Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/898caf17659952265b97d5db3875a0bd6a88f915.cer
File:                     898caf17659952265b97d5db3875a0bd6a88f915.cer (raw, json)
Hash identifier:          spAiWanUGa8IstWHLJnJBn1L09zeU4h01UzLov9oyWk=
Subject key identifier:   CC:3C:EE:DA:2B:B3:9B:2D:D5:F8:57:0E:45:B0:F1:AD:0D:71:4A:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4A2AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d0c91228-a110-4e02-8a73-0c63a61d1e8d/898caf17659952265b97d5db3875a0bd6a88f915.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d0c91228-a110-4e02-8a73-0c63a61d1e8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 16:22:02 +0000
Certificate not after:    Sun 01 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 27879
                          IP: 190.15.192.0/19
                          IP: 2803:de40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14983853 (0xe4a2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 16:22:02 2023 GMT
            Not After : Dec  1 14:00:00 2024 GMT
        Subject: CN=898caf17659952265b97d5db3875a0bd6a88f915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:31:3e:d8:9f:a2:4a:a4:5b:36:ea:a7:ce:
                    50:5f:3a:94:0f:59:57:43:17:fb:21:3d:36:c5:89:
                    16:51:2a:64:97:29:3c:5c:ef:14:5d:2d:58:89:0c:
                    42:eb:d8:ad:72:f5:a7:71:b8:49:ec:41:85:0a:d2:
                    57:40:0b:2a:fa:db:b7:ab:25:c3:62:3a:b9:89:74:
                    07:13:4f:46:b5:ec:67:3d:6d:c4:9b:54:68:21:6a:
                    79:52:ec:2c:10:34:c6:99:4c:60:df:db:03:3c:2f:
                    61:dc:cb:9b:11:0e:52:86:38:c5:9a:a2:7c:9f:19:
                    35:8a:6c:67:34:a1:e8:64:8e:7d:94:eb:fe:df:7a:
                    7f:99:8a:9e:29:76:9b:26:76:4d:c0:84:84:66:36:
                    ad:5e:82:2c:05:da:83:2a:18:5e:78:3e:7b:fe:72:
                    08:6e:88:66:c1:67:46:54:36:70:04:ed:ed:3b:2f:
                    b9:07:b1:b8:dc:7b:12:2d:56:eb:66:72:a6:d8:a4:
                    ec:22:3f:33:4f:7d:e9:15:0d:30:3e:39:bf:c9:1c:
                    7f:3b:c9:a4:bd:89:46:cd:88:82:65:a8:ae:9c:89:
                    6d:2b:f6:e7:51:6a:cf:1c:7e:c9:0b:38:5a:91:92:
                    4e:92:bc:5d:6b:ca:99:21:20:c1:fa:67:04:99:ab:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3C:EE:DA:2B:B3:9B:2D:D5:F8:57:0E:45:B0:F1:AD:0D:71:4A:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d0c91228-a110-4e02-8a73-0c63a61d1e8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d0c91228-a110-4e02-8a73-0c63a61d1e8d/898caf17659952265b97d5db3875a0bd6a88f915.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.192.0/19
                IPv6:
                  2803:de40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27879

    Signature Algorithm: sha256WithRSAEncryption
         3c:e3:de:9f:28:73:0b:e6:51:ba:c0:8b:4a:f2:cd:47:9a:f3:
         a9:a0:68:f7:12:21:6d:c7:bf:a3:7c:f4:ce:93:20:dd:79:d9:
         bd:96:c4:21:21:5b:5a:f7:da:50:1b:5e:3b:8f:66:26:0c:6f:
         0b:ce:a3:5b:c3:d2:65:8d:0c:cc:3d:2d:c5:3b:d4:59:95:50:
         b6:05:2b:86:54:a5:cf:e9:15:43:f1:8a:e5:94:72:35:fe:7b:
         7f:de:73:10:a8:b7:05:43:4b:b7:0b:7a:10:14:39:3c:ac:75:
         a9:5b:c1:60:fa:d3:43:c3:e3:54:f1:c8:00:d0:65:d0:1c:b8:
         59:11:2e:30:7f:33:98:db:33:48:05:22:af:04:e0:cc:32:4e:
         e2:51:62:b8:b9:89:37:6b:a2:b7:db:f6:29:94:b7:a1:07:64:
         3f:f2:46:8e:63:64:20:a8:7c:44:95:78:16:13:62:80:6b:c2:
         28:7c:0c:ce:0f:52:b0:4e:50:14:6d:93:e3:65:f0:cf:d6:49:
         85:18:37:08:61:a8:85:26:56:2a:c9:41:0b:7f:52:e9:5e:3a:
         10:d9:76:21:cb:96:ad:7e:2f:33:4f:a1:dd:cf:da:88:51:dd:
         8f:37:0c:37:37:ac:e1:1c:15:14:68:33:f4:76:da:42:a1:24:
         0f:5a:77:04
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAOSirTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMDE2MjIwMloXDTI0MTIwMTE0MDAw
MFowMzExMC8GA1UEAxMoODk4Y2FmMTc2NTk5NTIyNjViOTdkNWRiMzg3NWEwYmQ2
YTg4ZjkxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAID8MT7Yn6JK
pFs26qfOUF86lA9ZV0MX+yE9NsWJFlEqZJcpPFzvFF0tWIkMQuvYrXL1p3G4SexB
hQrSV0ALKvrbt6slw2I6uYl0BxNPRrXsZz1txJtUaCFqeVLsLBA0xplMYN/bAzwv
YdzLmxEOUoY4xZqifJ8ZNYpsZzSh6GSOfZTr/t96f5mKnil2myZ2TcCEhGY2rV6C
LAXagyoYXng+e/5yCG6IZsFnRlQ2cATt7TsvuQexuNx7Ei1W62Zyptik7CI/M099
6RUNMD45v8kcfzvJpL2JRs2IgmWorpyJbSv251Fqzxx+yQs4WpGSTpK8XWvKmSEg
wfpnBJmrbWUCAwEAAaOCAwgwggMEMB0GA1UdDgQWBBTMPO7aK7ObLdX4Vw5FsPGt
DXFKLzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kMGM5MTIyOC1hMTEw
LTRlMDItOGE3My0wYzYzYTYxZDFlOGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDBjOTEyMjgtYTExMC00
ZTAyLThhNzMtMGM2M2E2MWQxZThkLzg5OGNhZjE3NjU5OTUyMjY1Yjk3ZDVkYjM4
NzVhMGJkNmE4OGY5MTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBb4PwDANBAIAAjAHAwUAKAPeQDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJs5zANBgkqhkiG9w0BAQsFAAOCAQEAPOPe
nyhzC+ZRusCLSvLNR5rzqaBo9xIhbce/o3z0zpMg3XnZvZbEISFbWvfaUBteO49m
JgxvC86jW8PSZY0MzD0txTvUWZVQtgUrhlSlz+kVQ/GK5ZRyNf57f95zEKi3BUNL
twt6EBQ5PKx1qVvBYPrTQ8PjVPHIANBl0By4WREuMH8zmNszSAUirwTgzDJO4lFi
uLmJN2uit9v2KZS3oQdkP/JGjmNkIKh8RJV4FhNigGvCKHwMzg9SsE5QFG2T42Xw
z9ZJhRg3CGGohSZWKslBC39S6V46ENl2IcuWrX4vM0+h3c/aiFHdjzcMNzes4RwV
FGgz9HbaQqEkD1p3BA==
-----END CERTIFICATE-----