Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a068db25ad0760f0ab8468cec596ea08c267143.cer
File:                     7a068db25ad0760f0ab8468cec596ea08c267143.cer (raw, json)
Hash identifier:          j+VOySTatqs4UtEa7BMJQIfJqMYZZtG5UNIhxh9R1ns=
Subject key identifier:   E4:1E:CD:FF:26:C7:9B:08:D0:76:87:E3:6D:83:38:63:BE:8B:1C:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CDC20A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/7a068db25ad0760f0ab8468cec596ea08c267143.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 May 2022 21:43:08 +0000
Certificate not after:    Tue 23 Jan 2024 16:14:12 +0000
Subordinate resources:    AS: 272097
                          IP: 2803:c710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13484554 (0xcdc20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 21:43:08 2022 GMT
            Not After : Jan 23 16:14:12 2024 GMT
        Subject: CN=7a068db25ad0760f0ab8468cec596ea08c267143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:27:c5:8d:10:f2:7d:24:cf:a4:5a:7d:1a:
                    fc:29:b5:74:63:47:b8:16:3f:9b:be:54:1d:1a:2c:
                    f7:68:dd:31:29:39:ea:97:fd:fa:45:10:54:54:71:
                    e8:f6:e0:7a:64:86:27:06:f5:82:77:c3:5f:da:25:
                    12:e8:79:2b:5b:df:09:11:e4:d0:34:87:75:b7:6c:
                    b0:73:0b:f0:c0:18:c7:e3:6b:21:f9:f4:80:8e:9b:
                    49:48:dc:0f:4a:64:c2:8b:10:55:2a:a7:51:bf:05:
                    a6:a1:ad:7c:dc:85:0d:1f:08:30:07:36:8a:0e:f2:
                    28:d3:c3:1a:c0:0b:ca:16:d6:e1:ed:fa:62:35:3f:
                    b5:86:d8:65:e3:3d:54:c6:97:f6:c3:e3:63:a4:c2:
                    dc:ee:e9:2d:36:64:d0:11:e4:35:65:a1:b5:15:90:
                    b0:77:ce:92:08:a0:46:18:7a:71:99:69:c1:85:c5:
                    1d:c8:41:18:39:11:45:05:36:a4:d6:61:8a:46:c8:
                    67:32:10:07:9e:01:34:1c:2d:55:91:65:3f:60:a2:
                    03:49:87:5b:d9:24:c6:3c:e2:d6:9a:3d:1b:66:62:
                    25:62:d4:ae:83:90:94:df:f2:1a:92:0a:95:79:cb:
                    b8:2a:c4:29:d5:bd:75:4d:65:ac:7d:fa:f9:d5:91:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1E:CD:FF:26:C7:9B:08:D0:76:87:E3:6D:83:38:63:BE:8B:1C:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/7a068db25ad0760f0ab8468cec596ea08c267143.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272097

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:de:a1:81:e3:a4:65:0d:7d:09:ee:d9:ab:76:b2:2a:51:
         26:97:bd:74:0b:54:ed:9c:f3:f4:f7:d8:e5:2a:ef:2b:b9:97:
         fc:e7:56:1e:a7:e4:11:62:ea:a1:d1:d5:ae:c8:e4:7d:64:df:
         6e:5d:80:96:51:b2:8d:5c:69:ff:f9:88:86:f4:d6:0f:49:0c:
         24:87:f7:f1:03:59:0b:45:7f:8c:49:f1:b6:21:6b:72:c6:44:
         88:d6:72:64:56:00:8a:82:df:75:ac:b7:a9:3f:c0:2b:8f:3e:
         ff:25:4c:96:5e:e9:16:1d:68:bd:80:32:b2:a2:91:e0:c0:5f:
         8d:a5:e4:1b:9a:c9:94:43:05:68:62:e7:89:49:0a:ad:a8:1e:
         cf:35:b0:89:38:8d:54:fa:30:4a:ca:61:2a:9f:5c:9c:19:96:
         94:63:e3:3e:bd:2a:48:8a:05:16:32:83:31:24:fc:67:d7:fe:
         67:e8:3e:60:44:27:6d:e2:8a:60:1e:bf:8d:f6:10:90:5d:7e:
         3b:69:d6:e6:84:27:df:84:9a:f9:be:ac:e7:91:93:12:a2:8f:
         55:91:f0:5e:a5:f5:93:37:8c:06:43:69:c9:7a:c4:1b:d3:68:
         e7:9d:76:56:7b:f7:94:25:7e:ba:2b:5e:2f:94:94:51:71:4c:
         37:f4:95:60
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAM3CCjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDUxNzIxNDMwOFoXDTI0MDEyMzE2MTQx
MlowMzExMC8GA1UEAxMoN2EwNjhkYjI1YWQwNzYwZjBhYjg0NjhjZWM1OTZlYTA4
YzI2NzE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJKuJ8WNEPJ9
JM+kWn0a/Cm1dGNHuBY/m75UHRos92jdMSk56pf9+kUQVFRx6PbgemSGJwb1gnfD
X9olEuh5K1vfCRHk0DSHdbdssHML8MAYx+NrIfn0gI6bSUjcD0pkwosQVSqnUb8F
pqGtfNyFDR8IMAc2ig7yKNPDGsALyhbW4e36YjU/tYbYZeM9VMaX9sPjY6TC3O7p
LTZk0BHkNWWhtRWQsHfOkgigRhh6cZlpwYXFHchBGDkRRQU2pNZhikbIZzIQB54B
NBwtVZFlP2CiA0mHW9kkxjzi1po9G2ZiJWLUroOQlN/yGpIKlXnLuCrEKdW9dU1l
rH36+dWR1oUCAwEAAaOCAvswggL3MB0GA1UdDgQWBBTkHs3/JsebCNB2h+Ntgzhj
vosc5DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MjFiNDYwZC04ODZj
LTQyMDktYTM1Mi0yMmVmYTNmZGJiYzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDIxYjQ2MGQtODg2Yy00
MjA5LWEzNTItMjJlZmEzZmRiYmMxLzdhMDY4ZGIyNWFkMDc2MGYwYWI4NDY4Y2Vj
NTk2ZWEwOGMyNjcxNDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxxAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCbhMA0GCSqGSIb3DQEBCwUAA4IBAQCF/N6hgeOkZQ19Ce7Zq3ay
KlEml710C1TtnPP099jlKu8ruZf851Yep+QRYuqh0dWuyOR9ZN9uXYCWUbKNXGn/
+YiG9NYPSQwkh/fxA1kLRX+MSfG2IWtyxkSI1nJkVgCKgt91rLepP8Arjz7/JUyW
XukWHWi9gDKyopHgwF+NpeQbmsmUQwVoYueJSQqtqB7PNbCJOI1U+jBKymEqn1yc
GZaUY+M+vSpIigUWMoMxJPxn1/5n6D5gRCdt4opgHr+N9hCQXX47adbmhCffhJr5
vqznkZMSoo9VkfBepfWTN4wGQ2nJesQb02jnnXZWe/eUJX66K14vlJRRcUw39JVg
-----END CERTIFICATE-----