Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ee5eeb8b63025a2b091aff2eebe8867b72525a4.cer
File:                     8ee5eeb8b63025a2b091aff2eebe8867b72525a4.cer (raw, json)
Hash identifier:          sxMt0Pnpv7XCXvnqxgo8e8Y5Bk4AwM6bKsSbCJRDgUY=
Subject key identifier:   28:73:41:D4:C3:F9:A5:1D:16:C4:AA:0F:39:73:9B:56:7A:91:81:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F674D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8a5b06cb-808d-4c99-8ba0-0736bd9ccfa8/8ee5eeb8b63025a2b091aff2eebe8867b72525a4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8a5b06cb-808d-4c99-8ba0-0736bd9ccfa8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 17:44:16 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 167.252.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16151767 (0xf674d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 17:44:16 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=8ee5eeb8b63025a2b091aff2eebe8867b72525a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:7d:b4:3b:09:56:62:7c:e9:c1:eb:7a:73:
                    30:5a:76:9e:e1:ea:6d:ab:50:e3:53:63:be:a2:9f:
                    49:2f:1f:45:28:42:84:e6:6e:0e:9d:ad:8a:3f:d0:
                    08:f3:5e:8b:40:b1:d4:10:87:a6:a7:9e:58:fb:3f:
                    57:e0:16:ac:75:18:5a:e7:51:af:d3:28:2b:79:d5:
                    0d:78:49:b6:14:8b:38:91:96:2d:28:f3:d0:5f:ac:
                    20:8b:79:09:74:a8:c5:e1:0b:2a:d7:49:e0:e0:a0:
                    e4:f6:e7:f6:71:cd:be:11:9c:35:80:89:71:97:bb:
                    fd:c0:8d:86:cf:3c:83:0d:5f:7b:1e:d4:a1:1c:fb:
                    b3:8d:3a:5c:ee:f5:a1:b6:c0:e2:d9:a9:89:2a:08:
                    52:80:50:a3:7f:ca:23:55:41:5d:11:03:95:e1:19:
                    e4:cb:3a:1c:b8:8a:30:4d:3a:0e:62:a1:5f:e7:9d:
                    33:c7:c3:d7:3b:c6:f5:9d:69:73:b7:da:82:11:85:
                    18:8f:33:b5:01:17:34:cf:b5:2c:8a:83:cc:2f:48:
                    99:37:26:56:de:9f:d1:46:22:69:e2:f3:d8:c8:ca:
                    1c:c9:3d:9c:05:dd:b3:0b:60:91:34:3b:b8:7d:68:
                    20:3c:e9:53:4e:1d:10:a1:ea:38:db:7f:76:5d:c9:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:73:41:D4:C3:F9:A5:1D:16:C4:AA:0F:39:73:9B:56:7A:91:81:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8a5b06cb-808d-4c99-8ba0-0736bd9ccfa8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8a5b06cb-808d-4c99-8ba0-0736bd9ccfa8/8ee5eeb8b63025a2b091aff2eebe8867b72525a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:a0:5d:b1:27:2d:95:84:3f:1d:40:fa:94:70:ba:9c:2e:
         e9:02:30:59:ea:0b:42:0f:39:5d:d0:b7:c2:1c:14:e3:66:ba:
         59:80:7d:bc:35:90:75:4e:b6:fc:6e:37:0d:20:7f:50:34:12:
         22:5c:47:f2:17:4d:58:03:df:3d:84:13:fc:5c:16:de:e3:6e:
         1c:1a:38:08:35:4a:e7:3a:df:92:5d:b8:db:1f:6b:36:df:50:
         e1:3d:44:78:d8:8b:e2:f9:93:83:24:a5:b3:09:6f:de:09:12:
         2d:86:1f:39:b8:a5:fc:9a:7a:d9:97:16:c5:fc:92:b8:40:4f:
         80:ef:d8:f2:1d:5d:81:3c:b2:f3:ea:be:ce:55:0e:cf:ab:b7:
         a0:f9:83:a1:3d:51:73:99:cb:56:91:f7:8a:db:51:49:ce:75:
         39:37:2b:31:38:06:9e:c6:44:37:e8:d2:a7:99:e9:31:db:fb:
         d1:6d:f9:88:b8:60:d5:56:7b:db:77:05:b0:56:3f:8e:ea:71:
         a8:92:2e:97:78:a1:2b:05:eb:1f:cd:d2:1c:54:62:0b:4f:92:
         42:bb:be:bc:66:c8:a6:b7:62:05:76:f6:ca:70:97:71:fd:79:
         93:e4:ad:63:41:9a:d9:9b:62:0f:a0:ac:ec:1a:83:4e:8f:cc:
         25:bc:78:c1
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIEAPZ01zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyNDE3NDQxNloXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoOGVlNWVlYjhiNjMwMjVhMmIwOTFhZmYyZWViZTg4Njdi
NzI1MjVhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALh3fbQ7CVZi
fOnB63pzMFp2nuHqbatQ41NjvqKfSS8fRShChOZuDp2tij/QCPNei0Cx1BCHpqee
WPs/V+AWrHUYWudRr9MoK3nVDXhJthSLOJGWLSjz0F+sIIt5CXSoxeELKtdJ4OCg
5Pbn9nHNvhGcNYCJcZe7/cCNhs88gw1fex7UoRz7s406XO71obbA4tmpiSoIUoBQ
o3/KI1VBXREDleEZ5Ms6HLiKME06DmKhX+edM8fD1zvG9Z1pc7faghGFGI8ztQEX
NM+1LIqDzC9ImTcmVt6f0UYiaeLz2MjKHMk9nAXdswtgkTQ7uH1oIDzpU04dEKHq
ONt/dl3JRN0CAwEAAaOCAt0wggLZMB0GA1UdDgQWBBQoc0HUw/mlHRbEqg85c5tW
epGBbzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84YTViMDZjYi04MDhk
LTRjOTktOGJhMC0wNzM2YmQ5Y2NmYTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGE1YjA2Y2ItODA4ZC00
Yzk5LThiYTAtMDczNmJkOWNjZmE4LzhlZTVlZWI4YjYzMDI1YTJiMDkxYWZmMmVl
YmU4ODY3YjcyNTI1YTQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKf8MA0GCSqGSIb3DQEBCwUAA4IB
AQCdaKBdsSctlYQ/HUD6lHC6nC7pAjBZ6gtCDzld0LfCHBTjZrpZgH28NZB1Trb8
bjcNIH9QNBIiXEfyF01YA989hBP8XBbe424cGjgINUrnOt+SXbjbH2s231DhPUR4
2Ivi+ZODJKWzCW/eCRIthh85uKX8mnrZlxbF/JK4QE+A79jyHV2BPLLz6r7OVQ7P
q7eg+YOhPVFzmctWkfeK21FJznU5NysxOAaexkQ36NKnmekx2/vRbfmIuGDVVnvb
dwWwVj+O6nGoki6XeKErBesfzdIcVGILT5JCu768Zsimt2IFdvbKcJdx/XmT5K1j
QZrZm2IPoKzsGoNOj8wlvHjB
-----END CERTIFICATE-----