Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86b991f451ea64f55a7cd0e024c698e15b7025be.cer
File:                     86b991f451ea64f55a7cd0e024c698e15b7025be.cer (raw, json)
Hash identifier:          CJn68D4MQyqznuLmicv8gD7AafXb50bOw2RqlbF/Wxc=
Subject key identifier:   FF:D9:FA:E6:F2:C3:4B:52:97:D4:67:37:74:D1:0A:6E:CD:D1:E0:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E415CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/94a68888-4f1a-44c4-86ae-75fddc45a5be/86b991f451ea64f55a7cd0e024c698e15b7025be.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/94a68888-4f1a-44c4-86ae-75fddc45a5be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Apr 2023 18:44:07 +0000
Certificate not after:    Mon 03 Jun 2024 16:28:59 +0000
Subordinate resources:    IP: 2803:cc90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14947787 (0xe415cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  6 18:44:07 2023 GMT
            Not After : Jun  3 16:28:59 2024 GMT
        Subject: CN=86b991f451ea64f55a7cd0e024c698e15b7025be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:76:ba:b5:c0:45:9c:a2:6f:a2:11:89:8d:
                    a7:58:23:7a:87:45:6d:20:1f:bf:5c:84:f2:87:52:
                    b2:7d:44:f8:f6:84:fb:45:02:de:36:d3:9e:5b:3d:
                    cd:f9:d2:4b:f4:5a:ab:8f:b4:ba:42:97:ee:75:13:
                    a4:81:99:30:3b:d9:94:6e:cf:a0:0b:a8:38:71:9e:
                    98:3b:79:9a:9b:a7:09:13:92:90:2d:7f:e3:d4:51:
                    a7:98:6a:2c:d3:22:98:f0:da:5f:ca:5f:00:d8:84:
                    85:03:11:fd:9f:77:be:8a:cf:0a:69:4a:2a:4b:02:
                    0e:22:dc:b6:08:be:cd:89:57:7b:73:7e:7a:bf:3a:
                    0f:c2:0c:b2:df:ca:a6:eb:10:ed:0f:98:c8:d3:98:
                    53:6c:a5:7b:f9:21:1b:03:bd:fc:99:ba:20:be:fb:
                    f1:21:03:68:10:33:c4:37:87:2b:25:9a:29:80:fa:
                    67:08:8a:2b:21:c2:79:6f:3c:52:0a:6e:cb:9a:18:
                    b9:d7:20:26:5b:69:7b:31:65:99:1c:b1:65:e8:a7:
                    fa:c9:8d:02:e0:35:3f:a7:9d:d7:7f:7a:eb:30:50:
                    d2:8f:f7:55:e7:94:8c:50:89:b9:6a:4c:b9:9d:c2:
                    3b:9b:36:9f:02:4f:c5:bc:ce:20:83:a8:ff:9a:c9:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:FA:E6:F2:C3:4B:52:97:D4:67:37:74:D1:0A:6E:CD:D1:E0:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94a68888-4f1a-44c4-86ae-75fddc45a5be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94a68888-4f1a-44c4-86ae-75fddc45a5be/86b991f451ea64f55a7cd0e024c698e15b7025be.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc90::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:24:1c:90:f4:02:b4:fc:be:c3:57:d9:2f:17:b1:f0:7f:36:
         7a:f7:59:a7:3d:1f:98:5a:8f:cc:87:a5:ac:c9:33:7e:73:65:
         b1:2e:31:2c:0f:f3:ed:5f:06:10:69:52:04:30:56:4d:80:60:
         2e:65:63:03:9b:11:bc:89:84:75:05:11:49:b9:35:5b:1b:43:
         b8:6f:48:9b:44:20:0f:f8:14:41:88:74:c5:50:7c:1c:90:49:
         38:3b:d4:5d:43:b8:42:a3:77:7e:89:42:9e:b7:31:88:e2:52:
         89:ab:f4:b9:eb:34:c4:92:a6:4d:47:60:b9:2f:41:95:e6:9e:
         ef:ed:0a:78:18:41:87:cc:e1:13:87:a7:fe:4a:9b:b9:b1:cf:
         6a:f9:c8:fc:bf:53:a8:c6:e9:23:8c:be:a2:31:21:e3:ae:04:
         de:66:e0:41:1d:24:f7:be:0b:f1:b0:6b:d9:de:68:60:e6:e4:
         f7:1e:97:48:c5:20:db:f2:ba:ad:62:37:66:1a:e4:b9:a4:08:
         a3:76:3e:13:55:72:30:fc:01:42:0b:eb:57:2e:cc:f3:55:00:
         37:b5:db:bc:6e:85:e4:64:f7:c0:4a:c2:51:87:b3:b2:8d:0c:
         19:30:92:71:35:3e:6d:1b:67:3a:c3:9b:37:36:a5:b0:b4:8f:
         3f:2e:88:1f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIEAOQVyzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwNjE4NDQwN1oXDTI0MDYwMzE2Mjg1
OVowMzExMC8GA1UEAxMoODZiOTkxZjQ1MWVhNjRmNTVhN2NkMGUwMjRjNjk4ZTE1
YjcwMjViZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSzdrq1wEWc
om+iEYmNp1gjeodFbSAfv1yE8odSsn1E+PaE+0UC3jbTnls9zfnSS/Raq4+0ukKX
7nUTpIGZMDvZlG7PoAuoOHGemDt5mpunCROSkC1/49RRp5hqLNMimPDaX8pfANiE
hQMR/Z93vorPCmlKKksCDiLctgi+zYlXe3N+er86D8IMst/KpusQ7Q+YyNOYU2yl
e/khGwO9/Jm6IL778SEDaBAzxDeHKyWaKYD6ZwiKKyHCeW88Ugpuy5oYudcgJltp
ezFlmRyxZein+smNAuA1P6ed13966zBQ0o/3VeeUjFCJuWpMuZ3CO5s2nwJPxbzO
IIOo/5rJphcCAwEAAaOCAt8wggLbMB0GA1UdDgQWBBT/2frm8sNLUpfUZzd00Qpu
zdHgGzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NGE2ODg4OC00ZjFh
LTQ0YzQtODZhZS03NWZkZGM0NWE1YmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTRhNjg4ODgtNGYxYS00
NGM0LTg2YWUtNzVmZGRjNDVhNWJlLzg2Yjk5MWY0NTFlYTY0ZjU1YTdjZDBlMDI0
YzY5OGUxNWI3MDI1YmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDzJAwDQYJKoZIhvcNAQELBQAD
ggEBAKAkHJD0ArT8vsNX2S8XsfB/Nnr3Wac9H5haj8yHpazJM35zZbEuMSwP8+1f
BhBpUgQwVk2AYC5lYwObEbyJhHUFEUm5NVsbQ7hvSJtEIA/4FEGIdMVQfByQSTg7
1F1DuEKjd36JQp63MYjiUomr9LnrNMSSpk1HYLkvQZXmnu/tCngYQYfM4ROHp/5K
m7mxz2r5yPy/U6jG6SOMvqIxIeOuBN5m4EEdJPe+C/Gwa9neaGDm5Pcel0jFINvy
uq1iN2Ya5LmkCKN2PhNVcjD8AUIL61cuzPNVADe127xuheRk98BKwlGHs7KNDBkw
knE1Pm0bZzrDmzc2pbC0jz8uiB8=
-----END CERTIFICATE-----