Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0ec2c9a43922deeeb156ad2af85953ebeeab043.cer
File:                     b0ec2c9a43922deeeb156ad2af85953ebeeab043.cer (raw, json)
Hash identifier:          hd5Oq1kag8i8A0ED4etpmUGHgDf6BQEsJLPT03IVxVo=
Subject key identifier:   89:FB:02:E8:DD:F9:7B:93:A8:94:63:CD:0E:4E:19:D9:3C:07:EC:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF5FC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/185b00e0-10d5-412e-8fa8-b0b5bb9bc890/b0ec2c9a43922deeeb156ad2af85953ebeeab043.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/185b00e0-10d5-412e-8fa8-b0b5bb9bc890/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:16:55 +0000
Certificate not after:    Wed 18 Jun 2025 16:07:56 +0000
Subordinate resources:    AS: 53181
                          IP: 138.204.64.0/22
                          IP: 191.241.64.0/20
                          IP: 201.33.160.0/20
                          IP: 2804:113c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16736192 (0xff5fc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:16:55 2023 GMT
            Not After : Jun 18 16:07:56 2025 GMT
        Subject: CN=b0ec2c9a43922deeeb156ad2af85953ebeeab043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:c3:7f:63:5d:42:a0:9c:66:fe:a3:8d:2d:
                    c6:c7:e8:e6:08:95:dd:ad:2b:53:45:ff:d7:99:c7:
                    eb:6a:46:3a:6e:3d:f8:1f:e5:b3:4e:61:22:fb:6f:
                    64:65:3b:58:17:e7:d2:a0:2c:77:bc:d2:3d:06:cb:
                    07:00:4c:f9:52:4a:3d:7c:b3:75:30:ef:15:2d:97:
                    8b:ae:3b:67:bf:39:2d:db:00:03:15:12:aa:96:ad:
                    99:84:e2:bd:9f:63:71:79:22:63:82:79:7b:33:0c:
                    a7:d5:c5:8b:bf:ab:9f:ea:2e:24:f2:92:28:b6:2b:
                    dd:a6:82:17:b5:7e:64:69:57:f9:51:b6:84:75:12:
                    5e:81:b7:19:ae:bf:27:fb:07:e9:6b:e2:ba:4e:4d:
                    6b:4d:a1:7a:15:cb:e2:ea:bb:b6:f9:92:5a:7e:60:
                    c6:18:21:54:2c:10:70:a7:df:dd:19:71:36:3b:43:
                    08:9f:22:df:93:d9:d2:d8:ea:f6:9f:ee:fe:ee:c5:
                    4c:9b:da:5c:3c:29:00:e3:06:a1:f7:90:c4:99:33:
                    da:fc:a5:09:50:8f:f7:a9:c9:9d:6c:4d:63:93:e7:
                    94:c9:d6:af:ff:f6:8c:36:cb:0f:ec:dd:15:5e:86:
                    45:6d:80:19:cc:05:bb:a5:21:68:5b:af:86:d8:18:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:02:E8:DD:F9:7B:93:A8:94:63:CD:0E:4E:19:D9:3C:07:EC:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/185b00e0-10d5-412e-8fa8-b0b5bb9bc890/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/185b00e0-10d5-412e-8fa8-b0b5bb9bc890/b0ec2c9a43922deeeb156ad2af85953ebeeab043.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22
