Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76233e1da7ae8c4b944e069e3f3d94bd54bda2cb.cer
File:                     76233e1da7ae8c4b944e069e3f3d94bd54bda2cb.cer (raw, json)
Hash identifier:          NdfcsSwTwrMuaeW4RaqC7uFcYTM2zxGgzZu6mxK68Q8=
Subject key identifier:   FE:EF:5C:FD:4E:05:71:B5:CC:CA:47:4E:5C:55:60:A7:24:96:EF:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       011019D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c778dfba-6780-4169-b339-ff46f6eb1c28/76233e1da7ae8c4b944e069e3f3d94bd54bda2cb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c778dfba-6780-4169-b339-ff46f6eb1c28/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:10:38 +0000
Certificate not after:    Mon 02 Feb 2026 21:24:06 +0000
Subordinate resources:    AS: 273206
                          IP: 2803:5650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17832405 (0x11019d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 18:10:38 2024 GMT
            Not After : Feb  2 21:24:06 2026 GMT
        Subject: CN=76233e1da7ae8c4b944e069e3f3d94bd54bda2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:79:50:fc:10:41:19:4c:e5:6f:ee:f4:53:
                    59:ea:ce:f6:54:6f:6f:a2:e2:63:1c:da:b0:18:36:
                    b5:4a:1e:ad:1d:04:7f:ba:20:90:7f:46:6c:a7:d5:
                    a9:6a:6f:ad:fb:27:8e:8f:ee:22:23:2c:2f:31:27:
                    79:5f:2b:09:90:d8:ba:c5:9d:27:ac:ce:2a:53:5f:
                    6a:94:fb:76:80:e2:92:93:1f:9a:41:29:f8:fa:0d:
                    6f:b1:60:ba:00:aa:ee:74:3d:45:d1:e7:c4:43:86:
                    4f:8b:f5:dc:03:47:7e:1f:e4:e0:15:ff:5f:21:17:
                    b8:e7:ea:e6:b2:dc:66:67:24:64:e2:3f:5e:11:ce:
                    10:0a:1d:f9:e2:9d:b2:0d:ef:27:43:b2:0c:e0:da:
                    b0:dc:b5:02:a4:49:70:4d:3b:04:72:76:cf:10:d7:
                    58:35:51:57:8d:da:78:bf:18:de:c4:09:c5:2d:28:
                    c1:b1:0f:50:61:70:9f:c4:93:e7:7c:8a:aa:34:0d:
                    12:dc:37:a7:7b:3c:06:30:1f:da:73:db:54:6a:07:
                    30:0f:8b:70:b8:50:c1:f4:96:f3:32:28:81:18:5c:
                    59:09:f3:c7:c9:7a:d1:16:df:2a:a0:2b:cd:39:0b:
                    d3:5d:5d:ec:20:69:fe:45:95:e4:f7:6f:3c:4f:4b:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EF:5C:FD:4E:05:71:B5:CC:CA:47:4E:5C:55:60:A7:24:96:EF:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c778dfba-6780-4169-b339-ff46f6eb1c28/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c778dfba-6780-4169-b339-ff46f6eb1c28/76233e1da7ae8c4b944e069e3f3d94bd54bda2cb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273206

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:ac:6c:34:a5:cf:27:94:6a:7b:34:9a:85:03:53:18:f6:
         f3:9e:8f:98:7b:db:37:b9:df:51:34:59:04:7f:4a:c4:c7:2b:
         df:e9:4b:e0:23:81:a0:8a:20:c5:f9:4b:ae:b8:d7:a2:95:7c:
         02:ea:ec:52:6a:74:d0:8a:bb:52:ff:ee:f2:33:1e:be:51:d3:
         21:49:b1:5e:a5:2b:e2:26:14:cd:0e:2f:d4:d7:c4:c7:51:47:
         dd:ba:5e:7e:b8:ee:b9:27:b9:6f:6f:4b:e6:53:71:83:f2:ea:
         4a:3c:2c:84:ce:56:a4:ad:95:ab:ef:fc:e7:53:14:4a:fb:f0:
         d9:5f:18:89:9e:cf:29:aa:ad:1a:48:7a:0f:d3:f0:aa:44:c7:
         87:db:ef:fd:63:38:46:cc:4d:e5:c0:2d:64:01:ac:91:21:d5:
         2c:3f:a5:9a:df:9e:67:2f:f1:bd:58:71:1a:3e:65:86:d9:0c:
         f0:f2:1b:8e:4d:a8:d0:9c:4a:e2:88:0d:91:69:3f:de:88:c0:
         43:6a:48:d6:ea:49:ff:72:41:00:cc:14:06:04:22:d6:be:47:
         2a:6d:f6:96:76:7e:ed:71:a4:b6:46:ba:26:ba:73:8b:1f:57:
         bb:83:14:d5:00:91:9a:3b:94:4b:d4:47:6c:21:49:61:5a:78:
         87:34:66:d5
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEARAZ1TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDQwMzE4MTAzOFoXDTI2MDIwMjIxMjQw
NlowMzExMC8GA1UEAxMoNzYyMzNlMWRhN2FlOGM0Yjk0NGUwNjllM2YzZDk0YmQ1
NGJkYTJjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKaTeVD8EEEZ
TOVv7vRTWerO9lRvb6LiYxzasBg2tUoerR0Ef7ogkH9GbKfVqWpvrfsnjo/uIiMs
LzEneV8rCZDYusWdJ6zOKlNfapT7doDikpMfmkEp+PoNb7FgugCq7nQ9RdHnxEOG
T4v13ANHfh/k4BX/XyEXuOfq5rLcZmckZOI/XhHOEAod+eKdsg3vJ0OyDODasNy1
AqRJcE07BHJ2zxDXWDVRV43aeL8Y3sQJxS0owbEPUGFwn8ST53yKqjQNEtw3p3s8
BjAf2nPbVGoHMA+LcLhQwfSW8zIogRhcWQnzx8l60RbfKqArzTkL011d7CBp/kWV
5PdvPE9LulUCAwEAAaOCAvswggL3MB0GA1UdDgQWBBT+71z9TgVxtczKR05cVWCn
JJbvhDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNzc4ZGZiYS02Nzgw
LTQxNjktYjMzOS1mZjQ2ZjZlYjFjMjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzc3OGRmYmEtNjc4MC00
MTY5LWIzMzktZmY0NmY2ZWIxYzI4Lzc2MjMzZTFkYTdhZThjNGI5NDRlMDY5ZTNm
M2Q5NGJkNTRiZGEyY2IubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDVlAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCs2MA0GCSqGSIb3DQEBCwUAA4IBAQAXbaxsNKXPJ5RqezSahQNT
GPbzno+Ye9s3ud9RNFkEf0rExyvf6UvgI4GgiiDF+UuuuNeilXwC6uxSanTQirtS
/+7yMx6+UdMhSbFepSviJhTNDi/U18THUUfdul5+uO65J7lvb0vmU3GD8upKPCyE
zlakrZWr7/znUxRK+/DZXxiJns8pqq0aSHoP0/CqRMeH2+/9YzhGzE3lwC1kAayR
IdUsP6Wa355nL/G9WHEaPmWG2Qzw8huOTajQnEriiA2RaT/eiMBDakjW6kn/ckEA
zBQGBCLWvkcqbfaWdn7tcaS2RromunOLH1e7gxTVAJGaO5RL1EdsIUlhWniHNGbV
-----END CERTIFICATE-----