Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/858751d092f1c51b2d85ec18db3c05734b04cc06.cer
File:                     858751d092f1c51b2d85ec18db3c05734b04cc06.cer (raw, json)
Hash identifier:          BuJyuScV/CM7uSIFKzoCDDcLaUpmwlTpa5ec6YL6mGo=
Subject key identifier:   1E:3C:E8:C6:43:B0:B4:A4:30:8D:BD:A7:19:29:00:29:D3:04:4E:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC5C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/498157a4-3e54-443f-a9fd-300fbf238981/858751d092f1c51b2d85ec18db3c05734b04cc06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/498157a4-3e54-443f-a9fd-300fbf238981/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 14:47:00 +0000
Certificate not after:    Sun 29 Sep 2024 16:11:04 +0000
Subordinate resources:    IP: 45.187.76.0/22
                          IP: 2803:d0e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15490202 (0xec5c9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 14:47:00 2023 GMT
            Not After : Sep 29 16:11:04 2024 GMT
        Subject: CN=858751d092f1c51b2d85ec18db3c05734b04cc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:b2:46:29:81:48:be:ea:fb:a3:ed:27:22:
                    bc:0b:d7:1a:49:06:43:51:ff:54:14:2d:12:ff:55:
                    cc:36:c6:e2:23:b8:de:5e:5d:b0:ce:58:9d:f8:b4:
                    62:4c:01:7c:4a:0b:41:f3:b4:92:48:5f:1a:44:23:
                    9e:34:30:d6:32:9b:05:f6:dc:82:a8:b3:01:bf:c6:
                    c3:3b:f7:0d:4e:74:62:6d:a0:d2:9f:b2:cb:5f:e6:
                    88:02:42:ca:2b:d2:34:08:69:79:39:bb:08:d0:fc:
                    b8:47:12:a6:35:dc:5f:01:a4:d8:7e:00:98:2c:24:
                    f7:8c:50:c4:f3:5b:17:eb:c6:dc:5e:59:02:80:3b:
                    01:12:be:48:20:6c:e5:1c:8f:28:fe:b5:cb:11:3c:
                    88:34:8a:bb:df:6c:a2:d1:4e:5d:1d:4a:1e:d0:72:
                    ff:bf:12:cc:12:c8:26:c5:51:d1:dd:6d:74:00:25:
                    db:4d:81:98:47:5e:ca:3a:f1:26:5b:fa:89:2a:3b:
                    0c:00:40:ae:35:17:3a:cb:4a:1b:79:8b:8a:22:79:
                    55:ef:aa:bc:37:0c:b9:5d:7e:56:df:5a:b9:9a:9f:
                    ec:5b:11:d0:19:05:a5:d0:d5:30:5a:d5:33:65:98:
                    a9:14:ee:3f:c5:fe:4e:8e:ee:94:69:85:be:7d:a7:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:E8:C6:43:B0:B4:A4:30:8D:BD:A7:19:29:00:29:D3:04:4E:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/498157a4-3e54-443f-a9fd-300fbf238981/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/498157a4-3e54-443f-a9fd-300fbf238981/858751d092f1c51b2d85ec18db3c05734b04cc06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.76.0/22
                IPv6:
                  2803:d0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:53:1e:5c:cd:49:2f:fb:78:a4:a3:1b:ce:c3:90:57:9f:76:
         e1:c4:68:e2:0d:60:59:07:12:33:ca:68:a6:9d:3f:9f:1f:d7:
         37:dd:7a:0c:27:ad:27:dd:ba:d8:36:37:87:45:84:d3:db:fb:
         80:d5:35:c1:33:0f:be:76:59:da:fd:8f:24:d5:c0:b4:be:e7:
         6c:1b:3a:70:8a:07:35:9d:67:48:f0:0f:fb:46:76:39:18:ba:
         b6:48:54:9a:2a:72:4c:54:57:7d:d7:f2:1f:42:84:8a:ab:db:
         4c:d6:70:4a:8c:2b:ae:19:30:64:cb:64:f5:2c:fb:51:38:cd:
         1d:5e:a9:c4:ce:c3:95:42:68:c8:ed:a3:cc:d4:ab:58:fe:c8:
         90:44:cd:d0:d2:53:62:bd:dd:62:93:de:bc:ef:c2:d1:61:e9:
         a6:40:0b:0c:8b:8f:67:1c:5a:7d:2e:bf:b4:b7:cb:b0:ee:b2:
         bc:9a:a4:ea:f0:66:12:7f:ff:86:29:37:a0:0b:1c:cc:ae:2e:
         91:2e:2f:04:08:ae:a4:41:94:ce:26:b9:9d:c6:c7:fc:05:3e:
         23:b7:4e:8e:42:8c:b4:d6:87:40:68:ec:a7:d1:32:79:63:55:
         af:2c:ad:f0:53:9a:d4:a4:98:21:64:27:7b:06:b9:60:af:1b:
         fe:67:bd:d6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOxcmjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwMzE0NDcwMFoXDTI0MDkyOTE2MTEw
NFowMzExMC8GA1UEAxMoODU4NzUxZDA5MmYxYzUxYjJkODVlYzE4ZGIzYzA1NzM0
YjA0Y2MwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI26skYpgUi+
6vuj7ScivAvXGkkGQ1H/VBQtEv9VzDbG4iO43l5dsM5Ynfi0YkwBfEoLQfO0kkhf
GkQjnjQw1jKbBfbcgqizAb/Gwzv3DU50Ym2g0p+yy1/miAJCyivSNAhpeTm7CND8
uEcSpjXcXwGk2H4AmCwk94xQxPNbF+vG3F5ZAoA7ARK+SCBs5RyPKP61yxE8iDSK
u99sotFOXR1KHtBy/78SzBLIJsVR0d1tdAAl202BmEdeyjrxJlv6iSo7DABArjUX
OstKG3mLiiJ5Ve+qvDcMuV1+Vt9auZqf7FsR0BkFpdDVMFrVM2WYqRTuP8X+To7u
lGmFvn2nL3sCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQePOjGQ7C0pDCNvacZKQAp
0wROvjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OTgxNTdhNC0zZTU0
LTQ0M2YtYTlmZC0zMDBmYmYyMzg5ODEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDk4MTU3YTQtM2U1NC00
NDNmLWE5ZmQtMzAwZmJmMjM4OTgxLzg1ODc1MWQwOTJmMWM1MWIyZDg1ZWMxOGRi
M2MwNTczNGIwNGNjMDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi27TDANBAIAAjAHAwUAKAPQ4DAN
BgkqhkiG9w0BAQsFAAOCAQEAMFMeXM1JL/t4pKMbzsOQV5924cRo4g1gWQcSM8po
pp0/nx/XN916DCetJ9262DY3h0WE09v7gNU1wTMPvnZZ2v2PJNXAtL7nbBs6cIoH
NZ1nSPAP+0Z2ORi6tkhUmipyTFRXfdfyH0KEiqvbTNZwSowrrhkwZMtk9Sz7UTjN
HV6pxM7DlUJoyO2jzNSrWP7IkETN0NJTYr3dYpPevO/C0WHppkALDIuPZxxafS6/
tLfLsO6yvJqk6vBmEn//hik3oAsczK4ukS4vBAiupEGUzia5ncbH/AU+I7dOjkKM
tNaHQGjsp9EyeWNVryyt8FOa1KSYIWQnewa5YK8b/me91g==
-----END CERTIFICATE-----