Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b66bcc99865de7fcd864a55002349c7f2a3229b9.cer
File:                     b66bcc99865de7fcd864a55002349c7f2a3229b9.cer (raw, json)
Hash identifier:          iqz4w3bnp8TLHV99cS3wZt+WtOvNtLZA1xnOO0FCe5o=
Subject key identifier:   76:DD:ED:8E:74:C5:53:4F:A0:58:6F:AA:B2:83:C0:90:0B:44:20:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8ADC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5c16b1ed-c550-4775-b505-f8c3a0c3bb8d/b66bcc99865de7fcd864a55002349c7f2a3229b9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5c16b1ed-c550-4775-b505-f8c3a0c3bb8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Sep 2023 17:27:38 +0000
Certificate not after:    Tue 23 Jul 2024 17:59:04 +0000
Subordinate resources:    AS: 269787
                          IP: 45.185.43.0/24
                          IP: 2801:1c:4800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16297408 (0xf8adc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 17:27:38 2023 GMT
            Not After : Jul 23 17:59:04 2024 GMT
        Subject: CN=b66bcc99865de7fcd864a55002349c7f2a3229b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:ae:03:27:5f:f7:43:28:f4:77:1f:bf:aa:
                    71:d7:b6:a8:6f:57:a9:32:8d:d5:60:9f:da:46:d9:
                    dd:2d:49:f2:0c:c9:c6:52:73:ee:98:74:f9:60:3b:
                    41:9d:23:6d:0f:12:6c:ff:86:23:59:7c:b8:39:d0:
                    a7:69:d5:88:5e:d2:e4:74:0e:07:7e:38:69:ea:1f:
                    9e:2a:a1:14:3a:35:94:5a:8c:ea:bf:ba:41:b8:96:
                    a0:cc:72:27:bd:61:59:f3:05:96:2b:e3:a0:a2:e3:
                    74:4e:bd:6c:9f:22:84:1b:41:9c:27:d6:15:cf:46:
                    9f:66:1b:5c:44:4d:06:39:33:44:9a:fd:3e:e6:47:
                    73:e2:4f:83:db:76:03:55:0c:45:71:27:96:a7:7e:
                    06:1c:e5:a8:a1:aa:84:86:68:53:b6:8a:69:67:0f:
                    d2:ee:7a:26:3a:a7:23:ac:fe:c9:27:ee:ba:5f:1a:
                    4a:2b:ad:20:99:00:ab:c8:53:cd:e4:fa:c4:84:ff:
                    51:fd:67:86:dc:2a:12:11:da:2e:63:ff:79:e0:4d:
                    cb:83:b7:30:74:1f:8f:45:21:a0:ee:4b:7d:1c:23:
                    f3:bb:04:e8:ea:df:44:5f:fc:e8:ef:93:3d:da:3c:
                    fb:a8:c4:bb:3d:94:bc:69:2a:9e:ee:3a:6b:17:77:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DD:ED:8E:74:C5:53:4F:A0:58:6F:AA:B2:83:C0:90:0B:44:20:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5c16b1ed-c550-4775-b505-f8c3a0c3bb8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5c16b1ed-c550-4775-b505-f8c3a0c3bb8d/b66bcc99865de7fcd864a55002349c7f2a3229b9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.43.0/24
                IPv6:
                  2801:1c:4800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269787

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:b7:d6:ee:11:31:a9:f5:79:04:11:33:7e:32:ea:c7:81:
         94:33:f1:fb:27:8e:fc:83:dc:4f:b3:67:34:ff:dc:7b:da:1a:
         0e:93:00:7a:17:82:72:34:d0:0c:f3:bb:d7:a6:ff:c3:a4:4e:
         fa:b4:0e:52:7f:bf:10:ef:e7:ab:eb:dd:fd:b6:62:8e:dd:21:
         b1:84:7a:0c:e6:19:88:d3:6e:49:93:f2:28:10:8a:ac:a2:f3:
         12:3a:aa:e2:a2:1f:d3:6f:af:d9:2a:d8:c7:89:a3:a2:30:50:
         53:18:8d:45:d5:74:e6:af:6e:ec:22:1e:39:88:d7:86:74:a7:
         25:44:b8:23:23:12:f2:de:dc:66:64:40:7d:b1:b9:b4:48:32:
         65:d5:38:49:96:fd:a6:9d:20:e2:41:ab:95:5d:bb:92:1e:06:
         3d:72:c0:d9:7f:7f:a7:74:70:ef:be:fe:4d:6d:fb:e6:9c:78:
         31:c6:9b:f0:d9:a7:90:cb:c5:2d:6d:82:4d:2b:34:91:d1:db:
         da:61:92:a2:92:92:30:1b:96:5e:01:b1:1f:dc:18:f3:16:1a:
         a4:63:4c:36:75:8a:c1:c5:e8:68:15:eb:c2:8c:ee:c2:a8:60:
         c5:7a:71:22:b8:ff:7a:bf:b4:7c:59:e8:d7:e0:98:78:8f:9b:
         1c:33:32:ba
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAPitwDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkwNzE3MjczOFoXDTI0MDcyMzE3NTkw
NFowMzExMC8GA1UEAxMoYjY2YmNjOTk4NjVkZTdmY2Q4NjRhNTUwMDIzNDljN2Yy
YTMyMjliOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVDrgMnX/dD
KPR3H7+qcde2qG9XqTKN1WCf2kbZ3S1J8gzJxlJz7ph0+WA7QZ0jbQ8SbP+GI1l8
uDnQp2nViF7S5HQOB344aeofniqhFDo1lFqM6r+6QbiWoMxyJ71hWfMFlivjoKLj
dE69bJ8ihBtBnCfWFc9Gn2YbXERNBjkzRJr9PuZHc+JPg9t2A1UMRXEnlqd+Bhzl
qKGqhIZoU7aKaWcP0u56JjqnI6z+ySfuul8aSiutIJkAq8hTzeT6xIT/Uf1nhtwq
EhHaLmP/eeBNy4O3MHQfj0UhoO5LfRwj87sE6OrfRF/86O+TPdo8+6jEuz2UvGkq
nu46axd3ZMkCAwEAAaOCAwswggMHMB0GA1UdDgQWBBR23e2OdMVTT6BYb6qyg8CQ
C0QgyTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YzE2YjFlZC1jNTUw
LTQ3NzUtYjUwNS1mOGMzYTBjM2JiOGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWMxNmIxZWQtYzU1MC00
Nzc1LWI1MDUtZjhjM2EwYzNiYjhkL2I2NmJjYzk5ODY1ZGU3ZmNkODY0YTU1MDAy
MzQ5YzdmMmEzMjI5YjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC25KzAPBAIAAjAJAwcAKAEAHEgA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd2zANBgkqhkiG9w0BAQsFAAOCAQEA
F+e31u4RMan1eQQRM34y6seBlDPx+yeO/IPcT7NnNP/ce9oaDpMAeheCcjTQDPO7
16b/w6RO+rQOUn+/EO/nq+vd/bZijt0hsYR6DOYZiNNuSZPyKBCKrKLzEjqq4qIf
02+v2SrYx4mjojBQUxiNRdV05q9u7CIeOYjXhnSnJUS4IyMS8t7cZmRAfbG5tEgy
ZdU4SZb9pp0g4kGrlV27kh4GPXLA2X9/p3Rw777+TW375px4Mcab8NmnkMvFLW2C
TSs0kdHb2mGSopKSMBuWXgGxH9wY8xYapGNMNnWKwcXoaBXrwozuwqhgxXpxIrj/
er+0fFno1+CYeI+bHDMyug==
-----END CERTIFICATE-----