Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c24e3b3df367fba894ab93d7e7e1e3ef585e4a12.cer
File:                     c24e3b3df367fba894ab93d7e7e1e3ef585e4a12.cer (raw, json)
Hash identifier:          Y1QOBicehJWMMH2WGd8szDCKejwuyQpspkNadfcTkvA=
Subject key identifier:   D0:C1:C6:26:AA:B2:E6:DD:C6:1C:0C:44:F6:6C:9E:EC:A9:08:36:DE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7A99E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/c24e3b3df367fba894ab93d7e7e1e3ef585e4a12.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16230814 (0xf7a99e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=c24e3b3df367fba894ab93d7e7e1e3ef585e4a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:19:0b:87:03:f5:78:70:95:5b:2e:f1:ee:
                    bd:48:f0:cd:2f:17:e2:ac:ac:ba:a0:3e:36:70:e0:
                    ea:f2:e5:5d:c7:1b:40:ce:48:c1:b9:0f:ed:ba:0a:
                    28:f2:9f:f8:ad:4f:b2:ff:db:e2:64:ce:fb:e4:58:
                    da:70:99:98:be:6b:a0:d8:df:c7:3a:f2:9e:82:cc:
                    cc:9e:40:43:b7:bc:a8:63:f5:85:35:0d:68:8e:55:
                    6f:94:d9:68:8a:91:db:c6:9d:86:1f:ba:08:3e:0e:
                    d9:1d:13:44:8d:a8:f9:f2:63:30:ac:b8:3a:61:84:
                    87:41:64:ab:75:91:27:f3:3c:91:72:b2:1a:fc:5b:
                    47:58:54:62:2f:58:74:b1:56:c0:77:7f:75:3e:a2:
                    de:c6:f1:c8:48:53:e9:a6:59:fb:8f:99:30:27:fb:
                    d0:dd:59:b5:7a:3d:34:6e:a3:4b:5c:c6:8e:47:39:
                    bf:2e:cc:87:3b:cb:c5:5b:2d:f7:8a:e9:cd:85:87:
                    28:38:fa:72:ac:7d:f5:8e:aa:51:da:f3:ed:60:2b:
                    92:be:42:53:dc:dc:8e:ab:dd:8d:78:86:ad:86:be:
                    9e:27:ab:77:31:59:88:09:9e:d2:00:1a:1f:03:3b:
                    ee:6f:ee:06:8a:71:7a:a5:1c:32:6a:d4:9b:69:80:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:C6:26:AA:B2:E6:DD:C6:1C:0C:44:F6:6C:9E:EC:A9:08:36:DE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/c24e3b3df367fba894ab93d7e7e1e3ef585e4a12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         ae:46:cf:2b:9b:75:a3:6a:a4:1d:25:cf:69:92:b5:75:2a:97:
         85:98:1a:68:43:81:2c:8b:44:8d:86:b0:1a:a3:6d:c5:f1:54:
         2f:ec:0d:26:1b:71:2f:00:30:02:bb:d7:b9:ce:40:56:40:10:
         5a:84:58:b2:41:6d:06:9f:77:4e:51:1f:1f:a5:1c:fb:9e:20:
         d9:1e:1e:1e:40:ee:f6:7b:c1:14:c9:a9:7f:a9:0a:04:d3:89:
         4f:a3:63:06:7e:5b:6a:e2:42:26:e1:b7:1d:5e:b5:4c:b3:a7:
         cf:8a:ec:36:c9:9e:d2:db:a4:54:35:f2:35:d3:b4:dc:24:1e:
         0a:4d:42:fd:9d:81:e8:82:c9:36:92:9e:c3:6e:1e:cb:76:6f:
         36:6c:b2:0a:d8:d1:eb:29:f5:b6:ff:cb:bd:ed:39:07:01:da:
         0a:52:49:ba:28:08:cf:9f:62:67:4c:37:a4:44:65:ea:e9:fd:
         dd:aa:f1:a1:1d:32:a2:be:2d:c6:74:5c:c6:c0:1b:4d:e2:01:
         39:e8:26:9a:29:a3:b7:09:5d:56:f9:cf:9e:83:4d:e8:df:94:
         f8:20:c1:02:6c:eb:53:7e:c5:07:31:d1:8d:68:e7:ed:7f:81:
         a2:54:39:79:2a:b5:97:32:a8:7d:6d:22:ab:e1:77:e9:9c:37:
         a9:6a:82:7d
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAPepnjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcyODE4MTA0OFoXDTI1MDUyNzE1MTYz
NVowMzExMC8GA1UEAxMoYzI0ZTNiM2RmMzY3ZmJhODk0YWI5M2Q3ZTdlMWUzZWY1
ODVlNGExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFkGQuHA/V4
cJVbLvHuvUjwzS8X4qysuqA+NnDg6vLlXccbQM5IwbkP7boKKPKf+K1Psv/b4mTO
++RY2nCZmL5roNjfxzrynoLMzJ5AQ7e8qGP1hTUNaI5Vb5TZaIqR28adhh+6CD4O
2R0TRI2o+fJjMKy4OmGEh0Fkq3WRJ/M8kXKyGvxbR1hUYi9YdLFWwHd/dT6i3sbx
yEhT6aZZ+4+ZMCf70N1ZtXo9NG6jS1zGjkc5vy7MhzvLxVst94rpzYWHKDj6cqx9
9Y6qUdrz7WArkr5CU9zcjqvdjXiGrYa+nierdzFZiAme0gAaHwM77m/uBopxeqUc
MmrUm2mAk8MCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBTQwcYmqrLm3cYcDET2bJ7s
qQg23jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYzc4YTY4Yi0yNjgy
LTQzMDgtYjc2ZS0wYTVjMzU2ZDAwMjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGM3OGE2OGItMjY4Mi00
MzA4LWI3NmUtMGE1YzM1NmQwMDI1L2MyNGUzYjNkZjM2N2ZiYTg5NGFiOTNkN2U3
ZTFlM2VmNTg1ZTRhMTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAWUAADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEKpcwDQYJKoZIhvcNAQELBQADggEBAK5GzyubdaNqpB0lz2mS
tXUql4WYGmhDgSyLRI2GsBqjbcXxVC/sDSYbcS8AMAK717nOQFZAEFqEWLJBbQaf
d05RHx+lHPueINkeHh5A7vZ7wRTJqX+pCgTTiU+jYwZ+W2riQibhtx1etUyzp8+K
7DbJntLbpFQ18jXTtNwkHgpNQv2dgeiCyTaSnsNuHst2bzZssgrY0esp9bb/y73t
OQcB2gpSSbooCM+fYmdMN6REZerp/d2q8aEdMqK+LcZ0XMbAG03iATnoJpopo7cJ
XVb5z56DTejflPggwQJs61N+xQcx0Y1o5+1/gaJUOXkqtZcyqH1tIqvhd+mcN6lq
gn0=
-----END CERTIFICATE-----