Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cfbdb739fc9ccb9d1422741636e87c625b8199e.cer
File:                     8cfbdb739fc9ccb9d1422741636e87c625b8199e.cer (raw, json)
Hash identifier:          mBk/s43CzXsRjUoyQ0oA0b7oRY0thM0cZxkm34DDRAo=
Subject key identifier:   93:4F:EB:27:9A:EB:93:28:89:6A:F7:D7:3E:CA:8C:C2:86:E0:0D:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E50DC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fe315793-235e-440f-8cfb-cb68971690e8/8cfbdb739fc9ccb9d1422741636e87c625b8199e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fe315793-235e-440f-8cfb-cb68971690e8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 12:20:35 +0000
Certificate not after:    Mon 18 Nov 2024 18:01:06 +0000
Subordinate resources:    AS: 272053
                          IP: 181.232.196.0/22
                          IP: 2803:5d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15011265 (0xe50dc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 12:20:35 2023 GMT
            Not After : Nov 18 18:01:06 2024 GMT
        Subject: CN=8cfbdb739fc9ccb9d1422741636e87c625b8199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2d:64:9b:95:5d:44:ac:6a:f5:81:43:75:b6:
                    ed:10:a0:1e:d2:42:43:81:0b:62:82:43:1e:8a:36:
                    03:4d:e1:86:0d:79:b9:12:c7:2d:33:a0:1c:a5:55:
                    13:c8:ac:18:27:5a:ab:c6:cf:c7:a2:ad:76:8b:68:
                    c6:17:11:3c:ac:05:82:64:37:ae:89:26:30:fe:9c:
                    60:8e:bd:b9:e5:65:95:95:11:d9:ed:e9:05:29:20:
                    c3:d0:c4:e5:06:72:c3:52:30:60:06:5a:0e:70:9e:
                    b5:b7:b8:f7:d0:28:d2:67:72:5d:bf:58:23:59:2f:
                    f8:1b:db:85:90:ba:05:27:48:d6:17:2a:52:c7:68:
                    2b:7a:20:0c:55:dd:68:a5:e2:f0:1c:6b:a3:70:86:
                    9d:46:ee:47:73:f6:e0:da:ee:6a:0a:f4:54:c6:57:
                    cd:bd:12:a4:70:e0:8b:ff:77:f1:27:f0:30:32:13:
                    c4:84:f7:ca:2f:af:70:7f:0e:63:f8:c4:ca:af:dc:
                    20:ab:39:58:87:01:e3:8d:f9:5b:52:96:7f:f2:16:
                    37:d8:da:3f:fb:2d:1b:4b:a8:95:5b:60:c7:03:54:
                    7c:62:a5:78:10:33:0f:60:5f:49:f1:64:de:44:15:
                    b8:50:28:18:4b:16:07:a4:3a:8a:39:0d:03:25:54:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:EB:27:9A:EB:93:28:89:6A:F7:D7:3E:CA:8C:C2:86:E0:0D:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe315793-235e-440f-8cfb-cb68971690e8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe315793-235e-440f-8cfb-cb68971690e8/8cfbdb739fc9ccb9d1422741636e87c625b8199e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.196.0/22
                IPv6:
                  2803:5d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272053

    Signature Algorithm: sha256WithRSAEncryption
         bb:58:53:ef:64:7c:5e:14:dc:c6:a6:1c:36:ec:7d:2d:aa:fd:
         73:e8:35:95:25:7a:58:57:c9:62:5b:10:0a:8e:98:ed:46:8f:
         14:4c:de:54:27:0b:ad:2b:16:61:33:12:35:79:73:4f:98:bc:
         b8:58:8e:d4:6d:1f:25:f3:37:7e:b9:f0:21:49:d1:da:2a:c2:
         61:c1:be:65:ff:94:40:21:11:fb:e7:9c:90:bb:8a:c0:63:05:
         ff:eb:38:31:06:48:d0:eb:bb:9b:96:1d:79:4a:6f:bc:60:9c:
         7d:42:0a:e6:e7:08:c7:36:f7:37:5c:04:db:68:ce:fe:f9:61:
         6c:5f:6c:0b:c9:5c:87:e9:11:5c:10:48:d6:e2:ac:36:3c:99:
         b6:bf:5d:09:1c:d1:eb:30:33:79:10:27:6f:d1:68:70:0f:8b:
         a1:f4:01:ac:ef:7f:5d:18:b4:fc:72:f6:90:52:70:e1:94:80:
         df:42:d2:86:2a:31:3c:56:00:55:0a:d5:96:65:05:ce:1b:31:
         d4:93:85:e9:c8:5f:2b:27:c6:21:a7:17:e2:03:cb:a0:00:06:
         a7:70:54:06:54:38:eb:74:58:6f:7b:d4:b0:ae:6c:1d:e6:2e:
         65:df:8d:f0:ba:e8:90:b3:fa:7d:a9:b4:a5:f4:33:c6:22:d8:
         f5:de:6e:11
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOUNwTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMjEyMjAzNVoXDTI0MTExODE4MDEw
NlowMzExMC8GA1UEAxMoOGNmYmRiNzM5ZmM5Y2NiOWQxNDIyNzQxNjM2ZTg3YzYy
NWI4MTk5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOstZJuVXUSs
avWBQ3W27RCgHtJCQ4ELYoJDHoo2A03hhg15uRLHLTOgHKVVE8isGCdaq8bPx6Kt
dotoxhcRPKwFgmQ3rokmMP6cYI69ueVllZUR2e3pBSkgw9DE5QZyw1IwYAZaDnCe
tbe499Ao0mdyXb9YI1kv+BvbhZC6BSdI1hcqUsdoK3ogDFXdaKXi8Bxro3CGnUbu
R3P24Nruagr0VMZXzb0SpHDgi/938SfwMDITxIT3yi+vcH8OY/jEyq/cIKs5WIcB
4435W1KWf/IWN9jaP/stG0uolVtgxwNUfGKleBAzD2BfSfFk3kQVuFAoGEsWB6Q6
ijkNAyVUj98CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSTT+snmuuTKIlq99c+yozC
huANyDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mZTMxNTc5My0yMzVl
LTQ0MGYtOGNmYi1jYjY4OTcxNjkwZTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmUzMTU3OTMtMjM1ZS00
NDBmLThjZmItY2I2ODk3MTY5MGU4LzhjZmJkYjczOWZjOWNjYjlkMTQyMjc0MTYz
NmU4N2M2MjViODE5OWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXoxDANBAIAAjAHAwUAKANdEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJrUwDQYJKoZIhvcNAQELBQADggEBALtY
U+9kfF4U3MamHDbsfS2q/XPoNZUlelhXyWJbEAqOmO1GjxRM3lQnC60rFmEzEjV5
c0+YvLhYjtRtHyXzN3658CFJ0doqwmHBvmX/lEAhEfvnnJC7isBjBf/rODEGSNDr
u5uWHXlKb7xgnH1CCubnCMc29zdcBNtozv75YWxfbAvJXIfpEVwQSNbirDY8mba/
XQkc0eswM3kQJ2/RaHAPi6H0Aazvf10YtPxy9pBScOGUgN9C0oYqMTxWAFUK1ZZl
Bc4bMdSThenIXysnxiGnF+IDy6AABqdwVAZUOOt0WG971LCubB3mLmXfjfC66JCz
+n2ptKX0M8Yi2PXebhE=
-----END CERTIFICATE-----