Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7f4129a035501727631271e9c6cdf7aaf859f14.cer
File:                     c7f4129a035501727631271e9c6cdf7aaf859f14.cer (raw, json)
Hash identifier:          3CrJ0pV+pXRCc4TJ1LVqorXtdusHAlxp8BiLdQFrtVA=
Subject key identifier:   37:CD:B8:C8:C9:A1:D1:57:B6:0F:A6:B7:A9:70:93:FA:52:88:05:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01018889
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/96cd0173-e8fa-46f3-a712-48ba1c05fc90/c7f4129a035501727631271e9c6cdf7aaf859f14.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/96cd0173-e8fa-46f3-a712-48ba1c05fc90/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 04:38:34 +0000
Certificate not after:    Sat 30 Aug 2025 22:11:53 +0000
Subordinate resources:    AS: 273117
                          IP: 2803:5850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16877705 (0x1018889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 04:38:34 2023 GMT
            Not After : Aug 30 22:11:53 2025 GMT
        Subject: CN=c7f4129a035501727631271e9c6cdf7aaf859f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:42:60:a7:d2:ba:f5:57:a1:cc:d8:ef:1f:
                    f1:4a:fb:e8:87:55:30:10:75:c7:ee:95:83:c3:8c:
                    97:67:30:d1:05:f3:90:e7:a4:ad:fc:eb:01:e2:a0:
                    3f:07:b0:84:8c:83:19:cb:1b:00:06:2b:dc:7f:e9:
                    d0:b6:52:79:84:aa:7b:0c:a1:57:78:e1:39:24:4e:
                    93:bb:16:2a:9e:90:ee:5c:04:dd:ec:16:0f:15:17:
                    d6:87:b4:0e:50:e4:44:39:fe:b7:be:26:80:0f:34:
                    82:7d:6b:44:97:2f:7e:d6:0f:72:d9:a1:fb:2c:f6:
                    14:ea:a6:0c:0a:ba:30:11:a9:04:aa:5a:c2:6f:7f:
                    5a:36:f5:db:91:7b:9f:6d:ad:7f:be:36:95:77:ce:
                    f0:5f:d7:e8:6d:75:94:12:61:b9:04:d7:74:d7:0e:
                    ff:4d:d2:db:cd:d6:fc:d2:40:da:4b:39:2f:20:97:
                    6a:2f:59:ea:0d:cc:39:d1:4f:dd:d8:3e:78:50:04:
                    c1:b2:c4:d4:38:b6:ec:01:55:8d:fe:e7:b8:71:7b:
                    3d:26:f2:b2:6e:8d:d0:8c:f1:b2:4d:50:28:aa:2a:
                    f6:1a:43:09:e9:f9:dc:fa:8a:58:a2:e5:d7:dd:60:
                    6d:71:ee:78:11:d8:f8:58:cc:36:62:1b:76:4f:26:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:B8:C8:C9:A1:D1:57:B6:0F:A6:B7:A9:70:93:FA:52:88:05:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/96cd0173-e8fa-46f3-a712-48ba1c05fc90/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/96cd0173-e8fa-46f3-a712-48ba1c05fc90/c7f4129a035501727631271e9c6cdf7aaf859f14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273117

    Signature Algorithm: sha256WithRSAEncryption
         58:71:f6:53:1a:b8:b3:58:5f:53:f0:0a:3d:af:9b:6c:7d:cb:
         65:4f:83:2c:6a:28:b4:af:4e:f7:18:7b:63:cd:ae:e7:71:1b:
         29:ba:3b:5e:cf:dd:a9:2e:08:18:46:fe:5f:63:42:43:ec:46:
         4a:bd:1a:de:1e:e0:8b:f6:5d:62:e8:b4:da:de:5b:ac:47:04:
         fc:2d:42:b7:d4:35:b9:51:ee:d5:e9:9b:3d:73:35:4f:c0:43:
         b0:66:97:17:ad:d8:9b:50:12:ba:e3:41:f8:8e:7b:42:d0:8a:
         9e:13:32:4a:46:e6:23:04:f7:03:2b:39:ef:80:06:5c:fd:88:
         db:0b:57:3b:5d:33:18:06:df:e3:31:08:8f:00:4d:ec:ed:e2:
         42:5d:bd:83:40:34:65:63:29:3d:fe:d0:4d:6b:53:6d:4d:31:
         7b:db:d3:be:5f:6e:5c:5c:a2:b2:f8:6c:e1:80:ec:2d:36:c4:
         8f:40:d3:be:47:8d:0f:2a:21:f6:6e:d5:7b:31:c3:29:6f:94:
         fe:6c:2f:72:20:a0:03:5d:73:35:5b:94:4e:f8:20:eb:0a:84:
         56:9e:ba:5d:a2:dd:3c:db:c5:e3:3c:2a:b5:e4:7a:ee:e4:38:
         05:ed:e3:5a:9d:12:4f:7c:13:16:30:c9:e2:92:41:4d:2c:dd:
         5f:65:8e:14
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQGIiTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTExNzA0MzgzNFoXDTI1MDgzMDIyMTE1
M1owMzExMC8GA1UEAxMoYzdmNDEyOWEwMzU1MDE3Mjc2MzEyNzFlOWM2Y2RmN2Fh
Zjg1OWYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIIoQmCn0rr1
V6HM2O8f8Ur76IdVMBB1x+6Vg8OMl2cw0QXzkOekrfzrAeKgPwewhIyDGcsbAAYr
3H/p0LZSeYSqewyhV3jhOSROk7sWKp6Q7lwE3ewWDxUX1oe0DlDkRDn+t74mgA80
gn1rRJcvftYPctmh+yz2FOqmDAq6MBGpBKpawm9/Wjb125F7n22tf742lXfO8F/X
6G11lBJhuQTXdNcO/03S283W/NJA2ks5LyCXai9Z6g3MOdFP3dg+eFAEwbLE1Di2
7AFVjf7nuHF7PSbysm6N0Izxsk1QKKoq9hpDCen53PqKWKLl191gbXHueBHY+FjM
NmIbdk8mp/UCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQ3zbjIyaHRV7YPprepcJP6
UogFVDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NmNkMDE3My1lOGZh
LTQ2ZjMtYTcxMi00OGJhMWMwNWZjOTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTZjZDAxNzMtZThmYS00
NmYzLWE3MTItNDhiYTFjMDVmYzkwL2M3ZjQxMjlhMDM1NTAxNzI3NjMxMjcxZTlj
NmNkZjdhYWY4NTlmMTQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDWFAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCrdMA0GCSqGSIb3DQEBCwUAA4IBAQBYcfZTGrizWF9T8Ao9r5ts
fctlT4Msaii0r073GHtjza7ncRspujtez92pLggYRv5fY0JD7EZKvRreHuCL9l1i
6LTa3lusRwT8LUK31DW5Ue7V6Zs9czVPwEOwZpcXrdibUBK640H4jntC0IqeEzJK
RuYjBPcDKznvgAZc/YjbC1c7XTMYBt/jMQiPAE3s7eJCXb2DQDRlYyk9/tBNa1Nt
TTF729O+X25cXKKy+GzhgOwtNsSPQNO+R40PKiH2btV7McMpb5T+bC9yIKADXXM1
W5RO+CDrCoRWnrpdot0828XjPCq15Hru5DgF7eNanRJPfBMWMMnikkFNLN1fZY4U
-----END CERTIFICATE-----