Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.cer
File:                     9fdb9dbec373220e99eb9a2a0c20a654f2f187af.cer (raw, json)
Hash identifier:          JakJ1Mf78f20D+/Pd3cTCTs222k1f/cPfZ6Cd+vX+d8=
Subject key identifier:   9A:56:79:3E:27:33:DA:68:32:3A:54:E1:64:D8:E9:BE:96:FA:3E:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2B8CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 17:29:04 +0000
Certificate not after:    Mon 22 Apr 2024 22:23:34 +0000
Subordinate resources:    AS: 272810
                          IP: 179.63.72.0/22
                          IP: 2803:b890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14858445 (0xe2b8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 27 17:29:04 2023 GMT
            Not After : Apr 22 22:23:34 2024 GMT
        Subject: CN=9fdb9dbec373220e99eb9a2a0c20a654f2f187af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:86:3c:b0:20:24:67:20:7f:6d:68:c5:9b:
                    cd:34:26:fc:d3:bb:58:48:17:c5:22:28:8c:21:12:
                    ad:51:f4:b2:1c:1c:a6:6c:4b:47:90:bd:fa:34:b8:
                    43:8f:bb:68:49:64:91:10:3e:50:67:29:6a:b3:f2:
                    7e:5e:dc:f4:0f:87:04:1e:83:14:20:cc:c3:e7:e6:
                    47:fb:8c:07:2b:65:19:d3:0d:39:00:b4:84:d3:f5:
                    6c:93:bd:36:31:af:c4:d5:f4:ef:2f:d4:7b:0f:53:
                    43:f4:66:b6:cb:fa:95:54:28:bc:2a:00:57:61:13:
                    1f:9e:f1:c6:c8:8e:56:f6:2c:53:68:c8:0e:cc:df:
                    5d:01:94:bb:e9:3b:2b:e2:b4:06:8e:44:06:24:84:
                    e3:a0:91:9a:59:0f:69:51:7a:3c:8b:eb:77:54:c1:
                    e9:4c:58:92:f1:fc:39:47:e7:8c:76:f9:24:5e:00:
                    45:4c:06:46:80:e3:a3:c1:70:c6:4f:0a:8e:1a:77:
                    c7:02:fd:b8:aa:89:e0:3f:1b:b6:e3:84:72:eb:18:
                    1d:8f:77:fe:a3:62:19:14:c7:36:f5:97:60:94:f0:
                    87:ca:5d:a2:fd:3a:bf:21:b8:9c:6a:dc:5b:09:9b:
                    f1:6a:b2:a3:1b:70:e3:09:ba:c6:ea:6f:d2:9b:f3:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:79:3E:27:33:DA:68:32:3A:54:E1:64:D8:E9:BE:96:FA:3E:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.72.0/22
                IPv6:
                  2803:b890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272810

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:20:f1:ad:7d:88:42:f5:fe:2d:79:7c:d1:99:df:da:23:
         50:ea:7f:ac:a6:bd:dc:c3:02:03:85:7f:35:46:be:e8:f8:18:
         dd:d4:54:f9:0e:8c:ed:f2:f6:71:1a:3c:c9:e9:29:28:29:d6:
         6a:e1:04:7e:ef:b7:8b:5b:c6:47:1a:80:9a:a0:38:70:e8:4a:
         9b:66:db:57:be:34:b8:a2:79:3d:61:78:2a:35:9d:2f:82:30:
         9e:bb:30:21:8d:4c:06:12:f4:b8:30:68:da:54:54:3e:3b:08:
         f5:79:a3:ce:72:85:d4:fa:ac:2a:53:47:70:48:c8:25:ae:d7:
         6a:b1:40:45:96:c1:68:07:e8:c5:9a:cd:90:8c:5b:0c:60:34:
         69:55:75:5c:01:61:34:ab:3d:31:3b:f7:aa:fc:c6:b7:14:48:
         d5:e7:4d:06:f6:e1:95:cf:b9:74:4d:ac:16:ee:af:56:56:89:
         fc:23:56:e3:c4:72:8e:a4:35:28:df:e8:d9:d2:e3:32:96:69:
         c3:7c:41:1a:43:b1:99:29:f9:0e:fe:17:4b:7d:7a:72:67:0e:
         02:1e:fe:a1:af:e8:d9:7e:8c:6a:8c:46:8a:7e:30:ca:29:d6:
         a3:c0:fb:f0:bf:4c:73:8c:02:80:f7:0b:7d:94:cd:e7:be:87:
         d5:fd:35:89
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOK4zTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDMyNzE3MjkwNFoXDTI0MDQyMjIyMjMz
NFowMzExMC8GA1UEAxMoOWZkYjlkYmVjMzczMjIwZTk5ZWI5YTJhMGMyMGE2NTRm
MmYxODdhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKDhjywICRn
IH9taMWbzTQm/NO7WEgXxSIojCESrVH0shwcpmxLR5C9+jS4Q4+7aElkkRA+UGcp
arPyfl7c9A+HBB6DFCDMw+fmR/uMBytlGdMNOQC0hNP1bJO9NjGvxNX07y/Uew9T
Q/Rmtsv6lVQovCoAV2ETH57xxsiOVvYsU2jIDszfXQGUu+k7K+K0Bo5EBiSE46CR
mlkPaVF6PIvrd1TB6UxYkvH8OUfnjHb5JF4ARUwGRoDjo8Fwxk8Kjhp3xwL9uKqJ
4D8btuOEcusYHY93/qNiGRTHNvWXYJTwh8pdov06vyG4nGrcWwmb8Wqyoxtw4wm6
xupv0pvzrjMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSaVnk+JzPaaDI6VOFk2Om+
lvo+fTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yZWJlMDljNi02OTQ3
LTRlYTQtODE1Yi1jM2ZkMDMxZTRkNmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmViZTA5YzYtNjk0Ny00
ZWE0LTgxNWItYzNmZDAzMWU0ZDZjLzlmZGI5ZGJlYzM3MzIyMGU5OWViOWEyYTBj
MjBhNjU0ZjJmMTg3YWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArM/SDANBAIAAjAHAwUAKAO4kDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKaowDQYJKoZIhvcNAQELBQADggEBABfl
IPGtfYhC9f4teXzRmd/aI1Dqf6ymvdzDAgOFfzVGvuj4GN3UVPkOjO3y9nEaPMnp
KSgp1mrhBH7vt4tbxkcagJqgOHDoSptm21e+NLiieT1heCo1nS+CMJ67MCGNTAYS
9LgwaNpUVD47CPV5o85yhdT6rCpTR3BIyCWu12qxQEWWwWgH6MWazZCMWwxgNGlV
dVwBYTSrPTE796r8xrcUSNXnTQb24ZXPuXRNrBbur1ZWifwjVuPEco6kNSjf6NnS
4zKWacN8QRpDsZkp+Q7+F0t9enJnDgIe/qGv6Nl+jGqMRop+MMop1qPA+/C/THOM
AoD3C32Uzee+h9X9NYk=
-----END CERTIFICATE-----