Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer
File:                     ae7eed0e816c205684dab13fe261771e26f139b4.cer (raw, json)
Hash identifier:          VOPHRnp+jT2vHm5eaXYilZBKPZ1P/29o4XlJFPzXb34=
Subject key identifier:   DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E084DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 05 Mar 2023 17:53:54 +0000
Certificate not after:    Sun 12 May 2024 02:46:45 +0000
Subordinate resources:    AS: 265592
                          IP: 45.180.8.0/22
                          IP: 2806:343::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14714075 (0xe084db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  5 17:53:54 2023 GMT
            Not After : May 12 02:46:45 2024 GMT
        Subject: CN=ae7eed0e816c205684dab13fe261771e26f139b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:7b:74:56:f0:1c:4a:20:c8:67:7e:39:a4:
                    cb:31:a9:ab:67:be:73:cc:4f:c1:04:8c:8d:55:08:
                    89:9b:bb:a0:6d:04:83:85:bb:2a:09:37:6c:8f:46:
                    ac:eb:56:fa:c3:f9:e3:71:af:be:f3:24:20:e6:ca:
                    38:07:58:50:08:1d:c7:7d:99:5a:18:bf:46:96:97:
                    81:6e:55:44:3c:3f:39:3f:86:52:ca:e5:43:df:e8:
                    7a:18:fa:13:42:1f:1f:8b:09:ca:43:87:a9:79:64:
                    8c:65:84:6d:83:f7:72:cb:15:6c:3c:57:8c:d5:9f:
                    77:2e:13:2a:6f:71:96:91:29:6d:09:e2:2a:f0:ec:
                    04:62:9b:e9:f0:cc:3a:3c:a5:06:94:dd:d0:6b:03:
                    90:49:5a:b7:b6:87:99:9f:d4:89:db:b2:78:b3:c2:
                    3e:8e:45:07:da:6a:0a:4b:12:51:a6:a2:98:5b:a5:
                    eb:c5:72:2e:3d:43:20:dc:b3:51:23:a1:08:3e:1b:
                    75:c8:f1:4a:74:5c:f6:0c:03:b9:79:0d:63:74:20:
                    b7:d0:e4:e1:69:33:91:99:08:ba:82:34:4e:ca:1a:
                    45:41:f7:13:41:41:8f:92:20:79:b9:53:64:a4:10:
                    40:98:b3:6a:68:46:d6:c3:6d:8b:27:47:91:a5:73:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.8.0/22
                IPv6:
                  2806:343::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265592

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:e1:10:1d:77:a2:d1:f6:93:2b:73:55:27:dc:72:70:e8:
         c9:d1:2e:87:25:8a:37:39:f7:32:1f:c1:34:37:5e:ca:aa:bc:
         90:74:bd:c0:21:79:da:73:5c:8b:a4:1e:75:51:58:09:f8:e6:
         ec:0d:a6:49:a6:64:e4:cb:24:af:f5:63:f5:7d:25:1f:3a:4d:
         48:8b:5d:86:b9:b2:0b:95:c2:e1:8a:54:25:18:bd:f1:cd:61:
         37:0a:8f:36:41:b4:c6:58:9f:be:5e:7c:e2:90:e9:ce:ee:90:
         de:f9:b5:90:35:dc:ae:50:9c:e9:43:78:4c:29:00:24:2e:8c:
         27:a8:b8:b1:6f:e5:94:ac:b5:20:cb:d5:92:1b:3d:c5:0d:a6:
         00:56:27:3a:8d:69:80:73:b6:72:09:f4:d0:4c:59:33:0b:54:
         dd:5a:16:aa:64:ad:53:a1:1c:40:b3:08:b1:f1:d8:e6:75:44:
         41:22:72:b0:3c:51:ef:2e:a3:79:85:f9:55:8c:5b:a2:e2:2d:
         ac:d8:fd:e7:f5:81:ce:aa:02:70:53:be:3f:e1:bb:19:22:d1:
         22:a4:e8:78:33:1e:cf:61:ab:58:88:57:e1:6a:7d:dc:f6:30:
         08:cb:79:ca:ab:93:91:2c:03:a9:eb:6e:56:1f:8b:f2:79:48:
         c4:1d:61:24
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOCE2zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDMwNTE3NTM1NFoXDTI0MDUxMjAyNDY0
NVowMzExMC8GA1UEAxMoYWU3ZWVkMGU4MTZjMjA1Njg0ZGFiMTNmZTI2MTc3MWUy
NmYxMzliNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFKe3RW8BxK
IMhnfjmkyzGpq2e+c8xPwQSMjVUIiZu7oG0Eg4W7Kgk3bI9GrOtW+sP543GvvvMk
IObKOAdYUAgdx32ZWhi/RpaXgW5VRDw/OT+GUsrlQ9/oehj6E0IfH4sJykOHqXlk
jGWEbYP3cssVbDxXjNWfdy4TKm9xlpEpbQniKvDsBGKb6fDMOjylBpTd0GsDkEla
t7aHmZ/UiduyeLPCPo5FB9pqCksSUaaimFul68VyLj1DINyzUSOhCD4bdcjxSnRc
9gwDuXkNY3Qgt9Dk4WkzkZkIuoI0TsoaRUH3E0FBj5IgeblTZKQQQJizamhG1sNt
iydHkaVzmPECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTdp4f1Uy0SohVq6mEMsX5V
JTN8XzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hOWYxNjcwZS0yOTVl
LTQwMjgtYTM5Yi0yYTA5Mjk0OWNhZTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTlmMTY3MGUtMjk1ZS00
MDI4LWEzOWItMmEwOTI5NDljYWU1L2FlN2VlZDBlODE2YzIwNTY4NGRhYjEzZmUy
NjE3NzFlMjZmMTM5YjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi20CDANBAIAAjAHAwUAKAYDQzAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDXgwDQYJKoZIhvcNAQELBQADggEBALYF
4RAdd6LR9pMrc1Un3HJw6MnRLoclijc59zIfwTQ3XsqqvJB0vcAhedpzXIukHnVR
WAn45uwNpkmmZOTLJK/1Y/V9JR86TUiLXYa5sguVwuGKVCUYvfHNYTcKjzZBtMZY
n75efOKQ6c7ukN75tZA13K5QnOlDeEwpACQujCeouLFv5ZSstSDL1ZIbPcUNpgBW
JzqNaYBztnIJ9NBMWTMLVN1aFqpkrVOhHECzCLHx2OZ1REEicrA8Ue8uo3mF+VWM
W6LiLazY/ef1gc6qAnBTvj/huxki0SKk6HgzHs9hq1iIV+Fqfdz2MAjLecqrk5Es
A6nrblYfi/J5SMQdYSQ=
-----END CERTIFICATE-----