Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
File:                     70a411ce30f61f9ca94248ff3f614c66f75c5307.cer (raw, json)
Hash identifier:          fYvlkBD6+PHXK3/NHSbN14piQVk5ikh4ozXwip+w1PE=
Subject key identifier:   5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC7206
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 18 Jan 2023 17:58:48 +0000
Certificate not after:    Sat 29 Jun 2024 15:36:45 +0000
Subordinate resources:    AS: 272854
                          IP: 2803:c290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14447110 (0xdc7206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 17:58:48 2023 GMT
            Not After : Jun 29 15:36:45 2024 GMT
        Subject: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:44:71:b0:83:b3:b5:1d:28:7b:b6:a3:c5:cb:
                    a7:16:89:90:39:ea:d1:f1:f3:ba:c7:85:d7:2b:b2:
                    ea:58:29:a0:88:d0:1b:44:76:57:de:50:2c:da:ec:
                    e6:71:6e:ca:eb:5b:33:44:c4:d0:d1:ab:20:a2:da:
                    8b:54:e0:1a:6a:5e:88:62:64:10:da:3e:f3:a1:58:
                    28:61:4d:5a:1b:90:ef:3d:b8:06:78:5f:b6:80:10:
                    98:b6:3e:93:73:2b:ff:06:fb:d5:79:d6:89:b7:bd:
                    d2:45:78:94:bc:80:1e:1d:71:5c:ed:34:54:be:06:
                    95:2f:2b:b5:0e:72:ca:79:1f:f1:94:87:20:6b:0f:
                    a5:11:f3:3e:b5:c4:d7:9c:7a:10:88:d9:29:33:e0:
                    b1:62:1a:c8:ee:fd:22:ad:95:b2:2f:54:4f:3d:80:
                    95:c1:ef:ca:87:2e:dd:d2:a2:5e:69:dc:40:bd:79:
                    27:31:4f:2d:cd:56:fb:f8:0f:13:20:1b:7b:38:ba:
                    0b:85:5b:85:f2:b2:c6:3f:41:d7:25:72:1b:6d:75:
                    de:a7:58:94:55:66:50:58:39:d6:d6:43:12:0f:0a:
                    cc:5c:46:4a:20:46:48:5e:60:f1:32:81:40:31:f5:
                    c0:ad:b5:b7:a7:70:62:bc:90:74:da:af:e6:8f:2a:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272854

    Signature Algorithm: sha256WithRSAEncryption
         b7:42:32:f6:dc:7c:4e:f7:c5:95:5d:c1:5e:3e:0b:e4:c0:2e:
         27:40:bc:23:29:70:80:8b:2a:60:42:42:05:75:e5:09:07:e9:
         60:b5:60:af:9b:a4:d8:5d:49:a9:a0:fa:d2:17:f6:cb:cd:bb:
         88:44:6a:c0:bf:52:60:b4:d3:49:6c:eb:aa:50:a3:0a:a8:ea:
         b8:d7:ed:4d:9b:26:11:fa:22:7b:15:3e:57:92:34:87:aa:3f:
         ce:32:04:3c:3c:78:f0:de:95:0d:d7:9a:0d:c0:69:2a:55:cd:
         8b:cf:7e:97:7f:fa:59:20:bb:88:b4:1f:c2:9d:54:a4:10:be:
         33:97:37:03:fc:a4:da:e6:49:16:b0:fd:fa:49:96:6a:45:0c:
         48:4a:8c:99:75:dd:33:40:d9:15:f0:e9:32:fa:7f:45:58:71:
         70:58:62:2d:18:22:95:60:ce:de:4f:25:4a:2b:b1:26:9d:b6:
         c2:c0:3a:15:f1:88:c3:db:70:55:6f:46:64:f7:22:39:a4:1e:
         2e:23:20:c6:98:1c:4a:0f:32:c5:6c:ec:8e:4e:ad:e2:f9:21:
         2d:4b:50:ed:1a:0b:f3:86:2c:9e:db:47:eb:07:56:e1:79:9a:
         0b:7f:3f:da:23:fc:aa:84:84:11:0e:c2:53:92:08:dd:b4:f3:
         0b:80:84:3a
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEANxyBjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDExODE3NTg0OFoXDTI0MDYyOTE1MzY0
NVowMzExMC8GA1UEAxMoNzBhNDExY2UzMGY2MWY5Y2E5NDI0OGZmM2Y2MTRjNjZm
NzVjNTMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIZEcbCDs7Ud
KHu2o8XLpxaJkDnq0fHzuseF1yuy6lgpoIjQG0R2V95QLNrs5nFuyutbM0TE0NGr
IKLai1TgGmpeiGJkENo+86FYKGFNWhuQ7z24BnhftoAQmLY+k3Mr/wb71XnWibe9
0kV4lLyAHh1xXO00VL4GlS8rtQ5yynkf8ZSHIGsPpRHzPrXE15x6EIjZKTPgsWIa
yO79Iq2Vsi9UTz2AlcHvyocu3dKiXmncQL15JzFPLc1W+/gPEyAbezi6C4VbhfKy
xj9B1yVyG2113qdYlFVmUFg51tZDEg8KzFxGSiBGSF5g8TKBQDH1wK21t6dwYryQ
dNqv5o8qT6sCAwEAAaOCAvswggL3MB0GA1UdDgQWBBRdmZuFc5ITociJjj6wKHQy
XSt0NDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NDJiNTBlOC0zNjAy
LTQ1NjMtOTZkNy05YmVmMTAwZTVjZTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTQyYjUwZTgtMzYwMi00
NTYzLTk2ZDctOWJlZjEwMGU1Y2UyLzcwYTQxMWNlMzBmNjFmOWNhOTQyNDhmZjNm
NjE0YzY2Zjc1YzUzMDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDwpAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCnWMA0GCSqGSIb3DQEBCwUAA4IBAQC3QjL23HxO98WVXcFePgvk
wC4nQLwjKXCAiypgQkIFdeUJB+lgtWCvm6TYXUmpoPrSF/bLzbuIRGrAv1JgtNNJ
bOuqUKMKqOq41+1NmyYR+iJ7FT5XkjSHqj/OMgQ8PHjw3pUN15oNwGkqVc2Lz36X
f/pZILuItB/CnVSkEL4zlzcD/KTa5kkWsP36SZZqRQxISoyZdd0zQNkV8Oky+n9F
WHFwWGItGCKVYM7eTyVKK7EmnbbCwDoV8YjD23BVb0Zk9yI5pB4uIyDGmBxKDzLF
bOyOTq3i+SEtS1DtGgvzhiye20frB1bheZoLfz/aI/yqhIQRDsJTkgjdtPMLgIQ6
-----END CERTIFICATE-----