Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.cer
File:                     bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.cer (raw, json)
Hash identifier:          EFVRezzgrgsv3fqcGlRIAd6n+c6DGuzCpPj+gcsIcU0=
Subject key identifier:   D5:EE:65:9D:2C:EA:04:E5:46:0F:CB:9A:0B:98:45:9C:CC:FC:74:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF7966
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:22:49 +0000
Certificate not after:    Mon 20 Jan 2025 14:40:08 +0000
Subordinate resources:    AS: 52655
                          IP: 138.94.176.0/22
                          IP: 177.66.164.0/22
                          IP: 2804:c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16742758 (0xff7966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:22:49 2023 GMT
            Not After : Jan 20 14:40:08 2025 GMT
        Subject: CN=bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:36:66:ce:77:e1:c3:72:68:a8:33:56:a3:
                    59:2b:a4:96:16:de:80:ba:da:3a:4b:17:fd:62:98:
                    ec:13:a7:40:3f:cc:83:5d:d6:6f:e7:23:10:62:b1:
                    9a:d4:52:e6:7d:0c:dd:18:6f:95:58:83:82:f0:8f:
                    99:32:13:e5:8f:ce:19:5f:ba:ea:a7:f3:bd:42:46:
                    97:ce:1a:3f:06:cc:34:6d:92:17:92:ff:c0:a7:0e:
                    cb:5c:f5:b4:ac:f8:74:15:9e:43:c8:76:b5:d0:43:
                    b7:e2:66:71:23:1c:5e:be:97:46:73:bb:ba:6c:e0:
                    6d:ab:73:37:5c:f8:a6:58:40:23:bb:17:02:9b:05:
                    c0:81:cf:6d:8f:47:7b:d2:c6:27:13:59:0a:f6:be:
                    5a:6b:97:aa:59:36:a1:6c:0e:a7:f8:b0:c4:5c:9e:
                    92:e3:73:20:fb:7e:a0:7e:15:e3:b7:cb:2e:81:e0:
                    9f:7f:62:60:d9:d0:13:84:ed:b8:ca:ae:26:2e:15:
                    7e:b4:38:0a:e1:6c:a3:47:0f:ae:66:b6:d0:9e:38:
                    e5:af:5e:e6:f8:8a:e5:69:10:01:49:e6:56:8e:eb:
                    b7:ac:56:f0:e4:f2:90:2e:16:f4:4e:80:bd:dc:26:
                    1b:1a:9a:6c:b1:cd:09:29:3c:38:ed:95:5e:e0:e7:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:65:9D:2C:EA:04:E5:46:0F:CB:9A:0B:98:45:9C:CC:FC:74:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/22
                  177.66.164.0/22
                IPv6:
                  2804:c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52655

    Signature Algorithm: sha256WithRSAEncryption
         98:27:e4:80:35:ec:69:1e:d8:27:30:bc:3f:4e:a6:ec:c4:ab:
         f2:2f:51:cc:d7:b3:58:f6:63:a9:82:76:36:95:de:f0:b8:db:
         5e:5c:a9:b6:c6:0a:a6:53:c5:03:38:71:0d:50:18:0d:dc:aa:
         3e:14:51:e2:af:80:81:93:cf:1f:9f:41:cf:eb:b6:7f:86:2f:
         5b:99:46:af:08:69:ba:a2:10:4c:a8:c5:cc:d8:18:c6:14:81:
         37:15:ca:07:b2:9c:85:a9:1b:f5:66:69:4d:40:04:b8:97:f9:
         64:70:b9:00:05:d3:0e:fa:a2:4e:3d:71:f8:66:84:65:4e:d1:
         62:e2:ad:2b:72:9d:f0:b4:27:ab:51:d1:70:05:7d:3b:0b:1b:
         3c:1a:f2:f9:80:a4:24:2a:a0:b9:70:2d:92:50:62:67:ce:d5:
         15:e0:6d:e3:32:55:04:c0:23:f1:cc:24:74:44:33:91:f4:4b:
         f3:74:9d:ed:74:c2:09:ee:11:c6:12:d8:65:03:e2:6b:fe:ef:
         75:33:f3:73:53:a8:93:fb:86:e1:c2:2f:2d:c2:8e:53:1c:9c:
         6b:f2:bf:3c:5d:6c:54:22:09:a8:74:a1:f1:50:0f:13:80:f2:
         ac:5d:28:f6:ea:48:5b:7e:99:01:0e:a5:c8:2e:5a:3b:bb:27:
         e4:c5:45:cd
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP95ZjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3MjI0OVoXDTI1MDEyMDE0NDAw
OFowMzExMC8GA1UEAxMoYmYwYTIwYzQ0N2ExMjI0OTk1OWQ1MGMyYjVmYjdlZDhl
N2FhMzJlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJu9NmbOd+HD
cmioM1ajWSuklhbegLraOksX/WKY7BOnQD/Mg13Wb+cjEGKxmtRS5n0M3RhvlViD
gvCPmTIT5Y/OGV+66qfzvUJGl84aPwbMNG2SF5L/wKcOy1z1tKz4dBWeQ8h2tdBD
t+JmcSMcXr6XRnO7umzgbatzN1z4plhAI7sXApsFwIHPbY9He9LGJxNZCva+WmuX
qlk2oWwOp/iwxFyekuNzIPt+oH4V47fLLoHgn39iYNnQE4TtuMquJi4VfrQ4CuFs
o0cPrma20J445a9e5viK5WkQAUnmVo7rt6xW8OTykC4W9E6AvdwmGxqabLHNCSk8
OO2VXuDn2q8CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTV7mWdLOoE5UYPy5oLmEWc
zPx0VjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZDUwMjg0OC02MTY4
LTQ3ZWUtODRhOS01Y2RlOTkxMTgwODgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2Q1MDI4NDgtNjE2OC00
N2VlLTg0YTktNWNkZTk5MTE4MDg4L2JmMGEyMGM0NDdhMTIyNDk5NTlkNTBjMmI1
ZmI3ZWQ4ZTdhYTMyZWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAopesAMEArFCpDANBAIAAjAHAwUA
KAQMADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAza8wDQYJKoZIhvcNAQELBQAD
ggEBAJgn5IA17Gke2CcwvD9OpuzEq/IvUczXs1j2Y6mCdjaV3vC4215cqbbGCqZT
xQM4cQ1QGA3cqj4UUeKvgIGTzx+fQc/rtn+GL1uZRq8IabqiEEyoxczYGMYUgTcV
ygeynIWpG/VmaU1ABLiX+WRwuQAF0w76ok49cfhmhGVO0WLirStynfC0J6tR0XAF
fTsLGzwa8vmApCQqoLlwLZJQYmfO1RXgbeMyVQTAI/HMJHREM5H0S/N0ne10wgnu
EcYS2GUD4mv+73Uz83NTqJP7huHCLy3CjlMcnGvyvzxdbFQiCah0ofFQDxOA8qxd
KPbqSFt+mQEOpcguWju7J+TFRc0=
-----END CERTIFICATE-----