Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77bf1144f5ce9729d80122cfabe9bae1d8500800.cer
File:                     77bf1144f5ce9729d80122cfabe9bae1d8500800.cer (raw, json)
Hash identifier:          +Mf6/Fu3cCG983fSULL9FvKtqxEzZMBXRFN5m20Ob54=
Subject key identifier:   19:7B:5F:77:DE:AC:C5:F1:7F:5E:CC:AF:4C:25:B9:F6:C9:35:C6:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0110FC29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/04aadba6-77ad-4086-80f8-cc0676bdf3fd/77bf1144f5ce9729d80122cfabe9bae1d8500800.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/04aadba6-77ad-4086-80f8-cc0676bdf3fd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 22:23:02 +0000
Certificate not after:    Tue 01 Jul 2025 17:20:30 +0000
Subordinate resources:    AS: 270172
                          IP: 2001:1203::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17890345 (0x110fc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 22:23:02 2024 GMT
            Not After : Jul  1 17:20:30 2025 GMT
        Subject: CN=77bf1144f5ce9729d80122cfabe9bae1d8500800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:9e:c6:a9:c2:a1:05:c1:eb:77:fd:d2:84:
                    59:f2:87:6c:c4:0c:cc:82:de:fb:d3:14:1f:f1:18:
                    f5:14:88:e9:c0:c3:ba:73:8f:42:2d:17:fe:49:18:
                    af:ca:f5:7f:10:96:a9:19:a3:86:e7:85:e9:fd:cc:
                    63:92:f6:3e:41:37:0a:c6:a9:bc:05:07:e9:6a:d2:
                    27:d8:0f:56:11:75:02:ad:e0:c0:eb:7b:72:ba:1c:
                    b5:70:fa:e5:5c:5a:41:c3:0c:76:f1:b2:be:1e:60:
                    76:6d:00:e9:6e:e7:27:a9:38:bf:be:55:f4:2a:49:
                    5a:d0:fe:56:f2:6e:18:83:3d:2e:db:11:33:39:a1:
                    81:bb:e0:96:78:04:c1:17:41:54:de:36:f7:8f:1b:
                    86:1d:8b:06:b5:fa:38:ea:74:7f:b3:b6:d7:10:c2:
                    f6:23:44:05:ef:1c:0f:89:fd:f5:a6:cb:36:48:26:
                    8d:f5:63:05:3d:74:78:cc:c7:5d:66:ff:b4:d5:cc:
                    0e:71:36:d6:1d:9e:9c:80:51:0b:fc:db:67:39:ea:
                    86:da:25:f5:7a:e7:ab:e6:ac:2e:66:37:4d:eb:ed:
                    b7:d3:92:90:8f:9e:bd:c6:45:24:39:eb:69:ff:37:
                    5f:11:ab:85:88:6c:6a:8e:e6:89:33:5c:df:0f:30:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7B:5F:77:DE:AC:C5:F1:7F:5E:CC:AF:4C:25:B9:F6:C9:35:C6:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/04aadba6-77ad-4086-80f8-cc0676bdf3fd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/04aadba6-77ad-4086-80f8-cc0676bdf3fd/77bf1144f5ce9729d80122cfabe9bae1d8500800.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270172

    Signature Algorithm: sha256WithRSAEncryption
         97:64:b3:65:95:51:f3:27:20:aa:d6:d1:08:40:5c:87:ef:33:
         5a:5e:dd:94:13:4e:7a:91:94:22:46:77:c5:80:c8:f2:07:a6:
         10:1b:35:ec:4b:e5:ec:33:a1:a9:e7:be:0e:43:f6:cf:85:ce:
         e7:14:83:70:cc:7a:7c:3a:3d:79:77:8a:83:7e:70:0f:43:b4:
         f3:8e:2b:3a:19:51:fe:67:34:99:e9:61:e4:2a:36:5e:02:cb:
         d5:61:e2:f3:c8:fe:0c:45:eb:b6:98:91:08:2a:24:5a:a4:0f:
         f3:0f:7e:70:d9:17:bb:f4:48:da:d9:7b:88:e7:81:2b:5b:e9:
         36:e4:f5:05:6b:a2:a4:97:4c:24:26:72:87:b0:4f:d5:d6:5f:
         36:f4:38:b3:70:4a:1e:56:d1:da:4a:3a:78:ed:5e:bf:5e:7b:
         03:a3:a1:ea:82:86:5a:3a:57:33:1e:7e:d8:70:69:93:f9:93:
         e2:3b:1b:e5:38:f6:46:e9:33:3b:05:cd:c2:5f:38:0c:e8:51:
         aa:f2:30:e0:8d:cf:05:b8:ec:71:e8:79:84:7b:84:f9:6b:c6:
         7b:00:7e:39:33:fb:82:66:7f:8a:50:4b:a7:aa:6b:45:b5:3d:
         de:97:a1:df:7b:55:11:d9:61:54:f8:da:df:d9:75:a9:f3:f6:
         be:60:d1:b6
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEARD8KTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDQxMTIyMjMwMloXDTI1MDcwMTE3MjAz
MFowMzExMC8GA1UEAxMoNzdiZjExNDRmNWNlOTcyOWQ4MDEyMmNmYWJlOWJhZTFk
ODUwMDgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJQxnsapwqEF
wet3/dKEWfKHbMQMzILe+9MUH/EY9RSI6cDDunOPQi0X/kkYr8r1fxCWqRmjhueF
6f3MY5L2PkE3CsapvAUH6WrSJ9gPVhF1Aq3gwOt7croctXD65VxaQcMMdvGyvh5g
dm0A6W7nJ6k4v75V9CpJWtD+VvJuGIM9LtsRMzmhgbvglngEwRdBVN42948bhh2L
BrX6OOp0f7O21xDC9iNEBe8cD4n99abLNkgmjfVjBT10eMzHXWb/tNXMDnE21h2e
nIBRC/zbZznqhtol9Xrnq+asLmY3Tevtt9OSkI+evcZFJDnraf83XxGrhYhsao7m
iTNc3w8wtA8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQZe1933qzF8X9ezK9MJbn2
yTXG+TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNGFhZGJhNi03N2Fk
LTQwODYtODBmOC1jYzA2NzZiZGYzZmQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDRhYWRiYTYtNzdhZC00
MDg2LTgwZjgtY2MwNjc2YmRmM2ZkLzc3YmYxMTQ0ZjVjZTk3MjlkODAxMjJjZmFi
ZTliYWUxZDg1MDA4MDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABEgMwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBB9cMA0GCSqGSIb3DQEBCwUAA4IBAQCXZLNllVHzJyCq1tEIQFyH
7zNaXt2UE056kZQiRnfFgMjyB6YQGzXsS+XsM6Gp574OQ/bPhc7nFINwzHp8Oj15
d4qDfnAPQ7Tzjis6GVH+ZzSZ6WHkKjZeAsvVYeLzyP4MReu2mJEIKiRapA/zD35w
2Re79Eja2XuI54ErW+k25PUFa6Kkl0wkJnKHsE/V1l829DizcEoeVtHaSjp47V6/
XnsDo6HqgoZaOlczHn7YcGmT+ZPiOxvlOPZG6TM7Bc3CXzgM6FGq8jDgjc8FuOxx
6HmEe4T5a8Z7AH45M/uCZn+KUEunqmtFtT3el6Hfe1UR2WFU+Nrf2XWp8/a+YNG2
-----END CERTIFICATE-----