Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae22cf8d2e03e0d3eec08b2cb5c753e523d027c2.cer
File:                     ae22cf8d2e03e0d3eec08b2cb5c753e523d027c2.cer (raw, json)
Hash identifier:          Er0gevfls2xzqoaQSBzwDVtP62jL6xDfB4EYHvgF688=
Subject key identifier:   16:DD:4A:F8:5E:25:80:EB:C4:81:05:69:8D:ED:BD:CB:2A:3C:F8:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE0DBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e3c2a25-f074-4134-8059-ea160d0c4d73/ae22cf8d2e03e0d3eec08b2cb5c753e523d027c2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e3c2a25-f074-4134-8059-ea160d0c4d73/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 17 Jun 2023 23:01:46 +0000
Certificate not after:    Tue 07 May 2024 06:00:00 +0000
Subordinate resources:    IP: 2801:0:130::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15601084 (0xee0dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 17 23:01:46 2023 GMT
            Not After : May  7 06:00:00 2024 GMT
        Subject: CN=ae22cf8d2e03e0d3eec08b2cb5c753e523d027c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:7a:70:24:83:0d:12:9c:d6:b0:48:a4:a0:
                    4a:d2:b4:8a:41:c9:96:81:87:c3:5a:8e:c3:a8:15:
                    b2:94:10:3e:92:dc:08:76:d2:eb:b4:df:65:2f:5d:
                    21:50:e8:8c:d3:7e:73:08:bb:2d:f8:34:1d:a6:8e:
                    ac:99:a4:ad:89:1e:5e:ee:7e:97:ab:d7:3b:da:70:
                    d4:69:d8:ad:ed:3c:18:1b:6a:2f:02:d9:4a:c4:38:
                    d1:ee:2b:96:1d:1a:e8:11:4b:9f:f8:d0:b0:a4:43:
                    5f:12:4b:40:8c:85:49:eb:f8:52:bc:5b:bf:bc:ab:
                    4b:98:6f:b1:38:fe:eb:27:c5:9a:55:fb:a1:94:89:
                    16:95:47:19:ec:19:a9:af:f7:64:26:8b:6f:92:1d:
                    8e:ea:45:b2:c6:65:c6:19:82:5c:95:83:6a:c4:2a:
                    09:0d:65:a9:0f:87:3f:38:61:06:6c:4c:8f:a5:15:
                    26:b8:7a:0e:7b:d3:28:ac:8c:5d:7a:32:42:cf:7c:
                    87:b1:7c:d3:14:80:ce:9c:dd:e4:13:ba:6f:47:96:
                    00:8b:99:6f:4c:fe:5b:24:d5:e0:06:3c:e1:68:3e:
                    70:93:3a:de:7b:72:e7:c4:68:e3:57:2a:a8:f7:73:
                    9e:ca:2f:0f:49:1c:8c:73:fd:79:65:06:04:fe:63:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:4A:F8:5E:25:80:EB:C4:81:05:69:8D:ED:BD:CB:2A:3C:F8:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e3c2a25-f074-4134-8059-ea160d0c4d73/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e3c2a25-f074-4134-8059-ea160d0c4d73/ae22cf8d2e03e0d3eec08b2cb5c753e523d027c2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:97:1d:f5:cf:67:f5:de:9f:8b:1f:49:ca:89:9a:38:a8:da:
         30:0b:d1:1d:3e:99:27:90:9b:1d:2b:e2:67:f9:a0:22:cc:05:
         df:33:0a:7a:fe:4f:7f:c5:b3:dd:3f:7a:d4:ba:d1:09:f9:2a:
         27:57:e6:03:6d:ff:02:7d:f7:f5:4d:dc:36:a1:b7:ca:81:f4:
         e4:cd:82:2a:20:52:7c:91:ae:81:be:74:d6:2b:2a:d3:1e:3b:
         fc:39:dd:84:99:ee:7c:01:ce:d7:11:2b:c4:d6:26:6e:a6:8b:
         cb:86:59:0a:9f:e6:5b:ad:65:f7:87:a0:df:78:d1:d0:c9:ba:
         8f:8a:18:14:64:0c:f1:e6:66:87:5a:1e:3a:1a:3f:43:bf:13:
         fc:0c:ad:48:25:fa:4b:55:e3:66:e0:f1:65:1f:ff:eb:55:27:
         73:b1:09:d6:eb:a9:fa:96:cf:c7:88:75:f6:2a:b4:b6:e9:7d:
         72:d6:38:0b:70:1b:a3:08:06:ac:d4:2c:e4:5b:6c:da:88:da:
         20:b7:ef:77:bf:cf:d2:c9:73:db:79:46:ad:60:21:11:f9:f6:
         60:a3:9e:47:36:18:f1:c2:8e:30:2a:7f:ab:2a:b2:76:6c:80:
         d4:bd:0a:0d:3c:f7:15:9d:26:2f:30:e6:03:51:6a:71:fe:8b:
         d4:2e:81:08
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAO4NvDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYxNzIzMDE0NloXDTI0MDUwNzA2MDAw
MFowMzExMC8GA1UEAxMoYWUyMmNmOGQyZTAzZTBkM2VlYzA4YjJjYjVjNzUzZTUy
M2QwMjdjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIpJenAkgw0S
nNawSKSgStK0ikHJloGHw1qOw6gVspQQPpLcCHbS67TfZS9dIVDojNN+cwi7Lfg0
HaaOrJmkrYkeXu5+l6vXO9pw1GnYre08GBtqLwLZSsQ40e4rlh0a6BFLn/jQsKRD
XxJLQIyFSev4Urxbv7yrS5hvsTj+6yfFmlX7oZSJFpVHGewZqa/3ZCaLb5IdjupF
ssZlxhmCXJWDasQqCQ1lqQ+HPzhhBmxMj6UVJrh6DnvTKKyMXXoyQs98h7F80xSA
zpzd5BO6b0eWAIuZb0z+WyTV4AY84Wg+cJM63nty58Ro41cqqPdznsovD0kcjHP9
eWUGBP5jQpkCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQW3Ur4XiWA68SBBWmN7b3L
Kjz4BDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82ZTNjMmEyNS1mMDc0
LTQxMzQtODA1OS1lYTE2MGQwYzRkNzMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmUzYzJhMjUtZjA3NC00
MTM0LTgwNTktZWExNjBkMGM0ZDczL2FlMjJjZjhkMmUwM2UwZDNlZWMwOGIyY2I1
Yzc1M2U1MjNkMDI3YzIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAAABMDANBgkqhkiG9w0BAQsF
AAOCAQEAAZcd9c9n9d6fix9JyomaOKjaMAvRHT6ZJ5CbHSviZ/mgIswF3zMKev5P
f8Wz3T961LrRCfkqJ1fmA23/An339U3cNqG3yoH05M2CKiBSfJGugb501isq0x47
/DndhJnufAHO1xErxNYmbqaLy4ZZCp/mW61l94eg33jR0Mm6j4oYFGQM8eZmh1oe
Oho/Q78T/AytSCX6S1XjZuDxZR//61Unc7EJ1uup+pbPx4h19iq0tul9ctY4C3Ab
owgGrNQs5Fts2ojaILfvd7/P0slz23lGrWAhEfn2YKOeRzYY8cKOMCp/qyqydmyA
1L0KDTz3FZ0mLzDmA1Fqcf6L1C6BCA==
-----END CERTIFICATE-----