Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd4b0b8420da1fd896d6937879c1e602c4aa4f35.cer
File:                     bd4b0b8420da1fd896d6937879c1e602c4aa4f35.cer (raw, json)
Hash identifier:          4Z5FzHFIkViZpi7qA1S3uvRgW4y4d4MI5daTwW5pc7c=
Subject key identifier:   09:FA:5E:B5:A5:1A:B4:08:B1:A3:B7:F8:17:DF:16:D5:ED:1D:FA:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1FDA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/bd4b0b8420da1fd896d6937879c1e602c4aa4f35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 17:50:41 +0000
Certificate not after:    Sat 12 Apr 2025 19:58:33 +0000
Subordinate resources:    AS: 273021
                          IP: 2803:9390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15859113 (0xf1fda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 17 17:50:41 2023 GMT
            Not After : Apr 12 19:58:33 2025 GMT
        Subject: CN=bd4b0b8420da1fd896d6937879c1e602c4aa4f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:62:9d:33:11:11:96:6d:5d:0e:a3:27:e1:
                    98:34:56:31:b3:00:cf:90:80:60:48:1b:eb:3c:0f:
                    9a:17:11:fd:8e:ca:11:0a:aa:ca:d2:f5:6d:11:50:
                    bc:a6:9f:68:3b:8b:ea:5d:2b:b1:50:fa:24:69:7d:
                    aa:7d:35:8a:e4:ef:52:12:d7:9e:16:63:b7:87:de:
                    b7:64:a2:e6:92:32:48:c9:3c:29:13:96:1a:e2:12:
                    d4:84:98:50:ad:26:aa:31:21:45:18:03:80:6b:0d:
                    2d:11:76:4a:64:84:94:98:49:88:0e:ef:fe:56:40:
                    e1:bc:c3:b7:ea:67:4a:5c:f1:ac:fd:51:c5:dd:8f:
                    7d:6b:fd:b0:f4:81:aa:9f:c6:59:db:60:a1:09:d3:
                    c1:bc:88:f5:99:01:d1:5c:f1:e8:25:fe:84:d7:69:
                    e0:3e:07:9c:7a:8a:a4:24:8d:a3:22:6c:ef:73:c1:
                    60:16:fa:ca:8c:9d:a5:5a:13:01:1c:61:ab:8b:32:
                    34:05:c4:5e:14:f5:df:6e:3b:5c:9a:54:d0:bc:66:
                    04:d4:d5:20:a8:25:a5:f5:b2:c2:b7:1d:59:26:81:
                    1f:5e:df:5b:c7:5a:77:3d:a4:a1:03:89:22:a8:8a:
                    af:46:92:90:8c:7a:15:e5:1c:6c:70:6c:68:30:5c:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:5E:B5:A5:1A:B4:08:B1:A3:B7:F8:17:DF:16:D5:ED:1D:FA:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/bd4b0b8420da1fd896d6937879c1e602c4aa4f35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273021

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:92:16:51:aa:6b:6a:d1:04:e7:50:42:9c:4d:28:c9:a1:
         67:2c:33:ea:05:5f:ae:5e:7e:25:0f:ef:e3:84:f7:cb:47:19:
         36:61:f7:27:75:4e:5e:66:df:4b:8a:5c:aa:0a:80:9e:f9:a5:
         d9:79:12:ca:e6:54:75:11:2c:34:d1:ee:69:68:0f:be:fe:7b:
         76:53:0f:f8:03:e0:06:d7:98:a9:24:83:52:01:b0:79:89:1a:
         33:18:8a:0e:25:d0:a7:70:0a:2c:06:49:9b:db:98:96:c9:71:
         cb:8f:41:c0:ef:bf:ae:f0:e3:65:28:f9:04:44:5d:9b:a5:76:
         a1:2c:db:0b:29:9d:52:b8:d8:0a:1a:e1:50:b8:28:af:5d:4e:
         14:95:00:9f:01:bb:7d:db:a1:13:4c:ba:0d:79:56:f1:8b:24:
         51:42:0f:3d:a0:32:34:e6:b8:27:d2:ad:00:e5:a2:82:1c:88:
         33:22:ee:6b:b9:66:b8:fd:bc:b6:b4:08:41:1b:da:cd:c2:40:
         b2:d0:65:c9:ff:63:ae:8f:03:94:5f:21:38:4b:73:01:5b:a9:
         7a:f0:3f:ca:80:18:28:77:11:60:91:0d:45:60:65:d0:86:ab:
         8a:17:b6:d4:2c:a3:97:74:aa:0a:01:8a:0e:79:6e:22:f6:98:
         53:d3:1b:d6
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPH9qTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcxNzE3NTA0MVoXDTI1MDQxMjE5NTgz
M1owMzExMC8GA1UEAxMoYmQ0YjBiODQyMGRhMWZkODk2ZDY5Mzc4NzljMWU2MDJj
NGFhNGYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANZXYp0zERGW
bV0OoyfhmDRWMbMAz5CAYEgb6zwPmhcR/Y7KEQqqytL1bRFQvKafaDuL6l0rsVD6
JGl9qn01iuTvUhLXnhZjt4fet2Si5pIySMk8KROWGuIS1ISYUK0mqjEhRRgDgGsN
LRF2SmSElJhJiA7v/lZA4bzDt+pnSlzxrP1Rxd2PfWv9sPSBqp/GWdtgoQnTwbyI
9ZkB0Vzx6CX+hNdp4D4HnHqKpCSNoyJs73PBYBb6yoydpVoTARxhq4syNAXEXhT1
3247XJpU0LxmBNTVIKglpfWywrcdWSaBH17fW8dadz2koQOJIqiKr0aSkIx6FeUc
bHBsaDBcTk8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQJ+l61pRq0CLGjt/gX3xbV
7R36hDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82ZDJhM2E4MS0zOTlh
LTQyZTYtOTg5YS0wYTY5OTZjN2IwOGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmQyYTNhODEtMzk5YS00
MmU2LTk4OWEtMGE2OTk2YzdiMDhhL2JkNGIwYjg0MjBkYTFmZDg5NmQ2OTM3ODc5
YzFlNjAyYzRhYTRmMzUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDk5AwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCp9MA0GCSqGSIb3DQEBCwUAA4IBAQAPwpIWUapratEE51BCnE0o
yaFnLDPqBV+uXn4lD+/jhPfLRxk2YfcndU5eZt9LilyqCoCe+aXZeRLK5lR1ESw0
0e5paA++/nt2Uw/4A+AG15ipJINSAbB5iRozGIoOJdCncAosBkmb25iWyXHLj0HA
77+u8ONlKPkERF2bpXahLNsLKZ1SuNgKGuFQuCivXU4UlQCfAbt926ETTLoNeVbx
iyRRQg89oDI05rgn0q0A5aKCHIgzIu5ruWa4/by2tAhBG9rNwkCy0GXJ/2OujwOU
XyE4S3MBW6l68D/KgBgodxFgkQ1FYGXQhquKF7bULKOXdKoKAYoOeW4i9phT0xvW
-----END CERTIFICATE-----