Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d00768b39088d580d43e36066ab01b462282ea.cer
File:                     85d00768b39088d580d43e36066ab01b462282ea.cer (raw, json)
Hash identifier:          dyTEmS8PZZc6oo+DrasPvwbZYwCOEqTkzxcpix6Jz54=
Subject key identifier:   DA:1B:FF:31:DB:D9:20:AF:EB:DE:75:7C:B8:DF:05:E4:38:D0:2E:8F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5F2E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e7ffaf9a-42c3-4be4-8f43-58348ce84cb1/85d00768b39088d580d43e36066ab01b462282ea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e7ffaf9a-42c3-4be4-8f43-58348ce84cb1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 21:51:31 +0000
Certificate not after:    Thu 21 Nov 2024 21:34:27 +0000
Subordinate resources:    AS: 272058
                          IP: 2803:310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15069920 (0xe5f2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 21:51:31 2023 GMT
            Not After : Nov 21 21:34:27 2024 GMT
        Subject: CN=85d00768b39088d580d43e36066ab01b462282ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:65:77:78:1b:ed:d6:82:11:98:df:b6:1d:ca:
                    b2:cf:95:83:0f:82:12:2a:5d:3d:2b:6d:53:1d:a0:
                    fc:6e:61:04:2e:52:0d:03:95:53:7c:fa:87:b6:b7:
                    9c:ef:11:0e:8e:40:ab:a5:98:a7:1b:f3:03:31:70:
                    6e:57:60:ac:ed:00:89:8c:19:08:ac:a2:52:3c:22:
                    99:80:2a:c0:e0:d7:a3:cb:9a:0b:ab:82:ee:2e:e1:
                    e2:64:cb:75:da:d9:af:2a:69:c0:3b:a3:44:03:e7:
                    aa:ca:92:11:c7:d2:76:df:4a:12:05:6d:05:04:4b:
                    81:a1:28:f3:bf:5e:65:7b:ea:b0:10:99:a3:7d:77:
                    a2:c5:64:b8:68:cd:5f:5d:08:2a:00:99:c8:5a:e9:
                    88:c3:11:f6:13:5d:b1:ca:ce:f5:23:a0:7b:c6:08:
                    c0:a3:aa:e4:0e:24:1a:00:35:da:e6:40:61:82:45:
                    b2:eb:77:7f:8d:4b:e1:56:77:59:0c:75:44:d4:9e:
                    6d:e8:4d:bd:99:af:19:a3:aa:8e:5f:55:e5:d5:10:
                    b9:fa:c1:f9:bc:7b:ee:f2:4f:e3:e3:54:d1:1d:5e:
                    5c:d2:fd:4e:80:b6:1a:4e:d8:c0:31:48:3f:5f:d4:
                    5a:2d:17:8e:6d:c1:63:69:5d:65:ec:67:5f:0a:7b:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1B:FF:31:DB:D9:20:AF:EB:DE:75:7C:B8:DF:05:E4:38:D0:2E:8F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e7ffaf9a-42c3-4be4-8f43-58348ce84cb1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e7ffaf9a-42c3-4be4-8f43-58348ce84cb1/85d00768b39088d580d43e36066ab01b462282ea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272058

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:24:55:9d:a5:50:a0:3d:c2:36:3d:4f:f7:4f:f6:4e:7b:
         f2:7a:d0:bf:f5:85:81:fd:5f:1e:07:83:9c:1b:64:5c:21:5b:
         b7:c8:74:17:9d:6f:26:43:13:fd:28:76:cd:1e:05:c6:a3:0f:
         06:9f:48:e3:2c:37:3d:a0:a4:83:09:d0:74:06:76:f9:78:95:
         e9:55:9d:cb:58:be:af:35:be:ae:16:cf:83:b4:93:80:9b:7c:
         7a:09:c6:6b:72:52:e5:2f:94:e9:67:5c:1b:8a:39:13:8f:77:
         ce:21:50:ca:d7:0c:65:6a:a1:c9:71:71:48:ce:85:fa:03:e7:
         06:26:3b:65:cd:aa:3f:fe:75:bc:bb:75:41:5a:ec:a4:2b:b6:
         a5:62:ae:ad:5f:33:d2:0f:b1:4f:5b:37:62:78:8c:8f:36:28:
         c0:d5:bc:60:45:cb:29:5d:4d:6c:7f:8a:0d:bd:a3:80:07:26:
         3f:3e:12:d8:59:09:b8:98:5c:8f:84:3e:49:14:bf:06:51:6e:
         b5:8b:6c:0e:fc:b8:5c:02:ce:2d:17:87:a2:47:9d:d7:f1:c2:
         c7:52:4c:3a:ee:66:7e:68:36:2b:c4:90:f5:39:da:ff:2f:bb:
         26:aa:94:b1:a8:a5:f4:b2:a9:32:47:ae:d7:d5:b2:69:32:73:
         09:de:62:55
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOXy4DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxNzIxNTEzMVoXDTI0MTEyMTIxMzQy
N1owMzExMC8GA1UEAxMoODVkMDA3NjhiMzkwODhkNTgwZDQzZTM2MDY2YWIwMWI0
NjIyODJlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIRld3gb7daC
EZjfth3Kss+Vgw+CEipdPSttUx2g/G5hBC5SDQOVU3z6h7a3nO8RDo5Aq6WYpxvz
AzFwbldgrO0AiYwZCKyiUjwimYAqwODXo8uaC6uC7i7h4mTLddrZryppwDujRAPn
qsqSEcfSdt9KEgVtBQRLgaEo879eZXvqsBCZo313osVkuGjNX10IKgCZyFrpiMMR
9hNdscrO9SOge8YIwKOq5A4kGgA12uZAYYJFsut3f41L4VZ3WQx1RNSebehNvZmv
GaOqjl9V5dUQufrB+bx77vJP4+NU0R1eXNL9ToC2Gk7YwDFIP1/UWi0Xjm3BY2ld
ZexnXwp7mUECAwEAAaOCAvswggL3MB0GA1UdDgQWBBTaG/8x29kgr+vedXy43wXk
ONAujzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lN2ZmYWY5YS00MmMz
LTRiZTQtOGY0My01ODM0OGNlODRjYjEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTdmZmFmOWEtNDJjMy00
YmU0LThmNDMtNTgzNDhjZTg0Y2IxLzg1ZDAwNzY4YjM5MDg4ZDU4MGQ0M2UzNjA2
NmFiMDFiNDYyMjgyZWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDAxAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCa6MA0GCSqGSIb3DQEBCwUAA4IBAQAzxSRVnaVQoD3CNj1P90/2
TnvyetC/9YWB/V8eB4OcG2RcIVu3yHQXnW8mQxP9KHbNHgXGow8Gn0jjLDc9oKSD
CdB0Bnb5eJXpVZ3LWL6vNb6uFs+DtJOAm3x6CcZrclLlL5TpZ1wbijkTj3fOIVDK
1wxlaqHJcXFIzoX6A+cGJjtlzao//nW8u3VBWuykK7alYq6tXzPSD7FPWzdieIyP
NijA1bxgRcspXU1sf4oNvaOAByY/PhLYWQm4mFyPhD5JFL8GUW61i2wO/LhcAs4t
F4eiR53X8cLHUkw67mZ+aDYrxJD1Odr/L7smqpSxqKX0sqkyR67X1bJpMnMJ3mJV
-----END CERTIFICATE-----