Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af76d03537ffc48ed548ee10d0640bdebb815c6.cer
File:                     6af76d03537ffc48ed548ee10d0640bdebb815c6.cer (raw, json)
Hash identifier:          SqHnYPT/lkWJc9z6RwleWqyOaWidvbPEzbt0NEXRRo8=
Subject key identifier:   B3:21:AA:16:AC:B9:29:E4:21:55:55:CD:87:D9:27:95:F8:05:0D:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBFFAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a8ca7c1e-d8c4-4e98-a9f2-6a38acd124c0/6af76d03537ffc48ed548ee10d0640bdebb815c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a8ca7c1e-d8c4-4e98-a9f2-6a38acd124c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 18:02:44 +0000
Certificate not after:    Fri 04 Jul 2025 06:00:00 +0000
Subordinate resources:    AS: 273100
                          IP: 2803:d050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16514988 (0xfbffac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 18:02:44 2023 GMT
            Not After : Jul  4 06:00:00 2025 GMT
        Subject: CN=6af76d03537ffc48ed548ee10d0640bdebb815c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:26:d5:af:86:d9:02:2f:e6:cf:24:90:c6:
                    37:67:d7:fc:d6:af:c6:b9:dd:19:c1:bd:12:f3:73:
                    f6:9c:96:94:90:e3:29:55:e3:31:5e:b1:24:1a:b1:
                    42:d4:bc:a8:ba:3c:56:f0:09:03:8b:a4:9e:b0:22:
                    ea:32:53:16:d9:de:ac:a1:0f:e6:8d:65:df:2e:d1:
                    27:e2:d0:b0:d8:3a:ca:0c:2f:09:b9:e0:9d:a2:a1:
                    5a:91:60:9e:d5:69:a2:9a:b3:dc:c1:d6:ca:ec:17:
                    1a:f7:11:55:20:76:26:f5:67:c7:bc:e8:c4:37:8c:
                    e4:61:3e:6d:b9:98:71:fa:72:c7:b0:c0:7d:da:7e:
                    4c:de:e3:cc:3b:ec:06:f4:50:23:ac:cf:3c:fd:30:
                    b3:2e:91:1a:be:df:13:6d:00:1d:68:08:f8:21:51:
                    3f:2b:76:15:6e:bf:74:01:32:6c:8a:79:6b:c1:2e:
                    6b:86:20:a4:cc:3c:7a:6c:01:17:df:c1:b7:65:14:
                    70:59:d3:56:4c:9c:b9:c1:d7:2f:ad:3f:70:7c:dc:
                    b9:be:fc:81:dc:46:3c:98:72:f6:6c:f7:b5:24:79:
                    02:19:2c:26:06:b5:19:a1:29:39:2f:9e:cc:c5:eb:
                    10:11:96:62:0a:9b:9d:da:14:f4:0b:02:87:2b:44:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:21:AA:16:AC:B9:29:E4:21:55:55:CD:87:D9:27:95:F8:05:0D:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a8ca7c1e-d8c4-4e98-a9f2-6a38acd124c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a8ca7c1e-d8c4-4e98-a9f2-6a38acd124c0/6af76d03537ffc48ed548ee10d0640bdebb815c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273100

    Signature Algorithm: sha256WithRSAEncryption
         69:48:ca:10:88:88:b8:d6:e4:42:0d:28:a0:ff:1c:8d:c4:60:
         63:38:ea:cc:e3:ba:bb:5d:69:ab:99:db:b5:ac:ac:07:fa:60:
         af:fd:68:ca:68:1f:82:51:7a:1a:ee:4e:4e:11:b6:43:d2:de:
         4d:fa:bd:52:20:94:e2:3f:38:de:dd:b0:6c:9a:8e:1c:63:69:
         fa:d7:36:3c:ea:96:c6:6a:a6:bd:77:28:66:3a:07:08:61:7e:
         a1:d9:58:ea:d0:3d:a3:17:c7:25:1c:41:f0:8b:a3:2f:77:c8:
         96:7a:04:14:dd:46:fb:bd:07:d1:d2:fe:a8:c2:b0:18:87:2e:
         33:4e:5a:37:52:88:fc:69:a3:54:b5:56:3a:fa:14:43:38:ff:
         15:9d:27:ce:95:58:9a:07:ab:01:b3:ea:6f:f9:ef:f9:5e:4b:
         65:2f:a5:91:c5:bc:a1:64:f2:fb:74:0e:7f:ba:99:e9:cb:72:
         63:fb:82:95:ab:4f:56:85:21:fd:4a:68:43:c3:f8:6b:eb:08:
         ab:0e:30:9c:69:ce:3b:a0:e4:75:8a:2d:d4:df:89:af:4d:31:
         2a:f2:b4:66:57:ec:c1:ea:c6:8f:6f:f7:72:f5:51:0c:3e:92:
         ee:75:46:da:30:ea:7a:99:94:e5:5c:1c:42:b8:f8:50:71:fa:
         9a:c5:4b:9a
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPv/rDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAwNTE4MDI0NFoXDTI1MDcwNDA2MDAw
MFowMzExMC8GA1UEAxMoNmFmNzZkMDM1MzdmZmM0OGVkNTQ4ZWUxMGQwNjQwYmRl
YmI4MTVjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKthJtWvhtkC
L+bPJJDGN2fX/NavxrndGcG9EvNz9pyWlJDjKVXjMV6xJBqxQtS8qLo8VvAJA4uk
nrAi6jJTFtnerKEP5o1l3y7RJ+LQsNg6ygwvCbngnaKhWpFgntVpopqz3MHWyuwX
GvcRVSB2JvVnx7zoxDeM5GE+bbmYcfpyx7DAfdp+TN7jzDvsBvRQI6zPPP0wsy6R
Gr7fE20AHWgI+CFRPyt2FW6/dAEybIp5a8Eua4YgpMw8emwBF9/Bt2UUcFnTVkyc
ucHXL60/cHzcub78gdxGPJhy9mz3tSR5AhksJga1GaEpOS+ezMXrEBGWYgqbndoU
9AsChytED4MCAwEAAaOCAvswggL3MB0GA1UdDgQWBBSzIaoWrLkp5CFVVc2H2SeV
+AUNvzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hOGNhN2MxZS1kOGM0
LTRlOTgtYTlmMi02YTM4YWNkMTI0YzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYThjYTdjMWUtZDhjNC00
ZTk4LWE5ZjItNmEzOGFjZDEyNGMwLzZhZjc2ZDAzNTM3ZmZjNDhlZDU0OGVlMTBk
MDY0MGJkZWJiODE1YzYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0FAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCrMMA0GCSqGSIb3DQEBCwUAA4IBAQBpSMoQiIi41uRCDSig/xyN
xGBjOOrM47q7XWmrmdu1rKwH+mCv/WjKaB+CUXoa7k5OEbZD0t5N+r1SIJTiPzje
3bBsmo4cY2n61zY86pbGaqa9dyhmOgcIYX6h2Vjq0D2jF8clHEHwi6Mvd8iWegQU
3Ub7vQfR0v6owrAYhy4zTlo3Uoj8aaNUtVY6+hRDOP8VnSfOlViaB6sBs+pv+e/5
XktlL6WRxbyhZPL7dA5/upnpy3Jj+4KVq09WhSH9SmhDw/hr6wirDjCcac47oOR1
ii3U34mvTTEq8rRmV+zB6saPb/dy9VEMPpLudUbaMOp6mZTlXBxCuPhQcfqaxUua
-----END CERTIFICATE-----