Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8718a7fbb5da98562e9418c7ee4d67c69d86e7ba.cer
File:                     8718a7fbb5da98562e9418c7ee4d67c69d86e7ba.cer (raw, json)
Hash identifier:          OqFXDK2QGdqRJPfS15nCc04wRz4ikhqbBCW/MrwuzPI=
Subject key identifier:   3E:78:F8:E3:75:A0:5F:50:FC:DF:C5:32:73:84:02:93:DA:A8:19:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBBC2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d4d6eec-178f-4449-8421-60b0c9533ed1/8718a7fbb5da98562e9418c7ee4d67c69d86e7ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d4d6eec-178f-4449-8421-60b0c9533ed1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 23:48:55 +0000
Certificate not after:    Sun 10 Nov 2024 19:37:44 +0000
Subordinate resources:    AS: 269900
                          IP: 45.191.44.0/22
                          IP: 2803:74e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16497707 (0xfbbc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  2 23:48:55 2023 GMT
            Not After : Nov 10 19:37:44 2024 GMT
        Subject: CN=8718a7fbb5da98562e9418c7ee4d67c69d86e7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:79:95:4a:a5:e9:6b:dd:2f:4f:bb:33:be:
                    bd:1a:83:77:7b:c6:85:0d:b1:03:0b:97:d5:87:da:
                    3e:78:96:db:39:00:52:70:11:53:36:ba:0e:e6:ac:
                    1c:8f:15:c2:09:5a:2e:f7:27:9b:7b:2a:36:de:34:
                    e8:fd:b2:58:ed:51:3b:70:8f:a2:72:9e:f9:11:9f:
                    4c:37:c6:21:f0:80:de:ae:e4:9f:e3:5f:ef:af:c3:
                    08:82:a7:3a:4d:50:8d:64:9d:fb:36:e2:18:66:fa:
                    70:12:41:89:8d:10:32:08:9d:08:fc:4c:9d:68:55:
                    50:56:3b:0e:0d:6c:18:a4:f1:9f:2c:1c:7a:2a:db:
                    32:2b:76:9f:b9:13:b0:e6:48:e3:a5:49:c9:1e:a9:
                    19:13:50:a1:18:bf:be:b5:65:dc:b0:df:90:8a:2d:
                    af:bc:79:54:6c:94:f3:77:34:95:e0:6f:56:92:54:
                    30:59:56:90:56:2d:7d:6f:c4:33:d7:e4:8c:71:85:
                    ad:fd:4b:ca:2d:7b:6a:a3:b8:2c:4b:4c:be:55:ab:
                    a7:b1:4d:92:fb:19:4b:04:8a:0e:ca:18:b3:cf:22:
                    32:90:c4:12:d7:c8:39:d7:d4:3c:f0:0d:ec:bb:f5:
                    64:a0:32:9f:a3:bc:f3:94:df:82:cb:e9:86:bc:dc:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:78:F8:E3:75:A0:5F:50:FC:DF:C5:32:73:84:02:93:DA:A8:19:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4d6eec-178f-4449-8421-60b0c9533ed1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4d6eec-178f-4449-8421-60b0c9533ed1/8718a7fbb5da98562e9418c7ee4d67c69d86e7ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.44.0/22
                IPv6:
                  2803:74e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269900

    Signature Algorithm: sha256WithRSAEncryption
         b1:af:8c:24:e4:f5:1f:dd:dc:b3:9b:db:7d:08:d8:f9:68:62:
         cf:94:58:be:e0:ee:d4:43:a9:40:c0:e3:82:6e:bb:23:23:23:
         f5:bb:54:b9:ad:1f:b6:cf:97:18:0b:6c:f3:1b:d4:86:5a:82:
         64:48:8b:9b:d5:0d:0b:77:c0:58:dc:78:a0:74:1b:14:a8:34:
         7c:de:0e:38:4a:3c:f0:41:9e:dc:ec:b7:13:2a:d5:f3:f9:a9:
         df:ca:e7:a2:16:f9:85:f9:89:13:37:6d:e1:79:5d:5f:e5:2b:
         9d:0d:d5:85:1f:a8:4f:ad:dc:7c:0a:86:d0:8f:1f:db:49:fa:
         d4:33:1f:2a:fe:5d:74:78:73:9f:72:5d:16:52:f7:14:65:5b:
         c6:53:0b:1d:ad:57:89:0a:72:69:70:da:68:95:08:51:f4:f9:
         7d:e3:c1:d0:3c:8a:52:33:25:00:40:3c:17:70:0f:ea:1c:98:
         56:1b:72:3f:8b:52:f4:07:b4:f3:0d:0e:d1:9f:6b:84:b0:c4:
         d7:d2:5f:6a:e5:57:36:f8:fb:2f:08:22:ed:87:00:1b:d2:0e:
         41:54:51:41:be:bd:e3:0b:4e:48:74:f0:28:f4:6c:48:82:18:
         00:09:45:a9:06:e8:9a:8e:0b:3d:85:22:df:2b:70:7c:70:dd:
         0d:96:ee:5b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPu8KzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAwMjIzNDg1NVoXDTI0MTExMDE5Mzc0
NFowMzExMC8GA1UEAxMoODcxOGE3ZmJiNWRhOTg1NjJlOTQxOGM3ZWU0ZDY3YzY5
ZDg2ZTdiYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYveZVKpelr
3S9PuzO+vRqDd3vGhQ2xAwuX1YfaPniW2zkAUnARUza6DuasHI8VwglaLvcnm3sq
Nt406P2yWO1RO3CPonKe+RGfTDfGIfCA3q7kn+Nf76/DCIKnOk1QjWSd+zbiGGb6
cBJBiY0QMgidCPxMnWhVUFY7Dg1sGKTxnywceirbMit2n7kTsOZI46VJyR6pGRNQ
oRi/vrVl3LDfkIotr7x5VGyU83c0leBvVpJUMFlWkFYtfW/EM9fkjHGFrf1Lyi17
aqO4LEtMvlWrp7FNkvsZSwSKDsoYs88iMpDEEtfIOdfUPPAN7Lv1ZKAyn6O885Tf
gsvphrzcnvsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQ+ePjjdaBfUPzfxTJzhAKT
2qgZKjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83ZDRkNmVlYy0xNzhm
LTQ0NDktODQyMS02MGIwYzk1MzNlZDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN2Q0ZDZlZWMtMTc4Zi00
NDQ5LTg0MjEtNjBiMGM5NTMzZWQxLzg3MThhN2ZiYjVkYTk4NTYyZTk0MThjN2Vl
NGQ2N2M2OWQ4NmU3YmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2/LDANBAIAAjAHAwUAKAN04DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHkwwDQYJKoZIhvcNAQELBQADggEBALGv
jCTk9R/d3LOb230I2PloYs+UWL7g7tRDqUDA44JuuyMjI/W7VLmtH7bPlxgLbPMb
1IZagmRIi5vVDQt3wFjceKB0GxSoNHzeDjhKPPBBntzstxMq1fP5qd/K56IW+YX5
iRM3beF5XV/lK50N1YUfqE+t3HwKhtCPH9tJ+tQzHyr+XXR4c59yXRZS9xRlW8ZT
Cx2tV4kKcmlw2miVCFH0+X3jwdA8ilIzJQBAPBdwD+ocmFYbcj+LUvQHtPMNDtGf
a4SwxNfSX2rlVzb4+y8IIu2HABvSDkFUUUG+veMLTkh08Cj0bEiCGAAJRakG6JqO
Cz2FIt8rcHxw3Q2W7ls=
-----END CERTIFICATE-----