Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8435652389cb0adc47c905152092f720a86370a2.cer
File:                     8435652389cb0adc47c905152092f720a86370a2.cer (raw, json)
Hash identifier:          nIFWAgOESeSB+x+Q9niEKUavii6b3c9P5h3Wg4ivl+Y=
Subject key identifier:   25:B6:5B:66:26:46:E6:7F:75:FD:D3:CD:B4:7A:79:89:14:EF:57:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F81F3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a46eaec6-4829-4f89-8d28-080f56039593/8435652389cb0adc47c905152092f720a86370a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a46eaec6-4829-4f89-8d28-080f56039593/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 16:48:18 +0000
Certificate not after:    Mon 30 Jun 2025 15:40:59 +0000
Subordinate resources:    AS: 273069
                          IP: 2803:7790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16260923 (0xf81f3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 16:48:18 2023 GMT
            Not After : Jun 30 15:40:59 2025 GMT
        Subject: CN=8435652389cb0adc47c905152092f720a86370a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:ef:0e:c2:71:83:e0:5f:db:3a:57:58:df:
                    9c:26:7a:44:f4:4e:0f:26:38:76:e0:c9:5f:b9:8d:
                    f3:89:49:b0:b6:b4:80:49:2a:37:a6:82:56:df:2a:
                    bc:56:0e:69:ab:90:89:4d:c4:e2:e4:90:fa:4b:60:
                    31:fd:21:f3:6b:23:b8:44:6b:e0:2c:b8:4e:86:58:
                    31:6a:70:7d:c0:4d:b2:95:36:35:c7:74:75:26:3b:
                    e7:6a:2d:3b:42:33:db:3e:0e:13:2c:6e:0d:c2:af:
                    19:bb:82:f0:09:eb:fd:23:71:60:49:39:70:24:24:
                    86:0b:c8:fc:63:a4:d3:27:88:54:8c:fa:3a:75:d9:
                    9e:58:c3:2c:31:0f:10:f1:0f:6d:c7:8d:ca:a1:57:
                    b2:e4:05:a3:72:7a:1b:93:12:81:8b:59:01:66:f0:
                    76:96:db:b6:bf:1b:18:97:70:e7:49:2e:16:10:08:
                    d0:3e:61:71:88:d4:00:45:b6:2e:26:ed:a1:f0:66:
                    4f:d5:16:f5:c3:f4:01:97:46:bf:d3:84:40:f9:cc:
                    20:2d:ee:7d:55:3f:1a:d9:52:5c:ab:bc:77:c3:15:
                    5d:59:60:84:2b:6a:c0:e5:98:05:ae:1e:aa:4b:b2:
                    d1:69:aa:4c:3a:d9:c6:9c:72:b2:37:7e:4a:11:1f:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B6:5B:66:26:46:E6:7F:75:FD:D3:CD:B4:7A:79:89:14:EF:57:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a46eaec6-4829-4f89-8d28-080f56039593/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a46eaec6-4829-4f89-8d28-080f56039593/8435652389cb0adc47c905152092f720a86370a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273069

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:90:50:61:fe:d1:fe:1f:9e:35:54:89:c5:c6:49:f3:7a:
         18:f0:61:7e:16:f0:9f:58:19:95:f2:24:6c:d1:52:be:94:69:
         d1:1a:9f:1d:43:d6:37:3d:b7:4e:79:81:72:49:c1:23:97:d6:
         87:09:d1:42:46:30:62:8c:b0:13:42:27:ba:82:5f:7c:47:45:
         11:93:95:2e:68:bf:51:99:ac:cd:cc:8c:e5:32:db:49:8f:6d:
         cd:3e:7c:3e:62:07:ac:48:54:c5:03:61:08:9e:45:8c:c3:24:
         ff:72:21:7d:9a:6e:a3:11:62:7c:10:36:ce:95:a9:11:cd:30:
         d7:39:cb:7c:79:38:3d:3a:9f:fa:bd:4d:09:a5:b7:38:8f:2b:
         62:0e:57:31:19:55:ff:15:7d:ee:01:fc:c8:f5:9b:fb:df:d0:
         eb:c1:7a:41:ad:bf:3d:69:03:ac:9c:4e:2a:34:b7:13:79:17:
         a0:5a:52:91:bc:22:7a:db:8c:30:97:7f:97:f9:0c:e9:67:52:
         40:7c:db:7c:2c:e9:38:dc:32:21:78:57:2c:44:22:9b:17:4c:
         9b:28:3c:59:d5:2a:b3:2c:18:64:f2:92:3b:da:63:56:62:81:
         6b:35:0c:23:9e:31:b6:65:b4:9e:53:ce:5a:e0:06:e8:3d:fd:
         a3:1d:e5:aa
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPgfOzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkwNDE2NDgxOFoXDTI1MDYzMDE1NDA1
OVowMzExMC8GA1UEAxMoODQzNTY1MjM4OWNiMGFkYzQ3YzkwNTE1MjA5MmY3MjBh
ODYzNzBhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIms7w7CcYPg
X9s6V1jfnCZ6RPRODyY4duDJX7mN84lJsLa0gEkqN6aCVt8qvFYOaauQiU3E4uSQ
+ktgMf0h82sjuERr4Cy4ToZYMWpwfcBNspU2Ncd0dSY752otO0Iz2z4OEyxuDcKv
GbuC8Anr/SNxYEk5cCQkhgvI/GOk0yeIVIz6OnXZnljDLDEPEPEPbceNyqFXsuQF
o3J6G5MSgYtZAWbwdpbbtr8bGJdw50kuFhAI0D5hcYjUAEW2LibtofBmT9UW9cP0
AZdGv9OEQPnMIC3ufVU/GtlSXKu8d8MVXVlghCtqwOWYBa4eqkuy0WmqTDrZxpxy
sjd+ShEfiR8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQltltmJkbmf3X90820enmJ
FO9XyzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hNDZlYWVjNi00ODI5
LTRmODktOGQyOC0wODBmNTYwMzk1OTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTQ2ZWFlYzYtNDgyOS00
Zjg5LThkMjgtMDgwZjU2MDM5NTkzLzg0MzU2NTIzODljYjBhZGM0N2M5MDUxNTIw
OTJmNzIwYTg2MzcwYTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDd5AwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCqtMA0GCSqGSIb3DQEBCwUAA4IBAQCqM5BQYf7R/h+eNVSJxcZJ
83oY8GF+FvCfWBmV8iRs0VK+lGnRGp8dQ9Y3PbdOeYFyScEjl9aHCdFCRjBijLAT
Qie6gl98R0URk5UuaL9RmazNzIzlMttJj23NPnw+YgesSFTFA2EInkWMwyT/ciF9
mm6jEWJ8EDbOlakRzTDXOct8eTg9Op/6vU0Jpbc4jytiDlcxGVX/FX3uAfzI9Zv7
39DrwXpBrb89aQOsnE4qNLcTeRegWlKRvCJ624wwl3+X+QzpZ1JAfNt8LOk43DIh
eFcsRCKbF0ybKDxZ1SqzLBhk8pI72mNWYoFrNQwjnjG2ZbSeU85a4AboPf2jHeWq
-----END CERTIFICATE-----