Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71cee9dc339cb1fd3598de36285df42d7c1c5f55.cer
File:                     71cee9dc339cb1fd3598de36285df42d7c1c5f55.cer (raw, json)
Hash identifier:          VI5SwBWWnMFBBsDSmEFgAYJedQ/thGpEOvIiudQxD5I=
Subject key identifier:   C2:30:83:1B:57:75:04:AB:B8:F6:3A:10:8C:06:34:65:B7:7E:35:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A06D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/721fddda-501a-4de1-aa27-781077e3c12d/71cee9dc339cb1fd3598de36285df42d7c1c5f55.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/721fddda-501a-4de1-aa27-781077e3c12d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 19:09:16 +0000
Certificate not after:    Wed 05 Nov 2025 19:16:00 +0000
Subordinate resources:    AS: 273155
                          IP: 2803:250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17434328 (0x10a06d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 10 19:09:16 2024 GMT
            Not After : Nov  5 19:16:00 2025 GMT
        Subject: CN=71cee9dc339cb1fd3598de36285df42d7c1c5f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:56:14:4a:66:19:c2:f3:b0:36:41:d8:e4:
                    f2:38:3a:3f:ac:6c:a5:ca:dd:ce:80:2b:e0:1d:75:
                    45:03:2f:50:f3:d0:dd:ad:e4:f7:9f:58:be:96:0c:
                    5e:46:be:ac:30:71:91:f4:12:57:44:2d:38:3f:fb:
                    39:63:48:3b:72:ad:f7:17:9b:53:d5:87:bf:8f:b1:
                    bb:a0:55:ba:20:e7:5a:3f:30:68:72:c6:0a:e8:62:
                    35:a5:fb:3c:e3:93:74:fa:a0:96:e5:d8:6d:ba:24:
                    d0:ff:34:fa:5f:bd:60:f4:ed:3c:85:1b:36:c0:95:
                    63:e4:f6:dc:48:90:b0:0d:93:36:10:2e:b2:aa:18:
                    d5:94:e8:aa:08:b0:46:ad:78:45:60:56:c6:2e:e8:
                    7d:2f:b6:46:95:b1:1e:41:56:49:18:c8:b2:f8:a4:
                    43:51:68:73:6b:3f:bf:a1:06:6b:02:34:5f:e0:af:
                    68:b7:7e:57:b3:d7:5d:a1:9b:76:e5:11:74:7f:f2:
                    57:0f:22:cf:24:fa:69:d2:c2:98:5a:95:e3:9e:43:
                    56:34:54:71:9a:6e:4f:ab:cc:02:4a:c4:24:be:fc:
                    ce:1e:60:c3:63:7f:51:19:18:2c:31:98:1b:e2:29:
                    fa:31:49:ea:0b:b5:aa:64:3b:cc:20:f8:d6:95:b5:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:30:83:1B:57:75:04:AB:B8:F6:3A:10:8C:06:34:65:B7:7E:35:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/721fddda-501a-4de1-aa27-781077e3c12d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/721fddda-501a-4de1-aa27-781077e3c12d/71cee9dc339cb1fd3598de36285df42d7c1c5f55.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273155

    Signature Algorithm: sha256WithRSAEncryption
         bb:a5:05:e9:63:ee:03:b1:c8:a7:6c:75:17:37:8d:e6:20:e2:
         a5:57:37:25:72:f8:c1:7b:70:9b:0b:02:bb:51:d0:46:30:ca:
         7c:07:85:f5:25:b6:ca:c0:d5:59:ba:d6:f4:e0:f2:6a:5e:ed:
         01:99:06:2f:3c:6a:58:ef:13:4a:1d:20:01:b3:b1:c2:26:f7:
         8e:89:64:e0:69:0b:1c:0c:b9:18:e2:bb:33:2f:85:85:ce:c4:
         d6:1f:1e:85:de:90:3b:5c:a2:b0:a6:74:7f:4d:d6:67:46:52:
         32:d4:c7:21:80:31:32:f2:70:6d:36:0f:1a:2b:3a:54:07:52:
         82:6e:63:87:b4:fe:06:85:87:c4:3b:99:8e:2c:68:d7:5e:66:
         75:6e:00:4c:62:eb:8c:48:69:8f:96:b0:13:54:fb:45:93:e4:
         35:e6:09:20:f6:b4:4b:0c:60:7e:7c:97:de:64:a3:c5:11:91:
         04:8d:9c:c2:39:8a:d3:3a:49:f3:f6:3e:84:f6:4f:e1:c1:d0:
         44:58:25:59:c7:76:a9:7d:7f:14:28:ec:c4:82:35:45:3c:05:
         3d:65:e4:6c:af:52:6d:c2:37:3a:9f:07:c9:f4:94:02:ba:36:
         78:e7:f7:95:2b:4a:bc:ba:18:4e:b8:72:65:83:0f:f8:a4:a1:
         90:f8:2e:3c
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQoG2DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIxMDE5MDkxNloXDTI1MTEwNTE5MTYw
MFowMzExMC8GA1UEAxMoNzFjZWU5ZGMzMzljYjFmZDM1OThkZTM2Mjg1ZGY0MmQ3
YzFjNWY1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5zVhRKZhnC
87A2Qdjk8jg6P6xspcrdzoAr4B11RQMvUPPQ3a3k959YvpYMXka+rDBxkfQSV0Qt
OD/7OWNIO3Kt9xebU9WHv4+xu6BVuiDnWj8waHLGCuhiNaX7POOTdPqgluXYbbok
0P80+l+9YPTtPIUbNsCVY+T23EiQsA2TNhAusqoY1ZToqgiwRq14RWBWxi7ofS+2
RpWxHkFWSRjIsvikQ1Foc2s/v6EGawI0X+CvaLd+V7PXXaGbduURdH/yVw8izyT6
adLCmFqV455DVjRUcZpuT6vMAkrEJL78zh5gw2N/URkYLDGYG+Ip+jFJ6gu1qmQ7
zCD41pW1lk0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBTCMIMbV3UEq7j2OhCMBjRl
t3419zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MjFmZGRkYS01MDFh
LTRkZTEtYWEyNy03ODEwNzdlM2MxMmQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzIxZmRkZGEtNTAxYS00
ZGUxLWFhMjctNzgxMDc3ZTNjMTJkLzcxY2VlOWRjMzM5Y2IxZmQzNTk4ZGUzNjI4
NWRmNDJkN2MxYzVmNTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDAlAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCsDMA0GCSqGSIb3DQEBCwUAA4IBAQC7pQXpY+4DscinbHUXN43m
IOKlVzclcvjBe3CbCwK7UdBGMMp8B4X1JbbKwNVZutb04PJqXu0BmQYvPGpY7xNK
HSABs7HCJveOiWTgaQscDLkY4rszL4WFzsTWHx6F3pA7XKKwpnR/TdZnRlIy1Mch
gDEy8nBtNg8aKzpUB1KCbmOHtP4GhYfEO5mOLGjXXmZ1bgBMYuuMSGmPlrATVPtF
k+Q15gkg9rRLDGB+fJfeZKPFEZEEjZzCOYrTOknz9j6E9k/hwdBEWCVZx3apfX8U
KOzEgjVFPAU9ZeRsr1Jtwjc6nwfJ9JQCujZ45/eVK0q8uhhOuHJlgw/4pKGQ+C48
-----END CERTIFICATE-----