Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.cer
File:                     8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.cer (raw, json)
Hash identifier:          jbFO32+zowZ2N47LWauYQLSj/EBQ4jJ3MbxNNjfRKdM=
Subject key identifier:   DF:04:11:59:40:71:62:78:1C:7D:C7:8E:35:88:31:67:24:7D:00:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC20E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 15:36:01 +0000
Certificate not after:    Tue 18 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273103
                          IP: 2803:7050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16523492 (0xfc20e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 15:36:01 2023 GMT
            Not After : Mar 18 06:00:00 2025 GMT
        Subject: CN=8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:f9:1d:27:e9:61:33:23:79:2a:d5:fc:92:
                    62:4b:e2:4e:17:25:d0:a7:a7:a0:99:44:7b:6c:44:
                    73:73:a4:88:44:a3:59:92:7b:ca:71:fb:34:e4:a1:
                    0c:ae:d2:0a:52:bc:9e:58:d3:35:a4:dd:70:b4:c6:
                    c7:00:cb:0e:27:c1:45:d0:5c:22:9d:b0:c4:14:78:
                    6f:0d:2b:48:4d:64:b2:d2:36:ea:d9:24:8d:dc:48:
                    53:a0:99:6f:4a:ae:4f:f4:4d:aa:f0:d8:7e:96:d7:
                    1e:59:06:df:b6:89:58:2b:9d:fb:9e:bd:f6:61:4c:
                    b1:c8:89:0e:5d:2f:38:2c:fd:e0:77:2b:84:06:90:
                    f3:64:8f:3d:db:a3:15:1a:cb:bf:2e:40:ff:33:e3:
                    c9:e9:08:47:c3:8d:5c:b6:89:2b:f0:20:47:aa:9e:
                    24:b7:b1:68:ae:67:35:27:7f:1b:6e:f5:21:72:79:
                    77:d1:29:c7:57:99:90:9f:74:51:ca:db:c5:99:35:
                    27:3c:20:16:2c:da:76:eb:a2:3c:3e:c6:0e:6d:25:
                    02:e7:d4:83:47:e1:f9:00:8a:9d:fe:c9:7b:7b:1d:
                    f9:17:a2:23:46:1f:6e:49:96:fd:b1:4e:ca:a2:3c:
                    a7:b2:db:b9:f4:4d:62:19:c6:19:f6:f4:40:bd:42:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:04:11:59:40:71:62:78:1C:7D:C7:8E:35:88:31:67:24:7D:00:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273103

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:3a:9b:87:bc:ac:bf:88:48:35:02:b3:f5:58:98:ca:fb:
         67:01:a4:e4:42:27:1e:8e:0f:ff:42:7b:68:f0:0d:ab:1c:71:
         fb:79:38:ca:54:ca:81:3c:ee:6d:9a:4c:fc:2e:23:43:7f:aa:
         ff:aa:8d:66:d5:ce:62:41:da:b3:fb:b2:00:6f:c5:be:82:55:
         ad:95:e3:44:c6:06:a1:92:ca:d0:55:2b:7a:fa:fe:17:44:74:
         11:16:4d:aa:a0:30:d9:7c:13:f6:a1:fa:ec:22:cb:69:fe:4b:
         81:4c:90:dd:54:ce:a9:bf:08:13:89:d8:8e:36:9a:d2:cd:5f:
         06:41:3f:38:38:6a:d3:5d:23:22:ba:06:3d:b0:2d:7f:63:55:
         e6:63:e4:08:9b:9d:f5:85:c3:fc:37:f8:dd:6a:1c:17:fc:f5:
         51:dd:09:7f:c3:f7:a2:36:51:29:15:c7:31:56:c4:21:15:7e:
         14:d7:08:93:a8:68:9e:47:8a:f8:18:41:80:f4:5e:7f:55:1b:
         61:d7:44:4a:ab:c8:14:fd:89:85:cf:71:94:df:37:9e:d3:85:
         59:51:7a:be:e7:8b:c9:0f:6a:7f:0b:ea:e0:b6:bd:87:60:eb:
         6b:37:4f:2e:3b:df:19:ea:00:46:ee:df:2a:42:11:df:90:39:
         67:6c:60:dc
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPwg5DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAwNjE1MzYwMVoXDTI1MDMxODA2MDAw
MFowMzExMC8GA1UEAxMoOGY4MWU0YWFhZDZhMGQ3M2E2ZjhjOTc4NmE3NjY5NDBk
ZDFkYWYwZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2S+R0n6WEz
I3kq1fySYkviThcl0KenoJlEe2xEc3OkiESjWZJ7ynH7NOShDK7SClK8nljTNaTd
cLTGxwDLDifBRdBcIp2wxBR4bw0rSE1kstI26tkkjdxIU6CZb0quT/RNqvDYfpbX
HlkG37aJWCud+5699mFMsciJDl0vOCz94HcrhAaQ82SPPdujFRrLvy5A/zPjyekI
R8ONXLaJK/AgR6qeJLexaK5nNSd/G271IXJ5d9Epx1eZkJ90UcrbxZk1JzwgFiza
duuiPD7GDm0lAufUg0fh+QCKnf7Je3sd+ReiI0YfbkmW/bFOyqI8p7LbufRNYhnG
Gfb0QL1CGvkCAwEAAaOCAvswggL3MB0GA1UdDgQWBBTfBBFZQHFieBx9x441iDFn
JH0AADAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMjRhOGE0OS0yNzI0
LTRkZDMtYTdmZC05ZmI1YmY5OWVmODYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTI0YThhNDktMjcyNC00
ZGQzLWE3ZmQtOWZiNWJmOTllZjg2LzhmODFlNGFhYWQ2YTBkNzNhNmY4Yzk3ODZh
NzY2OTQwZGQxZGFmMGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDcFAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCrPMA0GCSqGSIb3DQEBCwUAA4IBAQBE4Tqbh7ysv4hINQKz9ViY
yvtnAaTkQicejg//Qnto8A2rHHH7eTjKVMqBPO5tmkz8LiNDf6r/qo1m1c5iQdqz
+7IAb8W+glWtleNExgahksrQVSt6+v4XRHQRFk2qoDDZfBP2ofrsIstp/kuBTJDd
VM6pvwgTidiONprSzV8GQT84OGrTXSMiugY9sC1/Y1XmY+QIm531hcP8N/jdahwX
/PVR3Ql/w/eiNlEpFccxVsQhFX4U1wiTqGieR4r4GEGA9F5/VRth10RKq8gU/YmF
z3GU3zee04VZUXq+54vJD2p/C+rgtr2HYOtrN08uO98Z6gBG7t8qQhHfkDlnbGDc
-----END CERTIFICATE-----