Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e27e4176e0385e00d2a1ce3b0bc7ecbe2e59458.cer
File:                     6e27e4176e0385e00d2a1ce3b0bc7ecbe2e59458.cer (raw, json)
Hash identifier:          r3BN212B7NEYOoiZcl+gofXBJUIpR2B1Gicb0WduH58=
Subject key identifier:   82:33:23:35:5A:99:D4:1B:D7:69:5C:A2:C0:51:0F:CE:98:8A:B5:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F76572
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/6e27e4176e0385e00d2a1ce3b0bc7ecbe2e59458.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 23:19:27 +0000
Certificate not after:    Fri 27 Sep 2024 17:19:07 +0000
Subordinate resources:    AS: 269854
                          IP: 45.189.76.0/22
                          IP: 2803:90e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16213362 (0xf76572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 23:19:27 2023 GMT
            Not After : Sep 27 17:19:07 2024 GMT
        Subject: CN=6e27e4176e0385e00d2a1ce3b0bc7ecbe2e59458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:78:9b:9e:90:5c:e6:24:6d:d7:b7:0f:30:
                    e8:0a:4c:4a:7e:24:f2:6d:46:11:0a:c6:08:11:f3:
                    9e:12:03:d7:7d:a8:53:e5:91:54:ad:d1:c1:bf:b6:
                    89:98:4c:1d:21:50:56:02:b0:60:7f:4d:ca:b8:97:
                    f4:0d:39:d5:5e:e5:9d:01:5f:f8:a3:60:1e:19:23:
                    95:f5:46:de:5b:75:5f:51:10:3e:b7:7d:bf:09:fd:
                    b5:63:3d:c5:cf:3d:6f:d4:18:bf:92:b8:7c:5c:24:
                    3f:7e:6b:68:51:cc:19:a3:5e:d7:3b:47:11:fb:af:
                    a5:8d:d1:8b:ad:84:15:46:3d:0e:fd:90:a9:90:4c:
                    8f:d1:fa:30:ba:84:1c:62:3a:a2:cb:f0:7a:c4:0b:
                    00:ec:39:56:ee:c1:1b:80:c5:c5:fe:7b:18:4b:60:
                    b1:21:2d:b1:77:4c:00:54:65:4b:4e:63:fe:74:42:
                    4e:c7:fe:17:e4:2e:37:0b:60:e3:f5:d5:4b:7e:e3:
                    b3:72:a0:c9:57:8a:81:c6:a5:65:17:e9:b0:ab:8f:
                    45:6d:13:70:54:4c:d4:80:c8:6c:17:3f:be:52:ef:
                    1f:57:40:68:0a:43:f3:c1:d2:00:c6:cf:ee:99:9e:
                    0d:cc:34:8b:25:ac:d1:07:d8:5d:95:8d:ee:cb:c7:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:33:23:35:5A:99:D4:1B:D7:69:5C:A2:C0:51:0F:CE:98:8A:B5:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/6e27e4176e0385e00d2a1ce3b0bc7ecbe2e59458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.76.0/22
                IPv6:
                  2803:90e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269854

    Signature Algorithm: sha256WithRSAEncryption
         31:66:a7:01:eb:87:96:44:3c:23:3a:8a:9c:30:12:be:5c:1f:
         52:16:5b:82:8a:b1:49:4b:04:2e:47:81:60:1c:f5:19:b4:f9:
         b8:25:e7:53:d8:67:ba:48:bc:d7:81:52:26:4d:40:05:08:91:
         5c:00:4f:7c:40:e9:a9:5c:90:02:ee:32:b1:8d:76:14:35:25:
         17:04:1a:1a:b3:ad:a0:8e:19:f7:59:99:1e:36:7d:2e:cb:77:
         72:94:38:43:a0:00:9a:2f:57:50:07:4e:55:88:00:cf:e6:c8:
         c7:58:e9:b4:f3:c3:9a:cb:68:3e:0b:a3:86:43:cb:8c:e8:f5:
         00:07:12:c7:eb:ab:40:41:43:9e:9f:74:0b:97:40:f2:62:68:
         87:53:1d:43:7b:3f:69:b9:4c:aa:f8:5b:4d:67:15:74:b4:c2:
         a4:22:f0:6e:cd:a5:d0:b1:cb:50:45:6b:9d:1d:05:9c:25:84:
         fc:d9:98:dc:e2:3e:ad:5a:ef:68:54:b4:ac:fe:bd:aa:10:81:
         72:c4:90:ac:91:97:ca:72:89:0f:c4:b4:06:28:14:4a:95:73:
         57:be:f6:66:4e:05:b3:21:51:7a:4e:2e:18:40:3e:ca:8c:7e:
         09:c1:c9:27:23:31:b1:7b:77:e4:82:2d:7e:1f:f3:08:b6:8c:
         a7:78:2c:d9
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPdlcjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyOTIzMTkyN1oXDTI0MDkyNzE3MTkw
N1owMzExMC8GA1UEAxMoNmUyN2U0MTc2ZTAzODVlMDBkMmExY2UzYjBiYzdlY2Jl
MmU1OTQ1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIFreJuekFzm
JG3Xtw8w6ApMSn4k8m1GEQrGCBHznhID132oU+WRVK3Rwb+2iZhMHSFQVgKwYH9N
yriX9A051V7lnQFf+KNgHhkjlfVG3lt1X1EQPrd9vwn9tWM9xc89b9QYv5K4fFwk
P35raFHMGaNe1ztHEfuvpY3Ri62EFUY9Dv2QqZBMj9H6MLqEHGI6osvwesQLAOw5
Vu7BG4DFxf57GEtgsSEtsXdMAFRlS05j/nRCTsf+F+QuNwtg4/XVS37js3KgyVeK
gcalZRfpsKuPRW0TcFRM1IDIbBc/vlLvH1dAaApD88HSAMbP7pmeDcw0iyWs0QfY
XZWN7svHI6MCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSCMyM1WpnUG9dpXKLAUQ/O
mIq1TTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82OTYxMzBjOC1lM2Q0
LTQ5ODEtYmFmZC01OWIxN2EwZjNmZTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjk2MTMwYzgtZTNkNC00
OTgxLWJhZmQtNTliMTdhMGYzZmUxLzZlMjdlNDE3NmUwMzg1ZTAwZDJhMWNlM2Iw
YmM3ZWNiZTJlNTk0NTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi29TDANBAIAAjAHAwUAKAOQ4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHh4wDQYJKoZIhvcNAQELBQADggEBADFm
pwHrh5ZEPCM6ipwwEr5cH1IWW4KKsUlLBC5HgWAc9Rm0+bgl51PYZ7pIvNeBUiZN
QAUIkVwAT3xA6alckALuMrGNdhQ1JRcEGhqzraCOGfdZmR42fS7Ld3KUOEOgAJov
V1AHTlWIAM/myMdY6bTzw5rLaD4Lo4ZDy4zo9QAHEsfrq0BBQ56fdAuXQPJiaIdT
HUN7P2m5TKr4W01nFXS0wqQi8G7NpdCxy1BFa50dBZwlhPzZmNziPq1a72hUtKz+
vaoQgXLEkKyRl8pyiQ/EtAYoFEqVc1e+9mZOBbMhUXpOLhhAPsqMfgnByScjMbF7
d+SCLX4f8wi2jKd4LNk=
-----END CERTIFICATE-----