Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7856d6eafdc63086ea763d9996b3c8a6c5233a5d.cer
File:                     7856d6eafdc63086ea763d9996b3c8a6c5233a5d.cer (raw, json)
Hash identifier:          FP5Tzv8S9/2vTM5sSNGKYY4kPNJCxS/Ckjg6nlLAILU=
Subject key identifier:   D6:35:7E:05:D3:7C:13:1D:09:F0:F4:4A:F2:37:B4:AB:53:40:CE:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBC8CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/47b8503b-79a9-40f1-92af-de86871794d5/7856d6eafdc63086ea763d9996b3c8a6c5233a5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/47b8503b-79a9-40f1-92af-de86871794d5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 12:41:28 +0000
Certificate not after:    Sun 18 Aug 2024 19:47:40 +0000
Subordinate resources:    AS: 267702
                          IP: 45.163.188.0/22
                          IP: 2803:71a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16500942 (0xfbc8ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 12:41:28 2023 GMT
            Not After : Aug 18 19:47:40 2024 GMT
        Subject: CN=7856d6eafdc63086ea763d9996b3c8a6c5233a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:da:39:aa:41:ef:31:f8:33:47:bc:47:58:
                    25:f3:f6:01:b6:47:31:32:2c:9e:b1:29:17:90:5c:
                    61:1e:28:3d:28:d2:3a:69:18:4c:02:10:f1:9a:c4:
                    1e:72:71:f8:2d:82:0c:60:de:33:ec:d7:a5:a6:3d:
                    dc:b6:08:8b:60:88:2c:47:78:17:ae:ee:f1:2e:52:
                    15:f8:7d:a2:4a:8f:b2:fc:c9:f0:0f:96:19:0d:79:
                    ac:c6:e7:e0:e8:7b:6f:77:24:3e:08:85:f6:d1:4f:
                    65:f9:ea:db:52:02:1c:eb:cb:dc:4a:b3:3d:16:9e:
                    17:a5:98:d9:27:80:45:f6:65:9a:1d:e7:e1:37:0f:
                    55:2d:41:e7:1c:f5:d0:50:9a:09:57:fd:91:47:9a:
                    f1:e4:5f:ba:b1:ce:17:0f:e5:11:6e:25:4b:52:93:
                    6b:a7:37:0e:4e:36:3f:28:3b:0f:b2:93:98:6a:c3:
                    1e:81:b1:44:fa:98:99:d4:23:45:f3:0b:7c:30:db:
                    14:72:56:f4:c7:9c:68:08:d9:73:01:ca:5e:69:08:
                    7c:c5:9b:1d:be:d7:e5:aa:5b:54:1c:51:cb:d6:ea:
                    5a:41:09:1e:5b:f3:0f:2e:e1:22:89:f7:80:d3:b5:
                    43:d0:24:0c:76:13:4d:f0:57:33:b3:b9:e8:78:8a:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:35:7E:05:D3:7C:13:1D:09:F0:F4:4A:F2:37:B4:AB:53:40:CE:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/47b8503b-79a9-40f1-92af-de86871794d5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/47b8503b-79a9-40f1-92af-de86871794d5/7856d6eafdc63086ea763d9996b3c8a6c5233a5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.188.0/22
                IPv6:
                  2803:71a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267702

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:1e:7d:21:23:ca:00:f0:4d:e1:b6:38:eb:a1:6a:c3:f2:
         a2:c7:c6:35:dd:0b:f1:3d:5e:d9:4d:ae:6b:4b:b0:01:68:c5:
         83:63:4c:ef:11:bf:ed:40:74:d1:ee:fc:f6:73:ed:e0:1c:33:
         fa:28:68:21:12:4a:6b:56:db:e7:51:dd:ea:8e:03:0c:ee:6f:
         9c:27:6a:25:ae:7b:f7:7b:0c:2c:9d:d5:e9:88:7b:b5:0c:ae:
         d5:c7:51:9d:8b:4e:e7:6d:a7:66:b4:a7:59:8e:f5:74:56:50:
         d6:2e:14:ac:79:4e:95:e8:36:e8:84:b0:7f:02:67:b8:38:83:
         94:87:a9:32:61:b9:9a:19:2b:ab:77:40:63:3d:06:01:95:21:
         87:0f:c1:5b:0f:45:41:9e:db:68:21:42:95:63:9e:e1:8d:f6:
         dc:29:9e:d8:0b:f5:8f:0d:f7:e6:9a:b5:4b:e2:9b:b9:fb:83:
         ac:01:1a:b8:1b:45:66:7f:7f:e6:dd:30:99:0a:d3:c9:c2:93:
         3b:24:bd:b7:e3:45:c0:46:e7:e9:bb:33:a2:0b:13:26:4b:dc:
         31:a4:94:1b:0f:d8:d0:2d:be:4d:95:97:2e:32:97:eb:ab:4e:
         ca:51:80:0f:0c:21:be:75:70:a8:de:7b:b8:3d:4b:15:96:45:
         b6:71:14:66
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPvIzjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAwMzEyNDEyOFoXDTI0MDgxODE5NDc0
MFowMzExMC8GA1UEAxMoNzg1NmQ2ZWFmZGM2MzA4NmVhNzYzZDk5OTZiM2M4YTZj
NTIzM2E1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6R2jmqQe8x
+DNHvEdYJfP2AbZHMTIsnrEpF5BcYR4oPSjSOmkYTAIQ8ZrEHnJx+C2CDGDeM+zX
paY93LYIi2CILEd4F67u8S5SFfh9okqPsvzJ8A+WGQ15rMbn4Oh7b3ckPgiF9tFP
Zfnq21ICHOvL3EqzPRaeF6WY2SeARfZlmh3n4TcPVS1B5xz10FCaCVf9kUea8eRf
urHOFw/lEW4lS1KTa6c3Dk42Pyg7D7KTmGrDHoGxRPqYmdQjRfMLfDDbFHJW9Mec
aAjZcwHKXmkIfMWbHb7X5apbVBxRy9bqWkEJHlvzDy7hIon3gNO1Q9AkDHYTTfBX
M7O56HiKmDkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTWNX4F03wTHQnw9EryN7Sr
U0DOOzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80N2I4NTAzYi03OWE5
LTQwZjEtOTJhZi1kZTg2ODcxNzk0ZDUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDdiODUwM2ItNzlhOS00
MGYxLTkyYWYtZGU4Njg3MTc5NGQ1Lzc4NTZkNmVhZmRjNjMwODZlYTc2M2Q5OTk2
YjNjOGE2YzUyMzNhNWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2jvDANBAIAAjAHAwUAKANxoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFbYwDQYJKoZIhvcNAQELBQADggEBAGF/
Hn0hI8oA8E3htjjroWrD8qLHxjXdC/E9XtlNrmtLsAFoxYNjTO8Rv+1AdNHu/PZz
7eAcM/ooaCESSmtW2+dR3eqOAwzub5wnaiWue/d7DCyd1emIe7UMrtXHUZ2LTudt
p2a0p1mO9XRWUNYuFKx5TpXoNuiEsH8CZ7g4g5SHqTJhuZoZK6t3QGM9BgGVIYcP
wVsPRUGe22ghQpVjnuGN9twpntgL9Y8N9+aatUvim7n7g6wBGrgbRWZ/f+bdMJkK
08nCkzskvbfjRcBG5+m7M6ILEyZL3DGklBsP2NAtvk2Vly4yl+urTspRgA8MIb51
cKjee7g9SxWWRbZxFGY=
-----END CERTIFICATE-----