Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b8d5041f2a67b46f4085a6b118d69470993bb06.cer
File:                     7b8d5041f2a67b46f4085a6b118d69470993bb06.cer (raw, json)
Hash identifier:          oeUQR9GI/Fk7d1p/Z1vMYq/iRvC2Xw6mWImaOxdh5jc=
Subject key identifier:   81:74:9D:76:97:7A:17:2E:8F:77:BA:9C:47:46:D3:6F:FB:51:1A:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E35652
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9122ad27-87ae-4eb6-927c-9260d2335fff/7b8d5041f2a67b46f4085a6b118d69470993bb06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9122ad27-87ae-4eb6-927c-9260d2335fff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:43:22 +0000
Certificate not after:    Wed 11 Sep 2024 11:32:34 +0000
Subordinate resources:    AS: 28447
                          IP: 2806:3f6::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14898770 (0xe35652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 17:43:22 2023 GMT
            Not After : Sep 11 11:32:34 2024 GMT
        Subject: CN=7b8d5041f2a67b46f4085a6b118d69470993bb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:31:f6:58:a6:f8:e1:a1:70:28:78:b7:04:
                    80:ea:22:35:11:d4:1c:40:83:07:ba:7d:f8:3e:69:
                    a1:54:d8:2c:3f:3c:d8:56:bf:c6:f9:8d:e8:42:f8:
                    e3:a6:ea:6c:0b:07:36:d0:85:60:b8:38:eb:7c:8b:
                    1e:33:92:16:b8:2c:79:f2:42:75:3c:6b:a9:7a:d8:
                    03:9a:24:ad:3e:4b:84:60:d7:19:16:e2:2b:eb:51:
                    69:0b:48:c1:a4:90:37:3c:07:3e:53:56:d8:79:b6:
                    02:6a:58:2e:c2:7e:e4:2d:01:e3:6a:2b:3a:1d:8b:
                    d8:1a:05:a5:b3:5d:3a:db:d9:64:33:2e:52:42:80:
                    87:50:98:20:5f:65:b4:b8:59:07:61:0a:8e:3e:df:
                    07:ea:21:e5:a2:1c:0f:dc:de:a1:9e:58:c2:d2:d4:
                    88:f4:9f:2f:a7:68:a3:75:b3:a1:79:8d:3f:a7:75:
                    9a:cb:ca:d5:3c:a1:dc:37:d5:40:b3:4f:2a:33:41:
                    3c:1f:cf:e8:e6:c7:8b:89:2d:3d:0d:9d:f4:0c:b1:
                    22:a6:a9:96:3a:c0:ec:7a:57:12:78:52:a6:0c:5a:
                    35:e2:27:35:59:54:c9:1e:c7:e5:7c:d8:ee:a0:d1:
                    7c:cf:2c:75:5e:53:b8:b5:32:9d:2d:7c:b7:98:89:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:9D:76:97:7A:17:2E:8F:77:BA:9C:47:46:D3:6F:FB:51:1A:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9122ad27-87ae-4eb6-927c-9260d2335fff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9122ad27-87ae-4eb6-927c-9260d2335fff/7b8d5041f2a67b46f4085a6b118d69470993bb06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28447

    Signature Algorithm: sha256WithRSAEncryption
         b7:7a:16:8d:9b:31:3d:8d:1a:85:3f:ca:b5:eb:11:ab:b9:3b:
         34:b8:66:b3:d8:92:11:9c:f9:af:35:88:6d:18:93:95:66:9a:
         75:99:98:d9:42:9d:56:79:25:a1:b8:8b:8d:9c:f7:06:52:a4:
         8e:c3:b1:0a:0e:91:ac:f5:88:e6:61:9d:5c:92:db:2a:cb:d6:
         3c:0d:64:e5:2c:45:9a:c7:d1:96:a0:5f:5c:cc:4b:11:ed:09:
         0e:6c:54:2d:3d:1a:eb:60:ea:07:04:90:20:a8:9e:5f:65:e3:
         c9:95:9e:7e:e1:ed:e8:79:25:3a:1a:22:65:02:c6:fb:3e:c8:
         ef:a6:80:b9:7c:83:72:15:a4:7e:6f:d9:e9:2f:a2:91:e7:7c:
         3d:58:d3:19:a7:ee:94:06:f0:36:52:db:3e:4a:1a:08:d5:cd:
         49:34:e4:fb:da:58:b0:e5:3c:d1:4c:d6:c0:08:91:bb:44:80:
         e6:76:e8:6d:0b:89:d6:82:ee:8e:18:c6:31:7c:69:dc:f4:db:
         31:68:95:17:cb:a7:75:44:6d:0c:d2:05:47:d3:e9:ee:3a:b1:
         70:5a:f5:b7:0b:e3:25:00:92:ad:97:dd:ea:15:b7:e2:b8:6c:
         5e:ef:76:4b:7d:85:93:a2:68:7a:17:36:84:52:69:67:b5:97:
         80:a2:75:f1
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIEAONWUjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwMzE3NDMyMloXDTI0MDkxMTExMzIz
NFowMzExMC8GA1UEAxMoN2I4ZDUwNDFmMmE2N2I0NmY0MDg1YTZiMTE4ZDY5NDcw
OTkzYmIwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBxMfZYpvjh
oXAoeLcEgOoiNRHUHECDB7p9+D5poVTYLD882Fa/xvmN6EL446bqbAsHNtCFYLg4
63yLHjOSFrgsefJCdTxrqXrYA5okrT5LhGDXGRbiK+tRaQtIwaSQNzwHPlNW2Hm2
AmpYLsJ+5C0B42orOh2L2BoFpbNdOtvZZDMuUkKAh1CYIF9ltLhZB2EKjj7fB+oh
5aIcD9zeoZ5YwtLUiPSfL6doo3WzoXmNP6d1msvK1Tyh3DfVQLNPKjNBPB/P6ObH
i4ktPQ2d9AyxIqapljrA7HpXEnhSpgxaNeInNVlUyR7H5XzY7qDRfM8sdV5TuLUy
nS18t5iJMccCAwEAAaOCAvowggL2MB0GA1UdDgQWBBSBdJ12l3oXLo93upxHRtNv
+1EaHDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MTIyYWQyNy04N2Fl
LTRlYjYtOTI3Yy05MjYwZDIzMzVmZmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTEyMmFkMjctODdhZS00
ZWI2LTkyN2MtOTI2MGQyMzM1ZmZmLzdiOGQ1MDQxZjJhNjdiNDZmNDA4NWE2YjEx
OGQ2OTQ3MDk5M2JiMDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgGA/YwGQYIKwYBBQUHAQgBAf8E
CjAIoAYwBAICbx8wDQYJKoZIhvcNAQELBQADggEBALd6Fo2bMT2NGoU/yrXrEau5
OzS4ZrPYkhGc+a81iG0Yk5VmmnWZmNlCnVZ5JaG4i42c9wZSpI7DsQoOkaz1iOZh
nVyS2yrL1jwNZOUsRZrH0ZagX1zMSxHtCQ5sVC09Gutg6gcEkCConl9l48mVnn7h
7eh5JToaImUCxvs+yO+mgLl8g3IVpH5v2ekvopHnfD1Y0xmn7pQG8DZS2z5KGgjV
zUk05PvaWLDlPNFM1sAIkbtEgOZ26G0LidaC7o4YxjF8adz02zFolRfLp3VEbQzS
BUfT6e46sXBa9bcL4yUAkq2X3eoVt+K4bF7vdkt9hZOiaHoXNoRSaWe1l4CidfE=
-----END CERTIFICATE-----