Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8bbf4a1b50c28474a5ad73c2d83f4e5a5425450.cer
File:                     c8bbf4a1b50c28474a5ad73c2d83f4e5a5425450.cer (raw, json)
Hash identifier:          W9p3ShjC4Vdwcs0AhJyFClN6Wx8NMO4dwm4Azmv30ds=
Subject key identifier:   A8:0C:29:3C:03:C1:5F:FA:9B:51:15:56:47:62:85:C1:A0:DC:4D:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAFCE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7be73ce5-05b7-4b73-9c2e-37920bfa392c/c8bbf4a1b50c28474a5ad73c2d83f4e5a5425450.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7be73ce5-05b7-4b73-9c2e-37920bfa392c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 19:31:47 +0000
Certificate not after:    Wed 21 May 2025 06:00:00 +0000
Subordinate resources:    AS: 273094
                          IP: 2803:a050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16448744 (0xfafce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 27 19:31:47 2023 GMT
            Not After : May 21 06:00:00 2025 GMT
        Subject: CN=c8bbf4a1b50c28474a5ad73c2d83f4e5a5425450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:9f:a4:89:c2:69:5b:80:3c:22:a8:64:a3:
                    a6:72:62:84:09:7b:3e:63:d0:1f:51:3e:98:e6:2a:
                    f6:ba:07:c3:27:1a:ad:ab:25:07:48:ec:32:cb:e0:
                    a9:a4:a7:69:be:55:35:4e:98:03:cd:2c:33:18:82:
                    c7:9e:33:8c:f3:79:79:c6:79:3c:cf:04:81:73:83:
                    28:64:5b:82:dc:e5:8c:03:16:1d:06:77:d8:08:7f:
                    63:a4:08:8e:10:80:01:55:5c:fc:bf:8d:d0:c8:03:
                    a9:11:06:c8:fc:81:b5:d7:1d:5a:46:8d:b8:ce:89:
                    34:d3:e2:9a:e8:29:42:9b:8a:3a:26:2d:51:17:37:
                    71:92:c7:7f:d7:f4:2e:4a:e5:50:51:cf:27:fe:1e:
                    6d:60:0f:d5:20:4f:3f:73:1d:4c:82:16:75:08:7e:
                    b2:0c:ed:33:91:45:57:1f:bd:44:9e:c1:c1:34:da:
                    da:27:09:b0:ce:87:71:cd:04:62:3d:ba:38:b3:28:
                    25:09:32:b2:a7:88:f6:51:67:1d:91:39:d6:fc:5c:
                    5d:ce:44:d5:8c:89:56:5a:e6:c2:61:b2:36:99:f7:
                    d7:31:95:80:db:09:33:bc:6d:9c:a1:6d:41:04:e9:
                    fe:a9:15:9a:ac:b2:5d:16:ec:32:ae:46:bf:ce:84:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:29:3C:03:C1:5F:FA:9B:51:15:56:47:62:85:C1:A0:DC:4D:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7be73ce5-05b7-4b73-9c2e-37920bfa392c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7be73ce5-05b7-4b73-9c2e-37920bfa392c/c8bbf4a1b50c28474a5ad73c2d83f4e5a5425450.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273094

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:73:88:71:67:1b:6d:41:08:41:84:da:ff:67:45:10:a0:
         60:aa:61:26:03:51:98:b7:66:89:93:d6:42:02:fd:60:37:34:
         a3:62:df:43:f3:0a:8d:af:8e:64:ed:4e:83:20:6c:37:06:44:
         c3:85:b0:5e:78:f2:91:70:ac:1e:0d:68:e9:7f:0f:d9:a8:ad:
         19:25:14:64:0c:ef:28:e2:b5:12:65:bf:ec:d9:1e:96:fa:e4:
         b5:3d:b3:28:5f:62:36:e8:7f:3f:8a:db:b7:0a:e5:98:05:b1:
         d9:e4:fa:99:33:21:d5:df:65:58:60:af:7b:28:48:1c:ff:65:
         00:5f:0b:fe:d0:03:df:47:a5:a9:bf:8d:43:3d:76:51:16:3f:
         b4:03:34:07:ca:fe:ec:60:3f:43:12:be:91:e5:cd:8b:1e:bb:
         84:dd:4a:5a:7c:d8:8a:7d:74:ea:d0:01:e0:4e:d9:0d:5a:86:
         5e:a0:af:be:8e:b8:76:c6:e1:b9:52:1d:3d:0d:f8:04:be:28:
         e1:fd:2d:23:39:fe:65:b9:94:65:de:4b:f0:c7:59:89:5c:b8:
         88:03:ec:76:d7:09:67:13:98:45:ec:23:20:06:5c:7e:54:92:
         b2:67:87:26:13:8f:bc:05:fc:0e:7b:67:84:ea:f3:ac:b3:5f:
         e3:fe:6f:29
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPr86DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkyNzE5MzE0N1oXDTI1MDUyMTA2MDAw
MFowMzExMC8GA1UEAxMoYzhiYmY0YTFiNTBjMjg0NzRhNWFkNzNjMmQ4M2Y0ZTVh
NTQyNTQ1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCon6SJwmlb
gDwiqGSjpnJihAl7PmPQH1E+mOYq9roHwycaraslB0jsMsvgqaSnab5VNU6YA80s
MxiCx54zjPN5ecZ5PM8EgXODKGRbgtzljAMWHQZ32Ah/Y6QIjhCAAVVc/L+N0MgD
qREGyPyBtdcdWkaNuM6JNNPimugpQpuKOiYtURc3cZLHf9f0LkrlUFHPJ/4ebWAP
1SBPP3MdTIIWdQh+sgztM5FFVx+9RJ7BwTTa2icJsM6Hcc0EYj26OLMoJQkysqeI
9lFnHZE51vxcXc5E1YyJVlrmwmGyNpn31zGVgNsJM7xtnKFtQQTp/qkVmqyyXRbs
Mq5Gv86EdvkCAwEAAaOCAvswggL3MB0GA1UdDgQWBBSoDCk8A8Ff+ptRFVZHYoXB
oNxNqzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83YmU3M2NlNS0wNWI3
LTRiNzMtOWMyZS0zNzkyMGJmYTM5MmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN2JlNzNjZTUtMDViNy00
YjczLTljMmUtMzc5MjBiZmEzOTJjL2M4YmJmNGExYjUwYzI4NDc0YTVhZDczYzJk
ODNmNGU1YTU0MjU0NTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDoFAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCrGMA0GCSqGSIb3DQEBCwUAA4IBAQCtFXOIcWcbbUEIQYTa/2dF
EKBgqmEmA1GYt2aJk9ZCAv1gNzSjYt9D8wqNr45k7U6DIGw3BkTDhbBeePKRcKwe
DWjpfw/ZqK0ZJRRkDO8o4rUSZb/s2R6W+uS1PbMoX2I26H8/itu3CuWYBbHZ5PqZ
MyHV32VYYK97KEgc/2UAXwv+0APfR6Wpv41DPXZRFj+0AzQHyv7sYD9DEr6R5c2L
HruE3UpafNiKfXTq0AHgTtkNWoZeoK++jrh2xuG5Uh09DfgEvijh/S0jOf5luZRl
3kvwx1mJXLiIA+x21wlnE5hF7CMgBlx+VJKyZ4cmE4+8BfwOe2eE6vOss1/j/m8p
-----END CERTIFICATE-----