVWS+3Qc
74sgqQK3alGIwmaSaNE=
-----END CERTIFICATE-----