Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b96119b37f75d57200f44de3575a668fecef4323.cer
File:                     b96119b37f75d57200f44de3575a668fecef4323.cer (raw, json)
Hash identifier:          BBX+KeBcUFtMU8usFJsigm5i3KfAgVGNKxoJkPJIUA4=
Subject key identifier:   90:B5:35:F4:10:C4:48:41:71:39:37:CD:FD:87:D4:58:9F:45:E4:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01047735
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d5bd9ba8-c6d4-4b40-b683-bb119e9288d1/b96119b37f75d57200f44de3575a668fecef4323.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d5bd9ba8-c6d4-4b40-b683-bb119e9288d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 22:05:28 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.9.196.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17069877 (0x1047735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 19 22:05:28 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=b96119b37f75d57200f44de3575a668fecef4323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:13:b8:60:9d:47:f6:d3:96:21:b4:b0:73:2b:
                    0b:ab:c3:97:b1:31:60:1d:2b:c9:52:dd:43:54:f0:
                    ed:e4:ba:c1:b4:87:70:d7:1f:68:2c:cc:eb:85:23:
                    cb:22:ac:a2:12:6c:2a:d8:77:37:8d:98:2f:eb:17:
                    01:58:8b:db:0c:0c:5d:06:51:41:bf:48:96:26:12:
                    68:ea:98:0a:8a:15:06:a3:26:fa:fd:78:83:fe:56:
                    c2:3a:47:a0:94:e7:e0:90:ae:2a:c1:55:c2:ab:98:
                    b2:d8:08:39:bc:1b:b1:c8:37:69:37:53:42:ea:d2:
                    ae:83:a2:49:a0:d1:43:08:e8:dc:42:04:ca:b9:66:
                    21:93:9a:93:90:72:af:74:0d:f7:bb:bf:df:9f:79:
                    79:05:64:8b:09:9e:c7:45:90:b2:be:a8:62:e6:06:
                    d4:86:bf:a8:33:12:3c:04:cc:d2:51:9d:d6:ea:14:
                    c5:cd:87:0a:0f:8e:44:98:fa:5d:7d:6f:6a:8a:96:
                    bb:5b:0f:4a:ea:1b:7f:97:a0:7c:96:1b:6b:30:7e:
                    a7:b6:3e:30:13:36:69:8f:e2:b3:73:17:6b:f4:71:
                    79:d4:61:de:55:d8:8e:73:ad:f0:c8:4d:17:18:4a:
                    57:c8:d2:5d:2a:c0:ad:b2:a4:e2:a2:0c:a3:dd:d8:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B5:35:F4:10:C4:48:41:71:39:37:CD:FD:87:D4:58:9F:45:E4:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d5bd9ba8-c6d4-4b40-b683-bb119e9288d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d5bd9ba8-c6d4-4b40-b683-bb119e9288d1/b96119b37f75d57200f44de3575a668fecef4323.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:b4:a5:f8:ec:64:71:f0:47:af:a4:d2:51:ae:cc:4f:c9:
         df:fe:ee:76:0b:2f:4e:b5:0b:b9:ad:1a:ec:56:5a:e9:4a:09:
         6a:91:9c:0c:0c:b1:15:f1:d8:47:0f:96:22:b7:ae:58:d4:d4:
         ee:05:56:1b:66:23:81:ea:5c:62:09:67:64:43:df:8a:63:5e:
         f2:6d:c4:8a:c6:96:aa:b3:80:27:36:1b:40:58:c1:c4:d0:ad:
         e2:b1:17:e0:1f:15:a9:c8:2e:2f:c9:a3:15:24:ea:1c:5f:7c:
         b9:08:62:14:b4:74:4c:af:79:00:7e:60:e5:cd:24:ee:08:2e:
         a9:d4:18:85:5f:1b:ec:04:eb:8a:4b:ed:a5:5c:73:d0:5e:27:
         b8:aa:f4:c2:17:72:77:48:20:82:13:db:53:7c:88:d8:76:7b:
         6a:a9:4d:af:e9:fa:52:b6:5a:40:e1:f0:42:18:26:c5:8a:6f:
         ba:03:66:9f:cd:e9:d0:47:05:d6:5f:58:d9:da:45:9b:08:e9:
         6f:89:9e:a2:1d:39:c5:d8:17:f1:8d:ed:fb:2f:f8:5a:d7:48:
         53:68:04:18:96:09:71:0b:71:c0:b4:6d:dc:f1:2b:69:6d:65:
         58:51:3b:52:96:65:52:fa:c3:ab:41:bb:9b:ed:29:24:db:a0:
         82:0b:00:ee
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAQR3NTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIxOTIyMDUyOFoXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoYjk2MTE5YjM3Zjc1ZDU3MjAwZjQ0ZGUzNTc1YTY2OGZl
Y2VmNDMyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIkTuGCdR/bT
liG0sHMrC6vDl7ExYB0ryVLdQ1Tw7eS6wbSHcNcfaCzM64UjyyKsohJsKth3N42Y
L+sXAViL2wwMXQZRQb9IliYSaOqYCooVBqMm+v14g/5WwjpHoJTn4JCuKsFVwquY
stgIObwbscg3aTdTQurSroOiSaDRQwjo3EIEyrlmIZOak5Byr3QN97u/3595eQVk
iwmex0WQsr6oYuYG1Ia/qDMSPATM0lGd1uoUxc2HCg+ORJj6XX1vaoqWu1sPSuob
f5egfJYbazB+p7Y+MBM2aY/is3MXa/RxedRh3lXYjnOt8MhNFxhKV8jSXSrArbKk
4qIMo93YseECAwEAAaOCAt4wggLaMB0GA1UdDgQWBBSQtTX0EMRIQXE5N839h9RY
n0XkBjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNWJkOWJhOC1jNmQ0
LTRiNDAtYjY4My1iYjExOWU5Mjg4ZDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDViZDliYTgtYzZkNC00
YjQwLWI2ODMtYmIxMTllOTI4OGQxL2I5NjExOWIzN2Y3NWQ1NzIwMGY0NGRlMzU3
NWE2NjhmZWNlZjQzMjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgJxDANBgkqhkiG9w0BAQsFAAOC
AQEAIO20pfjsZHHwR6+k0lGuzE/J3/7udgsvTrULua0a7FZa6UoJapGcDAyxFfHY
Rw+WIreuWNTU7gVWG2YjgepcYglnZEPfimNe8m3EisaWqrOAJzYbQFjBxNCt4rEX
4B8VqcguL8mjFSTqHF98uQhiFLR0TK95AH5g5c0k7gguqdQYhV8b7ATrikvtpVxz
0F4nuKr0whdyd0ggghPbU3yI2HZ7aqlNr+n6UrZaQOHwQhgmxYpvugNmn83p0EcF
1l9Y2dpFmwjpb4meoh05xdgX8Y3t+y/4WtdIU2gEGJYJcQtxwLRt3PEraW1lWFE7
UpZlUvrDq0G7m+0pJNugggsA7g==
-----END CERTIFICATE-----