Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/709edaffa5fadfaf3fa27f54e0559d89e226cd42.cer
File:                     709edaffa5fadfaf3fa27f54e0559d89e226cd42.cer (raw, json)
Hash identifier:          d5zmIXqB8KILMHNyTrmbyNISvFCKxKMFu7DL8yBHcJo=
Subject key identifier:   23:89:B0:5B:1D:B6:40:ED:02:F1:00:15:4C:1A:81:49:38:D2:67:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECFB4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/65c5c294-1821-4233-991d-9e95c261b4fb/709edaffa5fadfaf3fa27f54e0559d89e226cd42.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/65c5c294-1821-4233-991d-9e95c261b4fb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 22:03:10 +0000
Certificate not after:    Wed 18 Dec 2024 04:00:00 +0000
Subordinate resources:    IP: 2800:690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15530826 (0xecfb4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 22:03:10 2023 GMT
            Not After : Dec 18 04:00:00 2024 GMT
        Subject: CN=709edaffa5fadfaf3fa27f54e0559d89e226cd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:52:4c:d9:fd:dd:a6:b1:e4:98:81:6f:9c:ea:
                    65:e3:24:ad:94:70:24:83:4d:3d:ef:6e:20:74:9b:
                    c0:a9:b8:61:0e:85:db:c7:76:3d:c7:83:f4:68:ed:
                    ef:42:8f:14:62:92:72:77:06:1a:cc:3a:69:67:42:
                    9b:fc:9c:14:31:ec:4e:58:a6:6f:9c:60:fb:e3:41:
                    92:9c:b3:50:fb:c3:8c:63:2a:24:95:4d:6a:cc:73:
                    0c:44:5a:9f:d1:05:9f:8b:a0:c7:a3:a1:66:c1:2e:
                    d6:67:86:ff:0f:bf:2b:65:11:4d:74:71:c4:fa:ee:
                    fb:5f:e9:b5:af:94:20:dd:80:ae:f7:4c:e1:01:c1:
                    72:d8:a8:e5:fa:28:87:1d:38:c0:ab:8c:fb:22:b0:
                    84:11:54:9b:e7:97:74:5c:5a:28:2e:e3:d3:0b:b0:
                    48:a1:d3:aa:90:7e:5b:2e:46:7f:91:ff:ae:1a:b4:
                    2b:c9:09:8a:26:4a:ed:1f:e9:16:ed:df:06:5e:33:
                    24:af:ae:9b:33:53:e7:bf:e3:df:a3:78:74:fa:5b:
                    3d:3c:39:70:89:b3:c6:13:50:09:3b:06:84:f5:5e:
                    69:6e:9a:02:62:f0:d5:aa:e4:34:7e:31:64:9f:43:
                    38:51:d7:fc:21:6d:c2:db:21:3b:ba:13:b3:50:de:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:89:B0:5B:1D:B6:40:ED:02:F1:00:15:4C:1A:81:49:38:D2:67:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/65c5c294-1821-4233-991d-9e95c261b4fb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/65c5c294-1821-4233-991d-9e95c261b4fb/709edaffa5fadfaf3fa27f54e0559d89e226cd42.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:690::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:74:14:f1:3e:ec:fe:d6:16:3d:ca:38:5a:f9:6e:9a:53:
         93:38:41:5f:9b:ac:7a:26:26:bc:2f:6a:ce:cf:71:40:f3:e8:
         a7:d8:fe:7a:56:a4:23:63:9c:dc:89:fd:bb:72:c6:73:bc:3f:
         3f:f6:04:3c:5c:82:7a:e0:2d:39:a2:3a:71:39:ac:b2:96:c4:
         1a:4c:c9:a5:f0:cf:dc:13:e7:11:b7:78:19:60:15:a6:2b:22:
         f5:bf:fa:e4:da:34:21:bc:e8:fa:56:4a:d1:12:e2:f9:1f:e4:
         aa:3c:48:30:4d:38:54:98:9f:12:2c:71:02:21:09:ef:44:a3:
         b1:35:62:ae:0d:31:5b:18:0a:6a:f5:8d:84:98:fb:df:26:f9:
         da:e9:c2:42:33:36:98:ba:19:46:cb:e4:67:22:4d:ca:bc:58:
         a6:ae:60:aa:20:3c:04:d6:f5:b7:78:f4:70:24:8e:0c:81:71:
         2a:23:27:6b:9c:a8:b2:d5:9c:1a:bf:5e:86:92:86:2d:83:38:
         82:85:64:cc:2e:cc:90:95:d0:16:4d:a3:dd:06:12:13:9d:bb:
         83:5b:d0:c2:0e:68:47:b1:35:87:84:6d:50:2b:5e:b9:81:24:
         06:5e:11:33:f3:d5:41:6b:51:e4:fa:62:c0:d4:57:65:94:c4:
         e7:f4:c3:44
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIEAOz7SjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwNjIyMDMxMFoXDTI0MTIxODA0MDAw
MFowMzExMC8GA1UEAxMoNzA5ZWRhZmZhNWZhZGZhZjNmYTI3ZjU0ZTA1NTlkODll
MjI2Y2Q0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIhSTNn93aax
5JiBb5zqZeMkrZRwJINNPe9uIHSbwKm4YQ6F28d2PceD9Gjt70KPFGKScncGGsw6
aWdCm/ycFDHsTlimb5xg++NBkpyzUPvDjGMqJJVNasxzDERan9EFn4ugx6OhZsEu
1meG/w+/K2URTXRxxPru+1/pta+UIN2ArvdM4QHBctio5foohx04wKuM+yKwhBFU
m+eXdFxaKC7j0wuwSKHTqpB+Wy5Gf5H/rhq0K8kJiiZK7R/pFu3fBl4zJK+umzNT
57/j36N4dPpbPTw5cImzxhNQCTsGhPVeaW6aAmLw1arkNH4xZJ9DOFHX/CFtwtsh
O7oTs1DevokCAwEAAaOCAt8wggLbMB0GA1UdDgQWBBQjibBbHbZA7QLxABVMGoFJ
ONJnUjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NWM1YzI5NC0xODIx
LTQyMzMtOTkxZC05ZTk1YzI2MWI0ZmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjVjNWMyOTQtMTgyMS00
MjMzLTk5MWQtOWU5NWMyNjFiNGZiLzcwOWVkYWZmYTVmYWRmYWYzZmEyN2Y1NGUw
NTU5ZDg5ZTIyNmNkNDIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgABpAwDQYJKoZIhvcNAQELBQAD
ggEBAF+HdBTxPuz+1hY9yjha+W6aU5M4QV+brHomJrwvas7PcUDz6KfY/npWpCNj
nNyJ/btyxnO8Pz/2BDxcgnrgLTmiOnE5rLKWxBpMyaXwz9wT5xG3eBlgFaYrIvW/
+uTaNCG86PpWStES4vkf5Ko8SDBNOFSYnxIscQIhCe9Eo7E1Yq4NMVsYCmr1jYSY
+98m+drpwkIzNpi6GUbL5GciTcq8WKauYKogPATW9bd49HAkjgyBcSojJ2ucqLLV
nBq/XoaShi2DOIKFZMwuzJCV0BZNo90GEhOdu4Nb0MIOaEexNYeEbVArXrmBJAZe
ETPz1UFrUeT6YsDUV2WUxOf0w0Q=
-----END CERTIFICATE-----