Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab20ce8923ff4073847e7d91f71fbf8b27586dd5.cer
File:                     ab20ce8923ff4073847e7d91f71fbf8b27586dd5.cer (raw, json)
Hash identifier:          8oTFd6K3l7zjVSnyaevKcbfq+fkUSkSh1jiab01COlM=
Subject key identifier:   F0:4F:03:76:16:66:B0:B0:8F:A6:8B:94:6C:98:87:8D:45:AF:0C:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3847C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f10eaec6-e0d7-4bce-8a15-1db0c6b44fc4/ab20ce8923ff4073847e7d91f71fbf8b27586dd5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f10eaec6-e0d7-4bce-8a15-1db0c6b44fc4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 17:41:11 +0000
Certificate not after:    Wed 11 Sep 2024 17:39:52 +0000
Subordinate resources:    AS: 272912
                          IP: 2803:ce90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15959164 (0xf3847c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 17:41:11 2023 GMT
            Not After : Sep 11 17:39:52 2024 GMT
        Subject: CN=ab20ce8923ff4073847e7d91f71fbf8b27586dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:08:b1:5b:02:bc:c7:3b:79:66:4e:ff:cc:
                    1b:dc:6b:f8:74:3f:ff:ec:e6:bb:1b:b4:e1:54:6e:
                    cb:0c:e0:f0:bd:83:5f:98:ca:e7:70:18:d6:86:76:
                    95:6b:80:1f:76:f9:3e:38:0c:a1:cf:21:18:94:93:
                    7f:5b:a3:55:c8:d7:03:0e:01:e2:9f:a7:8d:95:50:
                    d0:e9:f2:6f:c9:13:13:4a:0d:10:f2:61:f1:01:7a:
                    f7:c6:c7:ca:f1:56:fe:ea:c2:ef:23:88:0f:81:fd:
                    5f:50:d5:db:28:22:4d:09:40:71:71:c9:00:9d:49:
                    e3:26:a8:87:df:6a:9c:69:40:a5:93:52:ab:62:4e:
                    c7:9c:d3:a9:f9:62:df:68:9e:17:0c:3b:e6:ba:45:
                    f1:7c:63:99:96:d5:ae:2e:ce:c3:df:fa:d7:f8:f5:
                    0f:d7:8a:3c:3b:79:9c:54:b1:60:a4:49:68:ac:72:
                    3d:17:9f:0a:aa:21:42:bb:b1:d2:1a:45:27:2d:48:
                    28:77:f4:b7:f3:09:28:79:6b:be:15:8c:54:1b:42:
                    91:b2:92:f9:4f:65:f0:ce:2b:89:a1:8e:00:27:7d:
                    97:78:b7:26:88:9d:70:d8:72:ba:42:90:b3:d7:b3:
                    e4:47:3a:05:0a:1a:7c:31:f0:7f:5b:2b:97:96:45:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:03:76:16:66:B0:B0:8F:A6:8B:94:6C:98:87:8D:45:AF:0C:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f10eaec6-e0d7-4bce-8a15-1db0c6b44fc4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f10eaec6-e0d7-4bce-8a15-1db0c6b44fc4/ab20ce8923ff4073847e7d91f71fbf8b27586dd5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272912

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:29:85:02:06:77:03:24:25:f6:91:7f:d4:96:69:97:b4:
         34:ce:f7:54:a4:6c:cf:58:6c:c4:0e:2e:7d:26:7a:27:77:5b:
         1b:4e:f0:a0:3a:15:c9:1c:90:04:d8:11:24:13:3b:4b:ab:c2:
         43:19:7e:c0:30:61:c4:76:00:c2:45:cc:c9:59:b2:50:10:9a:
         b3:a7:ec:40:90:e6:47:dd:9d:49:1c:81:08:5b:ca:6a:e6:ea:
         9a:26:67:c4:fb:a2:8c:7d:26:95:12:fe:f8:d0:bf:34:d2:e1:
         35:47:0e:56:88:90:af:31:2e:b7:42:5a:71:08:ec:d6:a3:e1:
         4d:10:30:51:e3:78:98:05:17:c8:33:8d:af:fd:2b:0a:19:85:
         28:eb:0d:ed:01:9c:ee:5b:32:29:fe:21:e5:5b:5a:e4:18:2a:
         56:a5:7d:7c:e3:cc:70:12:61:db:fc:7b:15:a8:1d:54:71:01:
         00:c1:8e:fe:6b:1a:32:bf:2c:fc:78:b3:f3:4e:3a:a5:b0:28:
         d9:a5:f6:2c:d6:e9:24:59:1a:46:9c:c4:f6:9d:83:8d:0e:76:
         7f:ba:74:b5:e1:c4:3d:0d:ad:40:ba:fb:a3:94:40:9b:22:ba:
         3d:8d:a3:7f:ad:68:e6:1f:6b:9f:3e:3d:5c:b9:8f:95:9c:a0:
         d2:55:19:5d
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPOEfDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDczMTE3NDExMVoXDTI0MDkxMTE3Mzk1
MlowMzExMC8GA1UEAxMoYWIyMGNlODkyM2ZmNDA3Mzg0N2U3ZDkxZjcxZmJmOGIy
NzU4NmRkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+gCLFbArzH
O3lmTv/MG9xr+HQ//+zmuxu04VRuywzg8L2DX5jK53AY1oZ2lWuAH3b5PjgMoc8h
GJSTf1ujVcjXAw4B4p+njZVQ0Onyb8kTE0oNEPJh8QF698bHyvFW/urC7yOID4H9
X1DV2ygiTQlAcXHJAJ1J4yaoh99qnGlApZNSq2JOx5zTqfli32ieFww75rpF8Xxj
mZbVri7Ow9/61/j1D9eKPDt5nFSxYKRJaKxyPRefCqohQrux0hpFJy1IKHf0t/MJ
KHlrvhWMVBtCkbKS+U9l8M4riaGOACd9l3i3JoidcNhyukKQs9ez5Ec6BQoafDHw
f1srl5ZFk1sCAwEAAaOCAvswggL3MB0GA1UdDgQWBBTwTwN2FmawsI+mi5RsmIeN
Ra8MdDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMTBlYWVjNi1lMGQ3
LTRiY2UtOGExNS0xZGIwYzZiNDRmYzQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjEwZWFlYzYtZTBkNy00
YmNlLThhMTUtMWRiMGM2YjQ0ZmM0L2FiMjBjZTg5MjNmZjQwNzM4NDdlN2Q5MWY3
MWZiZjhiMjc1ODZkZDUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDzpAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCoQMA0GCSqGSIb3DQEBCwUAA4IBAQCg+imFAgZ3AyQl9pF/1JZp
l7Q0zvdUpGzPWGzEDi59Jnond1sbTvCgOhXJHJAE2BEkEztLq8JDGX7AMGHEdgDC
RczJWbJQEJqzp+xAkOZH3Z1JHIEIW8pq5uqaJmfE+6KMfSaVEv740L800uE1Rw5W
iJCvMS63QlpxCOzWo+FNEDBR43iYBRfIM42v/SsKGYUo6w3tAZzuWzIp/iHlW1rk
GCpWpX1848xwEmHb/HsVqB1UcQEAwY7+axoyvyz8eLPzTjqlsCjZpfYs1ukkWRpG
nMT2nYONDnZ/unS14cQ9Da1AuvujlECbIro9jaN/rWjmH2ufPj1cuY+VnKDSVRld
-----END CERTIFICATE-----