Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer
File:                     aa9626805288e743eebc32afd6c5d414b8f13c2d.cer (raw, json)
Hash identifier:          IUmxM1ZsG57Dt5p0zpXf3CFDKbKezHjGYHGgh8bSyqM=
Subject key identifier:   F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECB52B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 12:10:42 +0000
Certificate not after:    Thu 23 Jan 2025 18:24:59 +0000
Subordinate resources:    AS: 271890
                          IP: 2801:19e::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15512875 (0xecb52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 12:10:42 2023 GMT
            Not After : Jan 23 18:24:59 2025 GMT
        Subject: CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:1b:bd:22:4e:06:e6:52:8d:d3:10:23:e4:
                    8c:21:c5:0d:cf:03:f1:30:fd:b1:0e:5f:58:11:d4:
                    c2:0c:1e:f2:b3:3b:c0:57:34:a2:27:8e:f1:c4:d2:
                    80:5a:93:fa:a1:3b:d8:e0:32:0b:6e:87:f3:18:89:
                    78:bb:af:15:9d:b5:f8:c9:f2:b0:24:01:ed:4f:67:
                    d5:84:a3:f7:5d:5d:6f:b7:6a:d9:50:bc:36:16:50:
                    d9:85:9c:4f:2b:e3:51:8f:06:d8:f3:1c:9c:1d:0c:
                    4d:29:cf:53:17:d5:6f:49:17:49:63:e1:e0:75:93:
                    3a:b3:16:e3:70:74:7d:54:dc:eb:76:f1:60:28:a8:
                    99:5f:9f:a5:2d:89:30:d9:14:fd:eb:f8:c3:ce:90:
                    2e:a7:ae:2a:7b:1d:58:72:65:7b:5e:13:80:95:90:
                    90:7a:8a:33:69:7d:9f:5c:6f:c8:58:33:75:41:84:
                    ca:28:20:dd:bb:c4:22:e5:7d:1c:26:fc:b7:63:1d:
                    0c:2b:f0:32:c4:87:49:27:1f:e5:52:00:6a:51:e4:
                    4c:8f:6f:9a:8d:9a:5b:9f:ed:7a:0e:a8:ca:a3:f2:
                    d1:91:1f:ba:c6:c4:2d:f3:e1:67:fe:3b:ec:62:c2:
                    18:11:fe:3c:46:bf:12:cc:57:34:ed:53:0d:f7:7e:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19e::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271890

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:70:82:a9:80:48:6e:5c:bf:3d:a3:dd:dd:e9:f1:5d:8b:
         e0:2d:53:d2:9b:d6:2e:49:ea:74:80:f6:e0:1a:d9:18:38:3e:
         f4:9a:95:46:a1:2b:8d:37:a4:89:0d:88:4d:01:78:e1:63:cb:
         05:42:4e:d9:43:49:6d:9e:20:e7:f3:64:37:24:c0:57:20:0e:
         62:fa:0b:e3:5e:e7:ab:7b:ce:1c:13:80:5e:e5:3e:e4:76:65:
         05:fa:c6:e6:5a:74:4b:8d:90:ce:0a:73:7d:38:ca:2f:51:ce:
         e0:df:1f:e6:24:4d:b5:ac:0f:ae:9d:40:bb:e5:ea:dd:1a:c6:
         f8:f2:e8:c1:a7:47:94:75:58:40:77:2a:f0:8d:1a:77:9d:82:
         5b:80:81:a0:3c:52:dd:f8:9c:84:bb:cc:5a:c5:e9:f8:d7:ac:
         93:4b:41:4b:b5:df:e6:70:a7:2e:5a:42:9e:42:06:66:cd:1e:
         a9:5a:d8:5a:a8:d6:df:1c:85:7d:f0:00:fb:e8:e8:60:3a:2a:
         73:34:2c:06:95:ff:6f:80:22:bb:c3:0d:a2:da:c3:6f:f9:f4:
         76:3f:b0:18:51:29:94:ac:da:c0:dd:d4:ba:41:e1:76:83:a8:
         a1:ea:28:97:33:59:53:00:db:d0:01:8f:c2:7a:80:65:a5:bc:
         53:36:1d:de
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAOy1KzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwNjEyMTA0MloXDTI1MDEyMzE4MjQ1
OVowMzExMC8GA1UEAxMoYWE5NjI2ODA1Mjg4ZTc0M2VlYmMzMmFmZDZjNWQ0MTRi
OGYxM2MyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJy3G70iTgbm
Uo3TECPkjCHFDc8D8TD9sQ5fWBHUwgwe8rM7wFc0oieO8cTSgFqT+qE72OAyC26H
8xiJeLuvFZ21+MnysCQB7U9n1YSj911db7dq2VC8NhZQ2YWcTyvjUY8G2PMcnB0M
TSnPUxfVb0kXSWPh4HWTOrMW43B0fVTc63bxYCiomV+fpS2JMNkU/ev4w86QLqeu
KnsdWHJle14TgJWQkHqKM2l9n1xvyFgzdUGEyigg3bvEIuV9HCb8t2MdDCvwMsSH
SScf5VIAalHkTI9vmo2aW5/teg6oyqPy0ZEfusbELfPhZ/477GLCGBH+PEa/EsxX
NO1TDfd+tscCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBT5ZOzuJFlg2dBGIz2w+V3Z
3ObajjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kM2Y3ODFmZC1kY2M3
LTQ4ZDYtYjQ4My0zY2JmMDkyMGVhMjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDNmNzgxZmQtZGNjNy00
OGQ2LWI0ODMtM2NiZjA5MjBlYTIyL2FhOTYyNjgwNTI4OGU3NDNlZWJjMzJhZmQ2
YzVkNDE0YjhmMTNjMmQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAZ4AADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEJhIwDQYJKoZIhvcNAQELBQADggEBAAuScIKpgEhuXL89o93d
6fFdi+AtU9Kb1i5J6nSA9uAa2Rg4PvSalUahK403pIkNiE0BeOFjywVCTtlDSW2e
IOfzZDckwFcgDmL6C+Ne56t7zhwTgF7lPuR2ZQX6xuZadEuNkM4Kc304yi9RzuDf
H+YkTbWsD66dQLvl6t0axvjy6MGnR5R1WEB3KvCNGnedgluAgaA8Ut34nIS7zFrF
6fjXrJNLQUu13+Zwpy5aQp5CBmbNHqla2Fqo1t8chX3wAPvo6GA6KnM0LAaV/2+A
IrvDDaLaw2/59HY/sBhRKZSs2sDd1LpB4XaDqKHqKJczWVMA29ABj8J6gGWlvFM2
Hd4=
-----END CERTIFICATE-----