                  191.241.64.0/20
                  201.33.160.0/20
                IPv6:
                  2804:113c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53181

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:69:91:71:91:3b:e2:d4:1a:61:e5:1f:ed:f8:a3:9b:e9:
         75:51:55:58:bf:57:bd:55:0c:22:68:d9:de:9d:88:b8:9f:8c:
         64:00:44:88:20:6b:31:3d:d5:47:06:57:00:e1:59:22:43:0b:
         3e:47:10:c1:90:ff:20:f9:24:ef:ac:ff:5b:63:08:c1:e7:1f:
         26:15:4e:8a:d2:b6:72:78:98:13:fd:21:94:58:28:6b:9f:dc:
         cb:b6:d5:44:0e:96:14:cb:90:30:1c:18:4e:05:53:5a:2c:57:
         31:b4:72:89:37:b5:a0:6c:6a:87:4e:9f:d6:f7:f9:25:ad:c6:
         b6:e0:12:18:6c:e9:6d:bf:0b:c3:a7:3a:cd:e2:24:39:d6:77:
         7b:23:95:0e:f3:29:7b:2e:c1:8f:64:50:35:11:d9:ae:f3:ba:
         59:d1:f3:2c:9f:28:4c:ce:6b:96:d6:97:09:f2:a9:26:1d:04:
         6c:02:ae:36:f2:19:5b:d7:d5:95:fa:9e:cb:d9:bc:e0:69:9b:
         e7:89:17:5d:d1:9a:10:73:29:6d:14:36:9a:71:0b:ff:90:48:
         55:27:75:58:4e:eb:ae:cf:99:dc:41:c5:35:15:b5:23:86:a3:
         15:79:90:e1:d8:16:80:33:60:dc:18:53:ae:a0:d5:d6:e2:11:
         ee:3b:05:56
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIEAP9fwDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3MTY1NVoXDTI1MDYxODE2MDc1
NlowMzExMC8GA1UEAxMoYjBlYzJjOWE0MzkyMmRlZWViMTU2YWQyYWY4NTk1M2Vi
ZWVhYjA0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQ5w39jXUKg
nGb+o40txsfo5giV3a0rU0X/15nH62pGOm49+B/ls05hIvtvZGU7WBfn0qAsd7zS
PQbLBwBM+VJKPXyzdTDvFS2Xi647Z785LdsAAxUSqpatmYTivZ9jcXkiY4J5ezMM
p9XFi7+rn+ouJPKSKLYr3aaCF7V+ZGlX+VG2hHUSXoG3Ga6/J/sH6Wviuk5Na02h
ehXL4uq7tvmSWn5gxhghVCwQcKff3RlxNjtDCJ8i35PZ0tjq9p/u/u7FTJvaXDwp
AOMGofeQxJkz2vylCVCP96nJnWxNY5PnlMnWr//2jDbLD+zdFV6GRW2AGcwFu6Uh
aFuvhtgYLcsCAwEAAaOCAxUwggMRMB0GA1UdDgQWBBSJ+wLo3fl7k6iUY80OThnZ
PAfsjTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xODViMDBlMC0xMGQ1
LTQxMmUtOGZhOC1iMGI1YmI5YmM4OTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTg1YjAwZTAtMTBkNS00
MTJlLThmYTgtYjBiNWJiOWJjODkwL2IwZWMyYzlhNDM5MjJkZWVlYjE1NmFkMmFm
ODU5NTNlYmVlYWIwNDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAorMQAMEBL/xQAMEBMkhoDANBAIA
AjAHAwUAKAQRPDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz70wDQYJKoZIhvcN
AQELBQADggEBAI6JaZFxkTvi1Bph5R/t+KOb6XVRVVi/V71VDCJo2d6diLifjGQA
RIggazE91UcGVwDhWSJDCz5HEMGQ/yD5JO+s/1tjCMHnHyYVTorStnJ4mBP9IZRY
KGuf3Mu21UQOlhTLkDAcGE4FU1osVzG0cok3taBsaodOn9b3+SWtxrbgEhhs6W2/
C8OnOs3iJDnWd3sjlQ7zKXsuwY9kUDUR2a7zulnR8yyfKEzOa5bWlwnyqSYdBGwC
rjbyGVvX1ZX6nsvZvOBpm+eJF13RmhBzKW0UNppxC/+QSFUndVhO667PmdxBxTUV
tSOGoxV5kOHYFoAzYNwYU66g1dbiEe47BVY=
-----END CERTIFICATE-----