Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9b94b6a1b843bdd514ac10e4727bd6524350ca8.cer
File:                     b9b94b6a1b843bdd514ac10e4727bd6524350ca8.cer (raw, json)
Hash identifier:          zK4WXi/WkGoXqmuNZQ3WHs7mAXZeOGxmcOMmhQqJF54=
Subject key identifier:   63:3B:80:C4:E9:51:C2:1E:51:81:FC:F4:09:7D:51:78:B7:FA:3D:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED1FFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f6416d99-771e-4c20-9957-52321aa2d488/b9b94b6a1b843bdd514ac10e4727bd6524350ca8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f6416d99-771e-4c20-9957-52321aa2d488/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 21:12:42 +0000
Certificate not after:    Mon 27 May 2024 22:57:10 +0000
Subordinate resources:    AS: 266868
                          IP: 45.239.115.0/24
                          IP: 2803:caa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15540223 (0xed1fff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  7 21:12:42 2023 GMT
            Not After : May 27 22:57:10 2024 GMT
        Subject: CN=b9b94b6a1b843bdd514ac10e4727bd6524350ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:68:62:1b:75:a8:70:4b:07:c9:6f:a0:b2:
                    8f:6a:4c:4a:4b:a1:0f:7c:54:f8:4e:cf:0b:82:c3:
                    3d:fe:a9:ac:96:1e:1f:0f:d3:ce:69:19:23:f1:fd:
                    ba:54:4e:a0:20:6c:b7:d6:75:9f:19:53:35:68:db:
                    0a:93:da:7a:08:7d:b9:e8:42:28:a4:0c:8d:5d:fc:
                    e0:7f:75:94:ef:96:74:94:03:82:26:00:e0:cf:fd:
                    75:fa:03:87:93:d2:63:18:e6:0c:cc:6c:67:71:14:
                    80:3f:ea:06:3b:bf:9c:05:6b:c3:a7:a7:3e:69:19:
                    f4:7b:1e:d1:42:f2:65:d5:47:fe:6e:b2:70:d6:5e:
                    8a:bf:ba:37:0a:58:b8:4e:07:a1:8c:76:26:88:fb:
                    99:90:6c:08:c7:c3:27:fe:5f:8b:d6:5a:74:4c:4b:
                    0d:16:0f:86:a0:27:f2:ff:9f:43:c4:d1:f5:7d:4c:
                    01:e1:ae:11:bb:14:04:0d:02:fd:9b:bf:cf:c7:a3:
                    2e:2d:5b:d2:19:0c:bb:0f:60:44:8d:56:0a:95:ae:
                    e9:e8:03:23:0a:86:f6:75:22:3c:a0:ec:6e:9e:fa:
                    7f:3f:a3:96:0b:24:7b:a7:aa:0a:5c:a5:27:17:33:
                    bb:31:d8:da:7d:3b:de:19:9d:34:86:91:bd:e0:44:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3B:80:C4:E9:51:C2:1E:51:81:FC:F4:09:7D:51:78:B7:FA:3D:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f6416d99-771e-4c20-9957-52321aa2d488/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f6416d99-771e-4c20-9957-52321aa2d488/b9b94b6a1b843bdd514ac10e4727bd6524350ca8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.115.0/24
                IPv6:
                  2803:caa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266868

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:cd:83:3c:39:0e:2c:9b:4b:02:ad:a8:0a:5c:51:97:4a:
         d6:5f:b1:e1:45:3c:de:58:75:b8:9f:84:81:23:65:59:3d:9c:
         3a:1b:0e:95:80:3b:5a:aa:60:c6:89:59:9a:86:df:a5:1b:b7:
         46:2b:bf:e8:3b:21:2b:0d:d7:37:ac:66:06:fc:43:75:79:83:
         69:6a:82:8d:2e:a7:08:12:3e:03:2d:fc:1c:3b:3c:a5:30:70:
         cd:9a:24:0b:33:83:1d:0a:64:bd:2b:1f:c8:5e:a1:a3:38:be:
         0b:52:55:8e:09:04:15:a2:dc:2d:00:18:6d:d1:8b:81:1e:65:
         f8:6a:b5:b3:b1:f2:40:2a:bc:42:f9:f9:ff:b6:a5:1b:9a:a7:
         92:8a:39:a7:82:45:16:28:4f:ee:0c:bf:c3:e8:07:ff:06:45:
         68:93:83:f3:4d:ad:07:d7:3a:f4:26:de:3f:b0:95:4b:4b:9d:
         ff:b6:ae:74:7c:07:e2:e2:92:72:de:4f:0c:df:2c:f0:73:10:
         2d:eb:b8:2d:98:1a:6d:fd:76:d9:d9:c0:00:3a:21:07:3b:6e:
         4e:94:96:b4:58:31:a1:10:6d:5e:46:e3:ef:f2:2f:62:eb:e5:
         34:67:dd:e2:17:a9:c5:e3:7a:b5:84:d5:ef:a9:4b:0e:f4:25:
         ef:6a:83:d3
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO0f/zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwNzIxMTI0MloXDTI0MDUyNzIyNTcx
MFowMzExMC8GA1UEAxMoYjliOTRiNmExYjg0M2JkZDUxNGFjMTBlNDcyN2JkNjUy
NDM1MGNhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIuoaGIbdahw
SwfJb6Cyj2pMSkuhD3xU+E7PC4LDPf6prJYeHw/TzmkZI/H9ulROoCBst9Z1nxlT
NWjbCpPaegh9uehCKKQMjV384H91lO+WdJQDgiYA4M/9dfoDh5PSYxjmDMxsZ3EU
gD/qBju/nAVrw6enPmkZ9Hse0ULyZdVH/m6ycNZeir+6NwpYuE4HoYx2Joj7mZBs
CMfDJ/5fi9ZadExLDRYPhqAn8v+fQ8TR9X1MAeGuEbsUBA0C/Zu/z8ejLi1b0hkM
uw9gRI1WCpWu6egDIwqG9nUiPKDsbp76fz+jlgske6eqClylJxczuzHY2n073hmd
NIaRveBEvhsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRjO4DE6VHCHlGB/PQJfVF4
t/o94DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mNjQxNmQ5OS03NzFl
LTRjMjAtOTk1Ny01MjMyMWFhMmQ0ODgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjY0MTZkOTktNzcxZS00
YzIwLTk5NTctNTIzMjFhYTJkNDg4L2I5Yjk0YjZhMWI4NDNiZGQ1MTRhYzEwZTQ3
MjdiZDY1MjQzNTBjYTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC3vczANBAIAAjAHAwUAKAPKoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEnQwDQYJKoZIhvcNAQELBQADggEBADbp
zYM8OQ4sm0sCragKXFGXStZfseFFPN5YdbifhIEjZVk9nDobDpWAO1qqYMaJWZqG
36Ubt0Yrv+g7ISsN1zesZgb8Q3V5g2lqgo0upwgSPgMt/Bw7PKUwcM2aJAszgx0K
ZL0rH8heoaM4vgtSVY4JBBWi3C0AGG3Ri4EeZfhqtbOx8kAqvEL5+f+2pRuap5KK
OaeCRRYoT+4Mv8PoB/8GRWiTg/NNrQfXOvQm3j+wlUtLnf+2rnR8B+LiknLeTwzf
LPBzEC3ruC2YGm39dtnZwAA6IQc7bk6UlrRYMaEQbV5G4+/yL2Lr5TRn3eIXqcXj
erWE1e+pSw70Je9qg9M=
-----END CERTIFICATE-----