Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657b3a139d6af00f0b8b31e31b36397243318269.cer
File:                     657b3a139d6af00f0b8b31e31b36397243318269.cer (raw, json)
Hash identifier:          iqOAc/gjPYHc5E5AYhPqF17HRLUHTeWrsYE1PuAbM7E=
Subject key identifier:   06:61:AC:CD:C4:C8:1D:18:4C:BA:4D:8F:B5:45:BA:2D:38:28:F6:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9432E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b65a20ae-aa9b-4e82-ad6e-6b3a6aea76f9/657b3a139d6af00f0b8b31e31b36397243318269.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b65a20ae-aa9b-4e82-ad6e-6b3a6aea76f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 16:27:25 +0000
Certificate not after:    Tue 26 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 28034
                          IP: 200.7.15.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15287086 (0xe9432e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 16:27:25 2023 GMT
            Not After : Nov 26 14:00:00 2024 GMT
        Subject: CN=657b3a139d6af00f0b8b31e31b36397243318269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:79:7d:bb:ca:d8:6f:cf:d0:3d:37:c6:9d:
                    fe:4a:b7:47:69:bc:05:b2:c8:3d:62:fb:2d:c8:4c:
                    bf:31:0d:d9:5f:5f:87:50:2b:a3:7c:7e:41:eb:45:
                    47:db:33:63:a5:7b:98:19:a2:b4:ec:b9:eb:2b:50:
                    21:63:d7:ce:0b:55:0d:ce:87:36:c8:be:ad:10:55:
                    d1:93:9b:06:25:a7:fa:32:16:37:fe:a3:70:b9:f8:
                    cb:cc:6c:a1:35:87:0f:fb:af:b0:85:de:3e:8e:7b:
                    88:37:60:eb:3b:56:b3:a9:d3:50:a9:f8:4a:72:7a:
                    fa:d7:4a:9f:b2:08:21:45:5e:ca:5b:42:22:d1:33:
                    71:73:39:ab:d0:71:2c:34:df:01:16:ce:8c:c2:62:
                    9a:c7:27:26:90:5c:89:f6:da:03:64:3b:18:11:28:
                    6c:27:32:93:5f:f7:f3:67:0d:25:b4:cd:b2:76:bf:
                    48:fa:b9:50:e9:3c:c5:02:14:7a:4c:c0:fe:5a:e9:
                    1f:ef:13:5c:8f:d9:30:45:d5:60:4d:d5:42:59:22:
                    c2:d5:25:57:18:c3:32:7f:0a:c8:48:84:6f:ff:5d:
                    e5:2f:4b:5b:53:c8:4d:8a:4e:09:d9:d9:28:28:f6:
                    f3:bc:e1:59:b1:e7:cf:d9:ed:01:b0:ae:b4:a1:49:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:AC:CD:C4:C8:1D:18:4C:BA:4D:8F:B5:45:BA:2D:38:28:F6:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b65a20ae-aa9b-4e82-ad6e-6b3a6aea76f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b65a20ae-aa9b-4e82-ad6e-6b3a6aea76f9/657b3a139d6af00f0b8b31e31b36397243318269.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.15.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28034

    Signature Algorithm: sha256WithRSAEncryption
         52:0e:66:f4:90:a9:7e:9f:e6:25:ff:08:63:7f:06:e5:88:aa:
         22:98:91:59:b4:80:73:e5:10:df:d1:3a:e8:ba:f7:e5:bb:cc:
         b1:f6:64:70:47:1a:f2:ec:91:1d:5f:4a:53:92:77:ee:07:d5:
         90:7f:70:90:6c:ef:3c:09:10:3a:57:97:96:83:1f:e7:fa:38:
         12:31:f3:bd:6f:3e:fa:07:13:c6:c8:9c:b6:6a:f8:0f:cc:ad:
         42:b1:f9:a3:fa:62:d0:83:29:0a:5b:4a:2c:9b:1a:07:52:4c:
         3e:30:f2:03:9e:03:b5:4a:aa:43:44:dc:44:90:8d:5e:f4:0e:
         ac:2b:f5:89:c2:66:eb:5a:29:36:7d:8d:0f:b6:df:18:00:a4:
         d5:dd:13:3f:74:72:ea:2a:62:b0:c6:45:cb:49:15:82:7e:3c:
         90:16:2a:c5:35:2c:84:f5:77:5d:2a:6c:8e:8c:e0:6a:56:a9:
         0b:d1:d9:ca:62:e8:5a:ec:66:c3:84:9c:8c:cc:b0:53:83:4c:
         b0:a1:6c:6a:c6:bf:08:fc:d6:5f:ae:44:d5:db:2c:6b:ff:10:
         38:76:e3:b4:7e:63:1d:d0:e4:05:d0:f4:f8:44:c6:38:68:65:
         6d:6e:a3:e2:fb:08:26:f9:91:df:e6:6c:5c:16:66:ab:06:62:
         3d:e6:f1:af
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAOlDLjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxMDE2MjcyNVoXDTI0MTEyNjE0MDAw
MFowMzExMC8GA1UEAxMoNjU3YjNhMTM5ZDZhZjAwZjBiOGIzMWUzMWIzNjM5NzI0
MzMxODI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ2beX27ythv
z9A9N8ad/kq3R2m8BbLIPWL7LchMvzEN2V9fh1Aro3x+QetFR9szY6V7mBmitOy5
6ytQIWPXzgtVDc6HNsi+rRBV0ZObBiWn+jIWN/6jcLn4y8xsoTWHD/uvsIXePo57
iDdg6ztWs6nTUKn4SnJ6+tdKn7IIIUVeyltCItEzcXM5q9BxLDTfARbOjMJimscn
JpBcifbaA2Q7GBEobCcyk1/382cNJbTNsna/SPq5UOk8xQIUekzA/lrpH+8TXI/Z
MEXVYE3VQlkiwtUlVxjDMn8KyEiEb/9d5S9LW1PITYpOCdnZKCj287zhWbHnz9nt
AbCutKFJKdMCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQGYazNxMgdGEy6TY+1Rbot
OCj2VTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNjVhMjBhZS1hYTli
LTRlODItYWQ2ZS02YjNhNmFlYTc2ZjkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjY1YTIwYWUtYWE5Yi00
ZTgyLWFkNmUtNmIzYTZhZWE3NmY5LzY1N2IzYTEzOWQ2YWYwMGYwYjhiMzFlMzFi
MzYzOTcyNDMzMTgyNjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgHDzAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJtgjANBgkqhkiG9w0BAQsFAAOCAQEAUg5m9JCpfp/mJf8IY38G5Yiq
IpiRWbSAc+UQ39E66Lr35bvMsfZkcEca8uyRHV9KU5J37gfVkH9wkGzvPAkQOleX
loMf5/o4EjHzvW8++gcTxsictmr4D8ytQrH5o/pi0IMpCltKLJsaB1JMPjDyA54D
tUqqQ0TcRJCNXvQOrCv1icJm61opNn2ND7bfGACk1d0TP3Ry6ipisMZFy0kVgn48
kBYqxTUshPV3XSpsjozgalapC9HZymLoWuxmw4ScjMywU4NMsKFsasa/CPzWX65E
1dssa/8QOHbjtH5jHdDkBdD0+ETGOGhlbW6j4vsIJvmR3+ZsXBZmqwZiPebxrw==
-----END CERTIFICATE-----