Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95ca4cbab44c47bd98e6645d337790b5623278f3.cer
File:                     95ca4cbab44c47bd98e6645d337790b5623278f3.cer (raw, json)
Hash identifier:          /FKFI5C6DXn93lkTv7NAcPM+rFtLtNZeoEzOKHqeHGc=
Subject key identifier:   CD:A7:C3:CD:CD:8F:D6:50:78:FA:DD:57:77:E4:C2:43:E1:0F:8B:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC95C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/95ca4cbab44c47bd98e6645d337790b5623278f3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 16:05:49 +0000
Certificate not after:    Sat 17 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 18846
                          AS: 270185
                          IP: 200.23.91.0/24
                          IP: 2801:c4:98::/45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15504832 (0xec95c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  5 16:05:49 2023 GMT
            Not After : Aug 17 15:00:00 2024 GMT
        Subject: CN=95ca4cbab44c47bd98e6645d337790b5623278f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:fc:6b:15:c9:0b:13:22:e0:7d:53:3e:38:
                    b9:ab:42:46:74:0a:ac:ff:aa:99:8b:19:90:89:05:
                    ec:d7:46:39:7f:6c:d2:e7:7d:a9:eb:07:9f:97:f1:
                    c7:71:7c:9e:0f:75:c9:75:5c:33:71:61:40:5b:7a:
                    7f:5f:50:13:c3:b9:d3:f2:da:84:d8:d3:12:ea:d9:
                    d7:10:d3:a8:61:79:b7:6a:67:88:c3:2c:cf:39:66:
                    d8:67:ef:3d:25:69:bf:bc:a5:71:72:e3:e8:c4:a5:
                    a5:f7:fb:c1:88:a2:07:49:e3:e1:9e:5a:59:72:3e:
                    c2:1b:36:e5:6d:9f:78:21:c6:3b:d6:61:46:6f:7f:
                    99:42:96:4d:69:46:cb:aa:89:0e:c2:39:60:da:38:
                    c8:fd:ab:aa:50:c5:6b:71:52:b1:7f:c6:f6:cb:68:
                    86:44:8d:a3:0c:de:76:ff:91:00:7d:fc:d1:b2:c2:
                    0a:8c:7d:95:9b:49:49:17:42:0b:62:3d:f3:6b:a7:
                    40:c2:14:db:b9:cf:2a:1d:46:82:04:ea:13:fa:61:
                    70:66:e8:a1:42:51:63:cd:cb:b4:dd:d4:9e:73:7e:
                    a2:0c:1e:fc:13:73:1b:21:72:bb:e2:9a:26:32:7a:
                    6a:52:61:b7:f6:cc:b0:62:1f:21:e4:22:ff:e6:91:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:C3:CD:CD:8F:D6:50:78:FA:DD:57:77:E4:C2:43:E1:0F:8B:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/95ca4cbab44c47bd98e6645d337790b5623278f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.91.0/24
                IPv6:
                  2801:c4:98::/45

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18846
                  270185

    Signature Algorithm: sha256WithRSAEncryption
         ae:88:4b:cd:4d:3a:99:15:5c:77:a9:81:16:03:26:1c:f5:ee:
         89:51:b6:cd:ae:ec:6e:95:0a:e1:e8:c4:be:f1:dc:85:05:47:
         c1:b7:ad:29:89:67:59:4a:f4:38:f5:ab:73:99:54:db:a3:e7:
         a9:99:91:64:36:77:dc:ce:92:2e:4f:40:6a:dd:79:ac:ee:00:
         30:e4:99:c5:47:c8:5d:fc:42:2f:e8:a8:2f:50:94:63:86:31:
         3b:8e:cc:06:60:e8:6c:78:d7:be:44:d3:b7:e7:bc:2b:5c:c8:
         87:92:ed:b2:6b:91:8a:77:68:6f:2b:01:9d:6d:c1:d9:ec:10:
         1e:8f:17:b3:98:2f:e6:f8:96:31:bd:e0:fe:f0:d3:7a:4a:b7:
         e3:d3:27:ae:67:6a:17:25:4e:d8:1c:50:01:86:33:db:b7:2b:
         45:8c:47:ac:2d:80:1b:ef:89:5c:68:8f:35:61:cf:12:61:25:
         af:10:00:e6:c9:0d:06:bb:e7:71:ab:0c:d7:b2:5b:d5:6e:3d:
         6c:20:f8:57:9e:e2:51:00:bd:40:07:36:82:20:ab:a5:e9:7b:
         ed:c5:3f:80:95:2e:d4:8c:18:d9:a1:0a:5b:0c:54:f5:8d:f9:
         28:10:e4:a5:78:25:01:5d:36:1f:48:76:14:e1:29:73:9e:03:
         11:7f:a4:8a
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAOyVwDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwNTE2MDU0OVoXDTI0MDgxNzE1MDAw
MFowMzExMC8GA1UEAxMoOTVjYTRjYmFiNDRjNDdiZDk4ZTY2NDVkMzM3NzkwYjU2
MjMyNzhmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIgh/GsVyQsT
IuB9Uz44uatCRnQKrP+qmYsZkIkF7NdGOX9s0ud9qesHn5fxx3F8ng91yXVcM3Fh
QFt6f19QE8O50/LahNjTEurZ1xDTqGF5t2pniMMszzlm2GfvPSVpv7ylcXLj6MSl
pff7wYiiB0nj4Z5aWXI+whs25W2feCHGO9ZhRm9/mUKWTWlGy6qJDsI5YNo4yP2r
qlDFa3FSsX/G9stohkSNowzedv+RAH380bLCCox9lZtJSRdCC2I982unQMIU27nP
Kh1GggTqE/phcGbooUJRY83LtN3UnnN+ogwe/BNzGyFyu+KaJjJ6alJht/bMsGIf
IeQi/+aRw20CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTNp8PNzY/WUHj63Vd35MJD
4Q+LNDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZmIwNDJjOS1lMWU0
LTQyMDYtOGQ3Ni0zZWM3OGVlMjExZGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWZiMDQyYzktZTFlNC00
MjA2LThkNzYtM2VjNzhlZTIxMWRjLzk1Y2E0Y2JhYjQ0YzQ3YmQ5OGU2NjQ1ZDMz
Nzc5MGI1NjIzMjc4ZjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgXWzAPBAIAAjAJAwcDKAEAxACY
MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAkmeAgMEH2kwDQYJKoZIhvcNAQELBQAD
ggEBAK6IS81NOpkVXHepgRYDJhz17olRts2u7G6VCuHoxL7x3IUFR8G3rSmJZ1lK
9Dj1q3OZVNuj56mZkWQ2d9zOki5PQGrdeazuADDkmcVHyF38Qi/oqC9QlGOGMTuO
zAZg6Gx4175E07fnvCtcyIeS7bJrkYp3aG8rAZ1twdnsEB6PF7OYL+b4ljG94P7w
03pKt+PTJ65nahclTtgcUAGGM9u3K0WMR6wtgBvviVxojzVhzxJhJa8QAObJDQa7
53GrDNeyW9VuPWwg+Fee4lEAvUAHNoIgq6Xpe+3FP4CVLtSMGNmhClsMVPWN+SgQ
5KV4JQFdNh9IdhThKXOeAxF/pIo=
-----END CERTIFICATE-----