Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer
File:                     c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer (raw, json)
Hash identifier:          K95c0isrJZybdgGDtYLqakVtKX+RCh9g3J8obziwNjE=
Subject key identifier:   4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC38E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Jan 2023 21:08:50 +0000
Certificate not after:    Mon 20 Nov 2023 17:26:15 +0000
Subordinate resources:    AS: 270152
                          IP: 177.124.84.0/22
                          IP: 2806:3e3::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14432483 (0xdc38e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 10 21:08:50 2023 GMT
            Not After : Nov 20 17:26:15 2023 GMT
        Subject: CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:f0:09:85:11:c1:91:6e:e2:d7:e6:55:c4:
                    ee:eb:26:c8:2e:3c:cd:63:98:29:4f:8d:ae:5a:85:
                    84:71:70:e9:8a:bb:84:3c:9c:5d:da:e2:88:4b:29:
                    6f:0f:11:b6:a0:c6:70:cc:45:f3:5d:8b:9c:be:3c:
                    1a:85:08:77:62:fc:d1:06:63:1c:ba:9a:2f:01:b0:
                    ce:10:b4:95:12:ce:c8:34:d5:8e:e1:02:ae:3a:f6:
                    42:7d:ed:d9:e0:96:8e:11:91:e8:76:50:7a:52:e4:
                    b0:79:23:8d:81:64:4e:8d:b4:bd:90:4c:8d:ac:be:
                    5a:27:42:40:95:b4:26:27:68:c6:60:c9:1d:47:4f:
                    da:36:9f:c6:53:8a:52:9c:5a:52:c5:6e:92:93:62:
                    07:8c:59:37:9a:aa:0b:8a:5c:c9:b7:5d:bc:51:29:
                    1e:91:af:48:62:f6:b5:05:e7:ac:d2:9e:cb:5b:f3:
                    55:ec:51:e0:4b:32:1c:b7:3e:ba:d1:4a:aa:6f:2a:
                    f6:ea:83:bf:fd:4a:07:42:b8:87:44:f1:b7:6b:51:
                    d5:91:14:f3:66:84:60:89:34:18:d0:7e:0f:a9:ba:
                    55:5f:4a:b4:e0:ab:97:fe:e7:88:df:5e:4d:1e:2e:
                    a1:0b:af:23:41:f0:3c:ca:55:3e:03:c9:86:93:cb:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22
                IPv6:
                  2806:3e3::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270152

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:dd:b3:85:35:cb:ac:64:89:09:ba:69:a5:63:7d:9e:b4:
         d9:ab:9c:05:e4:bf:36:1e:37:40:8f:5f:e9:57:cc:dd:68:f6:
         95:b0:0a:8d:54:c0:c2:bc:91:56:a0:91:4e:b3:be:36:64:55:
         26:06:56:41:92:22:71:42:ca:86:ab:cf:04:6f:f3:e4:33:ff:
         1d:97:31:b3:26:fa:32:b4:8d:ff:ed:9e:7a:8d:2c:22:b2:ad:
         af:e3:ca:0e:45:d0:1b:0f:e1:9d:af:90:c2:ee:41:89:b9:87:
         19:8c:82:57:50:01:6c:c1:61:ff:1e:34:fe:cf:ec:88:4f:a6:
         c0:dc:84:48:9b:36:92:09:bd:e3:95:f6:dc:63:ed:81:cf:96:
         d9:63:2d:00:8e:f2:fc:6d:50:2a:5e:51:1a:60:75:9b:7a:c6:
         6d:61:e3:19:9d:77:c0:20:20:82:49:c6:38:7b:e4:e7:73:07:
         83:65:62:ae:4a:bf:89:dd:b4:73:59:fa:84:78:dc:ef:ad:c0:
         d1:f3:24:79:3d:b3:f9:54:f2:2c:af:41:6f:ae:3d:f1:88:58:
         55:35:29:a0:fc:c8:3e:88:1d:6b:59:a1:0d:db:2f:e3:6c:1f:
         27:50:f4:98:ea:8b:a1:47:9f:c1:78:8d:5a:69:d2:b1:52:ad:
         3e:cf:4b:44
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANw44zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDExMDIxMDg1MFoXDTIzMTEyMDE3MjYx
NVowMzExMC8GA1UEAxMoYzFlMzhjYmNiMzE4YTZjNTBmNDU3N2IxNDJkNjZhOGNk
MzcwYTVlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJRq8AmFEcGR
buLX5lXE7usmyC48zWOYKU+NrlqFhHFw6Yq7hDycXdriiEspbw8RtqDGcMxF812L
nL48GoUId2L80QZjHLqaLwGwzhC0lRLOyDTVjuECrjr2Qn3t2eCWjhGR6HZQelLk
sHkjjYFkTo20vZBMjay+WidCQJW0JidoxmDJHUdP2jafxlOKUpxaUsVukpNiB4xZ
N5qqC4pcybddvFEpHpGvSGL2tQXnrNKey1vzVexR4EsyHLc+utFKqm8q9uqDv/1K
B0K4h0Txt2tR1ZEU82aEYIk0GNB+D6m6VV9KtOCrl/7niN9eTR4uoQuvI0HwPMpV
PgPJhpPL7hMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRLhcvub4LxV5yufNvpmdEx
iTH7rTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MTc4YTBlMS1hYzEx
LTQ2YzgtYWFmOC0yNGMwN2VmMzk2ZjYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODE3OGEwZTEtYWMxMS00
NmM4LWFhZjgtMjRjMDdlZjM5NmY2L2MxZTM4Y2JjYjMxOGE2YzUwZjQ1NzdiMTQy
ZDY2YThjZDM3MGE1ZTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArF8VDANBAIAAjAHAwUAKAYD4zAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH0gwDQYJKoZIhvcNAQELBQADggEBAEDc
3bOFNcusZIkJummlY32etNmrnAXkvzYeN0CPX+lXzN1o9pWwCo1UwMK8kVagkU6z
vjZkVSYGVkGSInFCyoarzwRv8+Qz/x2XMbMm+jK0jf/tnnqNLCKyra/jyg5F0BsP
4Z2vkMLuQYm5hxmMgldQAWzBYf8eNP7P7IhPpsDchEibNpIJveOV9txj7YHPltlj
LQCO8vxtUCpeURpgdZt6xm1h4xmdd8AgIIJJxjh75OdzB4NlYq5Kv4ndtHNZ+oR4
3O+twNHzJHk9s/lU8iyvQW+uPfGIWFU1KaD8yD6IHWtZoQ3bL+NsHydQ9Jjqi6FH
n8F4jVpp0rFSrT7PS0Q=
-----END CERTIFICATE-----