Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a693ae73038587881727184cc53b801465ec22b8.cer
File:                     a693ae73038587881727184cc53b801465ec22b8.cer (raw, json)
Hash identifier:          88I0l520WkNjd4lKQe3NQPD14AdIbQPamfm39OaRWBI=
Subject key identifier:   7D:6D:30:B2:F1:99:D5:03:FA:22:CE:3A:05:D1:A1:8D:B8:30:9F:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCC1EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ff357d72-91b0-4e1e-8437-563fb9a54f14/a693ae73038587881727184cc53b801465ec22b8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ff357d72-91b0-4e1e-8437-563fb9a54f14/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Oct 2023 20:18:07 +0000
Certificate not after:    Mon 14 Oct 2024 17:18:42 +0000
Subordinate resources:    AS: 264667
                          IP: 167.250.116.0/22
                          IP: 2803:1940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16564716 (0xfcc1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 12 20:18:07 2023 GMT
            Not After : Oct 14 17:18:42 2024 GMT
        Subject: CN=a693ae73038587881727184cc53b801465ec22b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:17:c6:cf:df:9d:cd:95:2c:96:62:2d:44:21:
                    73:84:d7:9c:45:2e:bb:f5:46:5a:21:64:f5:c9:e4:
                    26:a5:96:8e:c0:8b:f7:c7:75:cc:8e:ef:4a:bd:74:
                    c7:c7:5c:99:e0:f8:0b:91:60:0d:87:35:f3:63:9d:
                    6c:b8:fc:5c:27:10:9e:a7:ba:ce:f3:63:63:14:26:
                    6d:4f:36:1b:72:9c:c6:13:be:50:a5:ae:aa:6e:03:
                    2d:8c:be:43:96:c2:17:9f:2f:d7:30:c0:1d:bf:97:
                    a2:65:08:53:05:cf:83:84:3f:49:3b:d2:9d:b9:fc:
                    0a:e8:79:7f:2d:67:4d:02:64:96:ed:77:97:1a:e3:
                    1a:63:87:94:11:dd:24:4a:32:a9:f9:03:91:b9:04:
                    e1:31:89:c5:5f:66:49:c8:05:ec:09:62:c4:e2:ea:
                    6c:8b:67:f3:c9:69:6d:7c:bf:da:db:4d:ea:3c:28:
                    19:34:ee:f7:75:5c:86:c7:4a:4a:91:61:92:60:31:
                    5f:88:3f:27:aa:e5:19:b6:9f:9f:40:d6:9e:c4:1e:
                    a4:46:a1:b5:73:f6:4b:03:47:85:5c:81:be:22:f0:
                    54:cc:a2:25:4d:32:f1:04:3b:44:43:11:db:8a:92:
                    69:bf:b1:7b:8d:b5:11:a9:da:e6:bc:47:ca:d8:28:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6D:30:B2:F1:99:D5:03:FA:22:CE:3A:05:D1:A1:8D:B8:30:9F:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ff357d72-91b0-4e1e-8437-563fb9a54f14/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ff357d72-91b0-4e1e-8437-563fb9a54f14/a693ae73038587881727184cc53b801465ec22b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.116.0/22
                IPv6:
                  2803:1940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264667

    Signature Algorithm: sha256WithRSAEncryption
         25:1d:76:47:21:1e:8f:3f:6f:42:b8:68:c9:fa:d3:04:06:db:
         f3:97:3e:8e:37:69:01:39:0e:03:a1:ff:02:c8:42:c6:c9:f4:
         19:d5:f3:68:9b:de:1a:9c:31:ab:07:2d:91:b4:ba:01:bb:61:
         ba:29:93:ff:38:a3:ca:a2:83:5e:79:30:98:23:2e:d1:11:59:
         cc:5b:de:7d:4c:ac:0c:57:3a:89:07:71:8f:d4:39:c6:12:df:
         d7:f0:fb:1c:f9:64:79:69:23:55:0f:71:9a:6e:ab:83:19:b7:
         5a:c9:bb:13:c6:92:2a:27:7d:4a:f9:7b:36:7d:86:28:9f:fc:
         64:f3:ab:e2:b8:ca:cf:bd:88:b6:35:51:d1:db:ae:21:4d:77:
         cc:55:57:b7:d8:3a:8c:47:92:b8:c6:65:94:2a:a0:ad:d5:b1:
         22:e0:f6:1a:8e:55:36:c9:a6:f0:5b:e2:5c:b0:70:0d:7a:aa:
         2c:17:b3:77:02:d4:83:b9:13:5d:0b:08:ab:c7:24:05:35:c0:
         4c:e9:b4:f2:91:9f:12:13:28:2c:c5:32:c9:e7:e7:9d:04:a4:
         e5:7d:96:88:fe:fd:df:45:3e:e8:9e:b6:0f:d9:35:0d:a8:a1:
         3e:4b:d1:0a:8c:72:b6:7b:79:c3:9e:43:b9:78:45:21:d0:a5:
         ec:0e:17:ff
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPzB7DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAxMjIwMTgwN1oXDTI0MTAxNDE3MTg0
MlowMzExMC8GA1UEAxMoYTY5M2FlNzMwMzg1ODc4ODE3MjcxODRjYzUzYjgwMTQ2
NWVjMjJiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAXxs/fnc2V
LJZiLUQhc4TXnEUuu/VGWiFk9cnkJqWWjsCL98d1zI7vSr10x8dcmeD4C5FgDYc1
82OdbLj8XCcQnqe6zvNjYxQmbU82G3KcxhO+UKWuqm4DLYy+Q5bCF58v1zDAHb+X
omUIUwXPg4Q/STvSnbn8Cuh5fy1nTQJklu13lxrjGmOHlBHdJEoyqfkDkbkE4TGJ
xV9mScgF7AlixOLqbItn88lpbXy/2ttN6jwoGTTu93VchsdKSpFhkmAxX4g/J6rl
Gbafn0DWnsQepEahtXP2SwNHhVyBviLwVMyiJU0y8QQ7REMR24qSab+xe421Eana
5rxHytgon9UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBR9bTCy8ZnVA/oizjoF0aGN
uDCfaDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mZjM1N2Q3Mi05MWIw
LTRlMWUtODQzNy01NjNmYjlhNTRmMTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmYzNTdkNzItOTFiMC00
ZTFlLTg0MzctNTYzZmI5YTU0ZjE0L2E2OTNhZTczMDM4NTg3ODgxNzI3MTg0Y2M1
M2I4MDE0NjVlYzIyYjgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf6dDANBAIAAjAHAwUAKAMZQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECdswDQYJKoZIhvcNAQELBQADggEBACUd
dkchHo8/b0K4aMn60wQG2/OXPo43aQE5DgOh/wLIQsbJ9BnV82ib3hqcMasHLZG0
ugG7Ybopk/84o8qig155MJgjLtERWcxb3n1MrAxXOokHcY/UOcYS39fw+xz5ZHlp
I1UPcZpuq4MZt1rJuxPGkionfUr5ezZ9hiif/GTzq+K4ys+9iLY1UdHbriFNd8xV
V7fYOoxHkrjGZZQqoK3VsSLg9hqOVTbJpvBb4lywcA16qiwXs3cC1IO5E10LCKvH
JAU1wEzptPKRnxITKCzFMsnn550EpOV9loj+/d9FPuietg/ZNQ2ooT5L0QqMcrZ7
ecOeQ7l4RSHQpewOF/8=
-----END CERTIFICATE-----