Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8d84a0357a8904bcfefd8879c0726f535d144a7.cer
File:                     a8d84a0357a8904bcfefd8879c0726f535d144a7.cer (raw, json)
Hash identifier:          caCJkcWTJ7mWSIEG+SVQeNWfYAC52R8+egDJsVsCMVs=
Subject key identifier:   17:83:C6:02:76:7E:4B:29:D4:57:51:81:95:B6:C5:9A:D3:67:F8:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF1A5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/94ba7139-3664-494d-9403-9c8af0807ad1/a8d84a0357a8904bcfefd8879c0726f535d144a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/94ba7139-3664-494d-9403-9c8af0807ad1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:24:46 +0000
Certificate not after:    Wed 02 Apr 2025 14:10:03 +0000
Subordinate resources:    AS: 265018
                          IP: 160.238.200.0/22
                          IP: 170.84.196.0/22
                          IP: 2804:317c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16718431 (0xff1a5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 21:24:46 2023 GMT
            Not After : Apr  2 14:10:03 2025 GMT
        Subject: CN=a8d84a0357a8904bcfefd8879c0726f535d144a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:06:83:39:3e:8c:35:84:c5:d7:c7:20:62:
                    97:0e:93:25:f4:36:dd:0a:98:1e:0b:a6:bc:6e:a7:
                    04:87:23:5f:fc:88:b5:b5:33:3d:71:79:bd:14:f3:
                    6f:62:37:aa:83:91:8a:ae:9c:bc:ab:6f:07:48:b0:
                    31:e3:d4:47:b0:bf:88:75:c5:6b:0b:71:ef:9b:51:
                    28:bf:a9:4d:0e:01:e2:42:90:cf:30:e1:98:5f:77:
                    bc:b4:a6:37:d7:01:7a:49:ee:0c:09:8f:68:91:e7:
                    ff:40:ff:cc:e2:98:5b:58:9b:f6:85:9a:50:a4:60:
                    ca:22:d4:4b:32:c5:56:48:d9:f1:b2:8c:7b:fd:33:
                    f7:23:f1:2c:eb:8d:f4:d1:af:0b:b8:2e:e2:00:28:
                    9f:0f:2b:2a:f0:5c:6b:7b:7b:1a:c8:e3:90:d8:3a:
                    94:28:9d:c6:ab:1f:b6:e2:05:63:08:2c:99:47:c9:
                    54:c8:0b:b9:4d:99:e3:87:c4:77:28:76:e6:93:03:
                    b6:2f:79:92:07:88:8f:9f:9c:d0:ca:83:5d:b6:bf:
                    25:ae:8f:05:d7:bc:76:86:a2:2b:8e:14:74:93:98:
                    e4:c7:ae:85:ce:71:54:ec:bb:4c:8b:f1:8c:e5:02:
                    32:dd:cf:82:75:02:b6:9a:5e:52:ca:fb:5a:d5:d6:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:C6:02:76:7E:4B:29:D4:57:51:81:95:B6:C5:9A:D3:67:F8:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94ba7139-3664-494d-9403-9c8af0807ad1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94ba7139-3664-494d-9403-9c8af0807ad1/a8d84a0357a8904bcfefd8879c0726f535d144a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.200.0/22
                  170.84.196.0/22
                IPv6:
                  2804:317c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265018

    Signature Algorithm: sha256WithRSAEncryption
         9a:d9:bd:14:d5:ec:82:0b:e7:cf:44:e4:3e:51:21:be:1d:b0:
         02:46:54:1a:2a:d0:96:05:ba:b4:89:f4:48:b5:0c:f0:e3:a3:
         a3:3b:b1:8b:63:5b:a6:24:ed:be:fc:fe:72:a6:90:d7:94:04:
         0d:98:6c:33:da:3d:8c:38:00:88:1a:0f:c6:a1:4e:d8:c5:f2:
         9b:a7:1d:8e:e1:cf:87:5f:63:75:4e:1c:89:0b:c8:61:c8:d7:
         4c:00:28:39:06:0f:2d:2b:30:67:ec:43:cf:74:dc:73:e9:88:
         79:de:c8:33:a0:21:f1:0a:70:67:7c:00:89:5e:db:38:0c:de:
         91:09:85:0b:3c:b9:da:65:b4:86:85:27:5a:9c:a6:dc:a1:c4:
         5e:fb:ad:18:90:b3:ff:a5:61:2f:bb:14:54:b1:7d:99:f3:37:
         a8:d9:95:10:66:a0:c9:93:3e:32:50:13:2f:c8:78:13:0d:07:
         84:ad:c3:b2:65:ca:47:22:0e:c8:31:09:93:52:d6:f8:8b:3f:
         85:f8:3b:76:cb:55:80:dc:af:11:36:c5:63:6a:b6:f0:fb:be:
         f0:db:f0:5d:59:52:a0:86:1d:94:38:0c:84:ec:95:3e:e7:b1:
         9e:61:10:de:ce:c1:f0:8c:6f:30:71:70:42:18:ed:80:8e:6e:
         14:1f:26:49
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP8aXzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIxMjQ0NloXDTI1MDQwMjE0MTAw
M1owMzExMC8GA1UEAxMoYThkODRhMDM1N2E4OTA0YmNmZWZkODg3OWMwNzI2ZjUz
NWQxNDRhNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYLBoM5Pow1
hMXXxyBilw6TJfQ23QqYHgumvG6nBIcjX/yItbUzPXF5vRTzb2I3qoORiq6cvKtv
B0iwMePUR7C/iHXFawtx75tRKL+pTQ4B4kKQzzDhmF93vLSmN9cBeknuDAmPaJHn
/0D/zOKYW1ib9oWaUKRgyiLUSzLFVkjZ8bKMe/0z9yPxLOuN9NGvC7gu4gAonw8r
KvBca3t7GsjjkNg6lCidxqsftuIFYwgsmUfJVMgLuU2Z44fEdyh25pMDti95kgeI
j5+c0MqDXba/Ja6PBde8doaiK44UdJOY5Meuhc5xVOy7TIvxjOUCMt3PgnUCtppe
Usr7WtXWH68CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBQXg8YCdn5LKdRXUYGVtsWa
02f4JzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NGJhNzEzOS0zNjY0
LTQ5NGQtOTQwMy05YzhhZjA4MDdhZDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTRiYTcxMzktMzY2NC00
OTRkLTk0MDMtOWM4YWYwODA3YWQxL2E4ZDg0YTAzNTdhODkwNGJjZmVmZDg4Nzlj
MDcyNmY1MzVkMTQ0YTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqDuyAMEAqpUxDANBAIAAjAHAwUA
KAQxfDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECzowDQYJKoZIhvcNAQELBQAD
ggEBAJrZvRTV7IIL589E5D5RIb4dsAJGVBoq0JYFurSJ9Ei1DPDjo6M7sYtjW6Yk
7b78/nKmkNeUBA2YbDPaPYw4AIgaD8ahTtjF8punHY7hz4dfY3VOHIkLyGHI10wA
KDkGDy0rMGfsQ8903HPpiHneyDOgIfEKcGd8AIle2zgM3pEJhQs8udpltIaFJ1qc
ptyhxF77rRiQs/+lYS+7FFSxfZnzN6jZlRBmoMmTPjJQEy/IeBMNB4Stw7Jlykci
DsgxCZNS1viLP4X4O3bLVYDcrxE2xWNqtvD7vvDb8F1ZUqCGHZQ4DITslT7nsZ5h
EN7OwfCMbzBxcEIY7YCObhQfJkk=
-----END CERTIFICATE-----