Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd3a30eb3412c6a3983a99a688b27b90572099e.cer
File:                     9cd3a30eb3412c6a3983a99a688b27b90572099e.cer (raw, json)
Hash identifier:          BO5SwvX+NkrN+zKA4XhVei+5MWIhzCX2HK8wJxDzeJg=
Subject key identifier:   11:3F:BD:09:65:85:83:DE:38:89:07:BD:2B:F5:B1:AF:98:38:A6:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB37AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9171c8dc-f205-4cc8-8a96-ee952d712ec7/9cd3a30eb3412c6a3983a99a688b27b90572099e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9171c8dc-f205-4cc8-8a96-ee952d712ec7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 21:35:05 +0000
Certificate not after:    Mon 09 Sep 2024 22:15:50 +0000
Subordinate resources:    AS: 272908
                          IP: 2803:e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15415213 (0xeb37ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 24 21:35:05 2023 GMT
            Not After : Sep  9 22:15:50 2024 GMT
        Subject: CN=9cd3a30eb3412c6a3983a99a688b27b90572099e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:a7:e5:0f:0a:bb:61:6a:08:73:aa:60:a7:
                    ac:79:90:eb:75:45:c6:98:3d:db:77:80:d7:e4:27:
                    2b:12:45:b3:e1:34:a8:8e:c3:2b:74:94:45:2e:51:
                    2d:ff:bb:19:ce:26:7a:7f:7e:96:a5:dd:db:44:bb:
                    59:e1:74:57:be:32:90:1e:e4:dc:59:0d:ad:1e:e0:
                    94:c1:98:a9:b1:a3:7f:51:d1:2b:c5:8a:e2:ab:ba:
                    26:9a:0e:ad:4a:a8:af:84:91:a7:70:e3:30:10:a9:
                    fd:0d:27:0f:d2:a8:55:43:e1:4c:2a:9d:ce:30:b1:
                    37:00:4b:70:56:fd:e7:04:bf:31:7d:45:4b:b9:38:
                    92:08:a5:1b:b9:ef:34:95:7b:d3:fb:32:ad:06:28:
                    77:61:80:f4:7d:d9:bb:b0:26:d3:97:68:49:33:b0:
                    25:0d:bd:6a:54:58:1c:e0:9f:df:64:60:35:d0:b3:
                    44:27:b6:21:0a:e7:b1:5f:9f:e7:a1:69:b4:cf:11:
                    49:68:25:ef:b9:37:9b:65:77:7b:5a:8b:fe:7e:02:
                    5b:19:f4:0e:85:87:02:e9:90:b1:52:1f:63:d1:1c:
                    54:f7:60:2b:2f:be:28:1f:30:9c:2f:1a:77:27:63:
                    31:8d:54:75:74:5c:0e:29:fb:83:ab:7b:a3:21:d2:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:BD:09:65:85:83:DE:38:89:07:BD:2B:F5:B1:AF:98:38:A6:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9171c8dc-f205-4cc8-8a96-ee952d712ec7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9171c8dc-f205-4cc8-8a96-ee952d712ec7/9cd3a30eb3412c6a3983a99a688b27b90572099e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272908

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:fa:e7:fe:63:d8:1a:89:3c:43:c6:a3:cd:1d:da:14:7e:
         25:c3:79:aa:50:ef:98:ca:54:14:ed:15:5e:cd:73:57:71:f2:
         f6:83:61:d4:37:14:35:23:db:3b:e3:12:8d:4f:c0:5f:0b:17:
         a1:b1:74:da:42:18:e2:bd:02:62:f6:56:32:f5:a7:fb:31:6a:
         92:9e:4a:e5:1e:39:4b:51:84:28:d9:11:83:65:fd:d5:c8:f6:
         dc:f6:04:cd:5f:80:91:3c:bc:d4:35:49:18:9a:e7:b7:54:cc:
         77:8f:48:6e:84:cb:12:85:b5:b3:64:17:cb:75:a7:b8:82:9d:
         6d:6d:ae:08:8b:6f:89:1c:6e:3d:47:fd:10:e6:9d:8b:42:97:
         73:4a:17:02:a3:18:ac:70:51:eb:df:27:37:a9:12:da:39:f0:
         e0:f2:df:ea:37:1c:6b:63:b2:0d:ae:44:02:9b:f0:7c:bb:0a:
         a0:7d:30:36:9c:a6:09:d7:8e:48:09:e5:4b:00:5d:b2:fd:2a:
         f8:5c:d6:55:fb:54:2a:0b:9c:df:bc:62:9b:cb:29:86:15:d5:
         5b:12:bd:65:e9:ae:2a:3c:96:12:7b:21:8a:5c:13:ee:d6:fa:
         21:52:75:5a:24:51:13:04:5e:6d:43:14:e8:64:62:4a:49:e4:
         23:d6:72:8e
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOs3rTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUyNDIxMzUwNVoXDTI0MDkwOTIyMTU1
MFowMzExMC8GA1UEAxMoOWNkM2EzMGViMzQxMmM2YTM5ODNhOTlhNjg4YjI3Yjkw
NTcyMDk5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIHAp+UPCrth
aghzqmCnrHmQ63VFxpg923eA1+QnKxJFs+E0qI7DK3SURS5RLf+7Gc4men9+lqXd
20S7WeF0V74ykB7k3FkNrR7glMGYqbGjf1HRK8WK4qu6JpoOrUqor4SRp3DjMBCp
/Q0nD9KoVUPhTCqdzjCxNwBLcFb95wS/MX1FS7k4kgilG7nvNJV70/syrQYod2GA
9H3Zu7Am05doSTOwJQ29alRYHOCf32RgNdCzRCe2IQrnsV+f56FptM8RSWgl77k3
m2V3e1qL/n4CWxn0DoWHAumQsVIfY9EcVPdgKy++KB8wnC8adydjMY1UdXRcDin7
g6t7oyHSB9kCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQRP70JZYWD3jiJB70r9bGv
mDimZzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MTcxYzhkYy1mMjA1
LTRjYzgtOGE5Ni1lZTk1MmQ3MTJlYzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTE3MWM4ZGMtZjIwNS00
Y2M4LThhOTYtZWU5NTJkNzEyZWM3LzljZDNhMzBlYjM0MTJjNmEzOTgzYTk5YTY4
OGIyN2I5MDU3MjA5OWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDDpAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCoMMA0GCSqGSIb3DQEBCwUAA4IBAQADsvrn/mPYGok8Q8ajzR3a
FH4lw3mqUO+YylQU7RVezXNXcfL2g2HUNxQ1I9s74xKNT8BfCxehsXTaQhjivQJi
9lYy9af7MWqSnkrlHjlLUYQo2RGDZf3VyPbc9gTNX4CRPLzUNUkYmue3VMx3j0hu
hMsShbWzZBfLdae4gp1tba4Ii2+JHG49R/0Q5p2LQpdzShcCoxiscFHr3yc3qRLa
OfDg8t/qNxxrY7INrkQCm/B8uwqgfTA2nKYJ145ICeVLAF2y/Sr4XNZV+1QqC5zf
vGKbyymGFdVbEr1l6a4qPJYSeyGKXBPu1vohUnVaJFETBF5tQxToZGJKSeQj1nKO
-----END CERTIFICATE-----