Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b248685e8fb48008527c8dcfa4425a85239450b9.cer
File:                     b248685e8fb48008527c8dcfa4425a85239450b9.cer (raw, json)
Hash identifier:          HqGyAg+PLCuuYeLy41qDOGntG2w4DvQta9rIVsnzTGY=
Subject key identifier:   6C:FB:A3:B2:72:E2:0B:0D:78:74:5E:00:0F:74:CF:5E:42:37:52:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01037986
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a0a66b1-fd94-475e-b4ab-3c20b57333b2/b248685e8fb48008527c8dcfa4425a85239450b9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a0a66b1-fd94-475e-b4ab-3c20b57333b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 15:49:23 +0000
Certificate not after:    Sun 23 Feb 2025 15:00:00 +0000
Subordinate resources:    AS: 20321

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17004934 (0x1037986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 15:49:23 2023 GMT
            Not After : Feb 23 15:00:00 2025 GMT
        Subject: CN=b248685e8fb48008527c8dcfa4425a85239450b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:d4:ca:d1:c7:c1:49:18:12:bc:6c:5c:33:
                    c3:2e:f8:2b:a4:d4:27:02:da:f2:32:58:a9:8d:da:
                    a5:bb:b5:a0:04:af:e8:a9:9d:8e:e9:1a:37:be:23:
                    08:ea:4a:b0:2d:8c:11:72:9c:99:50:3f:e5:24:ff:
                    ad:f4:fc:04:56:7f:51:7e:84:96:d7:12:02:75:1e:
                    64:87:52:c5:a0:02:47:cb:6a:bb:d8:82:71:86:70:
                    89:4f:05:58:e9:b3:88:fb:ec:c6:e0:59:83:77:36:
                    f1:e3:f8:a5:4a:dc:26:84:b5:5a:4b:2d:93:ba:91:
                    e3:d4:dc:de:4c:f0:b5:69:0e:f5:ed:82:e4:ae:e6:
                    ec:05:df:4d:c9:f2:bf:e3:94:29:ca:e1:95:06:e8:
                    e7:d9:7d:aa:3b:e1:e0:39:9f:af:0c:77:a6:96:fb:
                    f3:e4:58:09:11:30:dd:15:91:b6:a5:ce:bd:72:b1:
                    b3:69:b2:c3:29:10:1e:a7:13:c2:10:0e:27:32:a6:
                    d0:68:41:18:12:3f:9e:23:2a:f9:c6:ec:be:3b:c4:
                    0f:ea:f3:a0:6c:1d:09:a0:48:21:39:27:e9:1f:b6:
                    50:50:05:61:bc:0c:af:5e:cc:49:da:e6:c6:0f:c0:
                    b3:5b:6c:b9:a5:cc:02:4c:a6:98:ec:fb:73:d3:a9:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:A3:B2:72:E2:0B:0D:78:74:5E:00:0F:74:CF:5E:42:37:52:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a0a66b1-fd94-475e-b4ab-3c20b57333b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a0a66b1-fd94-475e-b4ab-3c20b57333b2/b248685e8fb48008527c8dcfa4425a85239450b9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20321

    Signature Algorithm: sha256WithRSAEncryption
         9d:e9:73:e2:e0:79:3c:1c:44:ed:9a:f5:36:94:80:10:db:1c:
         0c:7d:31:5a:f9:5a:61:88:b8:d1:77:51:69:ce:b0:79:52:cc:
         37:cf:b7:fa:17:b8:fd:1d:48:73:1a:e2:6d:4a:03:70:e6:d9:
         a3:00:5f:31:cc:fd:22:e4:2a:9a:66:7b:f9:21:fd:38:bf:d8:
         c5:9c:23:f0:c2:f4:59:b3:7f:e5:16:79:70:dd:02:41:48:27:
         3b:d6:1e:0a:f8:47:d3:c9:42:ce:d4:76:88:7d:70:e5:8a:9e:
         1b:e1:2a:3f:a2:b2:78:e6:b6:26:4d:9b:bc:49:d2:94:f5:74:
         0e:70:18:f6:43:4f:b7:0f:3f:63:b1:09:09:6d:d2:f1:de:4d:
         78:3f:fd:77:42:53:fd:ab:47:54:12:8a:8f:b4:5e:89:d6:79:
         83:5e:f9:53:ae:7f:be:ac:29:d7:a1:9e:17:be:d5:fe:79:54:
         e0:ab:cd:c0:85:af:b6:81:40:19:e8:71:8f:3c:f8:23:25:2d:
         3c:45:cb:60:a9:0d:d7:da:c9:00:9a:cf:d2:df:5e:13:8e:34:
         37:90:84:6c:ba:d2:bd:5c:a4:f9:39:3c:15:f9:4b:6d:2a:f9:
         dc:f0:44:b7:ef:37:ad:16:ce:5d:0d:e0:ca:42:31:0f:60:44:
         b6:10:54:bd
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIEAQN5hjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIxMTE1NDkyM1oXDTI1MDIyMzE1MDAw
MFowMzExMC8GA1UEAxMoYjI0ODY4NWU4ZmI0ODAwODUyN2M4ZGNmYTQ0MjVhODUy
Mzk0NTBiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtb1MrRx8FJ
GBK8bFwzwy74K6TUJwLa8jJYqY3apbu1oASv6KmdjukaN74jCOpKsC2MEXKcmVA/
5ST/rfT8BFZ/UX6EltcSAnUeZIdSxaACR8tqu9iCcYZwiU8FWOmziPvsxuBZg3c2
8eP4pUrcJoS1Wkstk7qR49Tc3kzwtWkO9e2C5K7m7AXfTcnyv+OUKcrhlQbo59l9
qjvh4Dmfrwx3ppb78+RYCREw3RWRtqXOvXKxs2mywykQHqcTwhAOJzKm0GhBGBI/
niMq+cbsvjvED+rzoGwdCaBIITkn6R+2UFAFYbwMr17MSdrmxg/As1tsuaXMAkym
mOz7c9OpmnkCAwEAAaOCAtgwggLUMB0GA1UdDgQWBBRs+6OycuILDXh0XgAPdM9e
QjdSkTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xYTBhNjZiMS1mZDk0
LTQ3NWUtYjRhYi0zYzIwYjU3MzMzYjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWEwYTY2YjEtZmQ5NC00
NzVlLWI0YWItM2MyMGI1NzMzM2IyL2IyNDg2ODVlOGZiNDgwMDg1MjdjOGRjZmE0
NDI1YTg1MjM5NDUwYjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJPYTANBgkqhkiG9w0BAQsFAAOCAQEAnelz
4uB5PBxE7Zr1NpSAENscDH0xWvlaYYi40XdRac6weVLMN8+3+he4/R1IcxribUoD
cObZowBfMcz9IuQqmmZ7+SH9OL/YxZwj8ML0WbN/5RZ5cN0CQUgnO9YeCvhH08lC
ztR2iH1w5YqeG+EqP6KyeOa2Jk2bvEnSlPV0DnAY9kNPtw8/Y7EJCW3S8d5NeD/9
d0JT/atHVBKKj7ReidZ5g175U65/vqwp16GeF77V/nlU4KvNwIWvtoFAGehxjzz4
IyUtPEXLYKkN19rJAJrP0t9eE440N5CEbLrSvVyk+Tk8FflLbSr53PBEt+83rRbO
XQ3gykIxD2BEthBUvQ==
-----END CERTIFICATE-----