Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62829d3c85075fb529078bbb1b7772017805cf2d.cer
File:                     62829d3c85075fb529078bbb1b7772017805cf2d.cer (raw, json)
Hash identifier:          VcKRaXKoQHhbImw/d73gdPR/g21CI88ykRdV7fAXNrw=
Subject key identifier:   F9:CF:80:25:0D:9A:7A:C9:77:29:F8:5C:82:1E:B3:FE:66:95:68:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A9ABC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e84f838b-0c32-428e-99b7-21f73c4941f9/62829d3c85075fb529078bbb1b7772017805cf2d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e84f838b-0c32-428e-99b7-21f73c4941f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 19:22:13 +0000
Certificate not after:    Tue 20 May 2025 15:43:50 +0000
Subordinate resources:    AS: 272826

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17472188 (0x10a9abc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 19:22:13 2024 GMT
            Not After : May 20 15:43:50 2025 GMT
        Subject: CN=62829d3c85075fb529078bbb1b7772017805cf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f3:d2:fe:e9:20:fe:21:c6:26:37:82:ee:5d:
                    42:3d:73:87:48:96:fc:f4:14:4a:77:32:3e:b0:37:
                    d3:5f:83:c3:e7:4c:30:b9:79:50:0a:c9:89:77:14:
                    aa:1d:97:57:d2:b1:38:ff:d7:05:6a:3e:56:18:8b:
                    a7:5c:f1:92:25:ee:cd:8a:ab:2f:b6:73:27:62:78:
                    fc:34:66:2d:52:c3:fc:27:0d:4a:26:dc:8d:e5:41:
                    7a:1a:e8:5a:d5:b3:65:eb:cd:2c:fe:9a:94:2b:e7:
                    0d:73:0a:d8:24:eb:ab:64:2a:44:64:5d:1d:db:27:
                    8b:f9:b5:35:b6:f1:d5:5d:b1:4c:f9:4f:00:15:75:
                    82:5b:43:a0:4a:ec:11:93:ea:21:0d:21:65:44:19:
                    0c:02:44:9f:dc:2c:d0:f6:32:90:3c:ca:ab:1c:93:
                    6c:d3:6d:06:46:24:19:24:e4:8c:b5:b8:ef:d5:9c:
                    d2:92:8c:4a:cf:e0:5a:16:2a:bd:32:40:9a:83:83:
                    ed:33:53:2d:99:37:0d:e5:40:68:24:c0:b9:e7:78:
                    ac:99:ea:a3:ee:72:5f:c5:c4:8b:3b:c3:f9:92:54:
                    a8:cf:32:71:a2:dd:6d:f8:3b:45:4c:0d:ed:29:2d:
                    57:22:d1:92:dd:2b:27:bf:a9:15:22:ad:3f:56:3a:
                    a0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:80:25:0D:9A:7A:C9:77:29:F8:5C:82:1E:B3:FE:66:95:68:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e84f838b-0c32-428e-99b7-21f73c4941f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e84f838b-0c32-428e-99b7-21f73c4941f9/62829d3c85075fb529078bbb1b7772017805cf2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272826

    Signature Algorithm: sha256WithRSAEncryption
         9d:e4:70:bc:ba:64:d5:ad:7a:d0:b9:f9:49:48:7e:a5:53:c5:
         2e:a3:d0:63:8b:64:99:ec:4d:33:c1:6d:1d:36:cc:fd:58:1c:
         f2:9b:af:0a:45:63:f9:f2:a0:6e:d0:92:49:d1:37:ef:bf:d7:
         4e:b3:18:42:05:58:13:6b:e4:50:10:47:ae:1c:04:8a:e0:1d:
         5e:af:8b:e0:3e:b9:07:29:d6:e4:d8:88:aa:cb:b3:3d:05:fc:
         a6:05:26:13:d9:7e:10:59:2b:03:6f:66:40:72:11:c1:c0:71:
         72:12:8d:59:b0:68:05:cf:16:4e:62:76:6e:be:ef:27:ce:66:
         20:fc:06:c0:a9:43:fa:39:fa:41:58:ef:1a:c5:3b:6a:cb:d0:
         b8:c4:59:7b:22:33:b0:b0:f8:18:b8:1f:19:5e:27:e4:b7:e2:
         f6:9a:e1:c0:08:c0:c6:1b:5e:03:80:86:e1:61:19:0d:59:59:
         00:30:af:77:b5:93:2f:ea:39:c6:07:1c:4c:9d:9f:16:c9:fc:
         ef:46:3e:76:ad:9d:57:2d:ff:fc:ac:36:e2:01:76:51:bf:c9:
         12:fc:2e:ba:5e:76:9c:8f:d4:3c:d9:f6:69:5f:46:85:a5:7e:
         ea:08:5e:16:f8:0d:d7:df:b7:61:99:0a:f2:03:bf:81:2d:49:
         96:7a:b5:3c
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIEAQqavDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIxNTE5MjIxM1oXDTI1MDUyMDE1NDM1
MFowMzExMC8GA1UEAxMoNjI4MjlkM2M4NTA3NWZiNTI5MDc4YmJiMWI3NzcyMDE3
ODA1Y2YyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOfz0v7pIP4h
xiY3gu5dQj1zh0iW/PQUSncyPrA301+Dw+dMMLl5UArJiXcUqh2XV9KxOP/XBWo+
VhiLp1zxkiXuzYqrL7ZzJ2J4/DRmLVLD/CcNSibcjeVBehroWtWzZevNLP6alCvn
DXMK2CTrq2QqRGRdHdsni/m1Nbbx1V2xTPlPABV1gltDoErsEZPqIQ0hZUQZDAJE
n9ws0PYykDzKqxyTbNNtBkYkGSTkjLW479Wc0pKMSs/gWhYqvTJAmoOD7TNTLZk3
DeVAaCTAued4rJnqo+5yX8XEizvD+ZJUqM8ycaLdbfg7RUwN7SktVyLRkt0rJ7+p
FSKtP1Y6oHMCAwEAAaOCAtkwggLVMB0GA1UdDgQWBBT5z4AlDZp6yXcp+FyCHrP+
ZpVo6TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lODRmODM4Yi0wYzMy
LTQyOGUtOTliNy0yMWY3M2M0OTQxZjkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTg0ZjgzOGItMGMzMi00
MjhlLTk5YjctMjFmNzNjNDk0MWY5LzYyODI5ZDNjODUwNzVmYjUyOTA3OGJiYjFi
Nzc3MjAxNzgwNWNmMmQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKbowDQYJKoZIhvcNAQELBQADggEBAJ3k
cLy6ZNWtetC5+UlIfqVTxS6j0GOLZJnsTTPBbR02zP1YHPKbrwpFY/nyoG7QkknR
N++/106zGEIFWBNr5FAQR64cBIrgHV6vi+A+uQcp1uTYiKrLsz0F/KYFJhPZfhBZ
KwNvZkByEcHAcXISjVmwaAXPFk5idm6+7yfOZiD8BsCpQ/o5+kFY7xrFO2rL0LjE
WXsiM7Cw+Bi4HxleJ+S34vaa4cAIwMYbXgOAhuFhGQ1ZWQAwr3e1ky/qOcYHHEyd
nxbJ/O9GPnatnVct//ysNuIBdlG/yRL8LrpedpyP1DzZ9mlfRoWlfuoIXhb4Ddff
t2GZCvIDv4EtSZZ6tTw=
-----END CERTIFICATE-----