Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
File:                     9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer (raw, json)
Hash identifier:          Mwb4zgvjz9Vfjuoh++G3/El7u8tkD2+Y8Yu+vgBup78=
Subject key identifier:   D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E48349
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 19:09:48 +0000
Certificate not after:    Thu 20 Jun 2024 23:28:54 +0000
Subordinate resources:    AS: 270096
                          IP: 170.245.132.0/23
                          IP: 2803:47e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14975817 (0xe48349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 19:09:48 2023 GMT
            Not After : Jun 20 23:28:54 2024 GMT
        Subject: CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:97:d1:7e:81:3b:1f:14:c6:b6:55:a2:9e:
                    fc:a3:4f:a4:0d:53:cd:cb:dd:4f:75:06:8b:57:39:
                    dd:15:f6:b2:c6:4d:4d:1f:de:b3:5e:52:d4:e4:93:
                    47:0f:98:7f:85:98:4d:22:a3:2f:10:84:5a:74:9e:
                    e1:6e:7a:35:93:82:fc:19:8b:e6:83:81:b1:88:35:
                    98:ea:b6:00:f0:57:4d:c4:3b:8c:cf:38:44:08:65:
                    68:ad:a5:9b:3c:8d:f8:0a:e8:1c:ce:80:f0:8c:e5:
                    81:d3:38:0b:b6:aa:ad:f2:91:79:eb:d9:1e:68:65:
                    05:d8:67:a9:1e:6a:ae:e1:21:4b:78:1b:76:38:31:
                    23:73:ae:6d:bc:74:e4:b2:aa:2f:e2:72:75:1c:06:
                    b4:0f:b8:d1:40:8b:ea:3e:7c:44:fe:9e:da:13:b2:
                    9d:97:e8:7c:f6:1e:dc:c0:4b:88:59:3e:15:2b:95:
                    ee:ca:cd:5a:8e:c9:38:82:62:4e:11:80:d0:58:77:
                    bf:1a:51:42:df:0c:5d:c5:20:7e:23:0a:8c:a7:e2:
                    3a:eb:c4:4f:30:6d:52:7a:3a:01:f6:13:a6:ed:6c:
                    a2:51:8c:91:07:02:07:28:28:c6:4c:16:ff:63:01:
                    d1:e5:8d:e7:fc:a0:5c:4d:f9:c5:13:43:22:6e:25:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.132.0/23
                IPv6:
                  2803:47e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270096

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:f2:a1:9f:07:fc:5b:99:c1:50:79:0b:d9:b6:6c:92:96:
         d4:5a:a4:02:0f:71:07:c9:d5:90:72:25:91:cd:d9:e7:ba:7a:
         7d:ba:e2:89:67:80:01:e8:25:b0:3d:69:07:b3:7c:d4:5a:42:
         56:18:f2:ea:f4:8f:2b:be:41:c4:7f:26:94:4f:8b:23:cc:d1:
         7d:bb:fd:49:8a:af:57:83:3f:2b:97:eb:f8:1c:f8:dd:8d:d7:
         1d:59:47:92:dd:7e:2b:de:bd:54:71:22:80:e2:02:b9:e0:03:
         42:60:2b:1d:df:28:da:e7:39:ed:e0:10:f4:52:c8:14:08:53:
         f3:56:5f:5f:50:8c:bf:31:5f:79:3d:03:df:6f:bd:c7:7c:92:
         01:84:8b:ee:32:e6:eb:7c:f6:6c:d8:cc:20:d1:4d:14:4c:7f:
         58:2e:dd:2d:98:1f:3e:47:f3:f7:14:d7:31:7b:ca:83:da:6a:
         b2:29:d1:ec:7c:8b:2b:20:08:7c:51:89:45:2f:02:23:fd:57:
         20:d9:79:8c:1f:d2:69:19:74:a8:1c:cc:75:17:07:ec:02:19:
         29:f9:98:e9:de:9f:75:86:6c:39:76:4d:ba:71:59:73:5d:02:
         2e:39:9b:04:04:31:e7:a9:60:a7:de:96:7b:7b:f3:97:47:25:
         20:2a:10:38
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOSDSTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwMzE5MDk0OFoXDTI0MDYyMDIzMjg1
NFowMzExMC8GA1UEAxMoOWZlMWI0Y2VkNzBhODEyYWU0Y2I5NDhjNzU0ZWQ2OWJh
MGFmZmZmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJM9l9F+gTsf
FMa2VaKe/KNPpA1TzcvdT3UGi1c53RX2ssZNTR/es15S1OSTRw+Yf4WYTSKjLxCE
WnSe4W56NZOC/BmL5oOBsYg1mOq2APBXTcQ7jM84RAhlaK2lmzyN+AroHM6A8Izl
gdM4C7aqrfKReevZHmhlBdhnqR5qruEhS3gbdjgxI3Oubbx05LKqL+JydRwGtA+4
0UCL6j58RP6e2hOynZfofPYe3MBLiFk+FSuV7srNWo7JOIJiThGA0Fh3vxpRQt8M
XcUgfiMKjKfiOuvETzBtUno6AfYTpu1solGMkQcCBygoxkwW/2MB0eWN5/ygXE35
xRNDIm4laBsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTYkGTtgsxsFDy627lUPc1B
2QyL/TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMjg4ODU4Ny04YWIy
LTQ4ZjctOWI2Yy1iZDRiY2Y1M2RmOTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTI4ODg1ODctOGFiMi00
OGY3LTliNmMtYmQ0YmNmNTNkZjkxLzlmZTFiNGNlZDcwYTgxMmFlNGNiOTQ4Yzc1
NGVkNjliYTBhZmZmZjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAar1hDANBAIAAjAHAwUAKANH4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHxAwDQYJKoZIhvcNAQELBQADggEBAJkc
8qGfB/xbmcFQeQvZtmySltRapAIPcQfJ1ZByJZHN2ee6en264olngAHoJbA9aQez
fNRaQlYY8ur0jyu+QcR/JpRPiyPM0X27/UmKr1eDPyuX6/gc+N2N1x1ZR5Ldfive
vVRxIoDiArngA0JgKx3fKNrnOe3gEPRSyBQIU/NWX19QjL8xX3k9A99vvcd8kgGE
i+4y5ut89mzYzCDRTRRMf1gu3S2YHz5H8/cU1zF7yoPaarIp0ex8iysgCHxRiUUv
AiP9VyDZeYwf0mkZdKgczHUXB+wCGSn5mOnen3WGbDl2TbpxWXNdAi45mwQEMeep
YKfelnt785dHJSAqEDg=
-----END CERTIFICATE-----