Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8f1310a362cd69ce795e3aa969a8da18d9648f6.cer
File:                     c8f1310a362cd69ce795e3aa969a8da18d9648f6.cer (raw, json)
Hash identifier:          I77eh5Ba1QjlKVcx2smY6naJBWeSUllh9Yp0JDe2QWM=
Subject key identifier:   CA:8B:A8:B5:1B:82:14:1F:6C:19:28:BC:72:D6:F2:10:03:C6:55:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F037FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/c8f1310a362cd69ce795e3aa969a8da18d9648f6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 01:02:18 +0000
Certificate not after:    Sat 17 Aug 2024 16:19:59 +0000
Subordinate resources:    AS: 272889
                          IP: 2803:8690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15742972 (0xf037fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 01:02:18 2023 GMT
            Not After : Aug 17 16:19:59 2024 GMT
        Subject: CN=c8f1310a362cd69ce795e3aa969a8da18d9648f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:41:fa:c3:6d:1f:8c:7d:4c:69:aa:4b:46:
                    73:73:57:7a:e1:a3:48:30:bb:79:49:bc:6e:aa:89:
                    fd:02:3a:46:45:eb:68:29:38:7b:d4:e2:4d:0a:d9:
                    64:14:38:7e:a1:98:be:47:56:c4:8b:78:dc:28:c9:
                    37:fd:b4:c9:0b:d2:35:7f:ce:25:c3:94:19:e2:14:
                    a1:11:9d:95:40:a3:84:c0:c3:a9:b0:07:98:39:4d:
                    d8:20:ef:d2:cf:30:fd:c1:12:23:ec:b4:8c:79:bf:
                    23:44:2c:4d:f4:55:6e:e3:27:2d:71:b6:eb:33:e3:
                    71:36:6e:c5:7c:48:5d:33:87:c4:70:89:32:32:23:
                    af:24:f6:62:6d:a9:7a:87:4d:c8:e1:28:39:b2:3b:
                    1d:71:78:d8:6c:6a:f7:fa:79:8b:de:1f:3f:c2:33:
                    28:0a:51:9e:22:f7:d5:b2:3a:ae:f4:19:4a:8f:68:
                    17:b0:47:7a:e9:b0:77:14:65:3c:a3:71:05:12:3b:
                    29:84:48:da:b7:25:59:6c:32:5c:12:69:bc:bc:ce:
                    bb:70:f7:7e:91:01:7f:32:45:43:db:38:d6:65:70:
                    db:0f:48:ec:f2:d8:a9:5f:c0:e4:80:7e:58:76:66:
                    6c:35:5f:cc:10:bd:f4:c0:37:3d:1c:5e:93:e6:92:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8B:A8:B5:1B:82:14:1F:6C:19:28:BC:72:D6:F2:10:03:C6:55:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/c8f1310a362cd69ce795e3aa969a8da18d9648f6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272889

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:3a:d5:f1:cb:75:82:1d:89:9b:d8:49:f5:c0:88:35:f3:
         e3:f4:61:08:3b:a9:5d:80:4e:b1:1a:c4:a5:2c:76:01:30:71:
         68:25:18:d5:82:91:3c:02:2f:b4:59:a3:f1:80:3b:68:3b:db:
         9f:2a:89:08:7a:d5:ed:5e:e9:5c:3e:0f:19:57:e8:cc:a0:e0:
         4f:68:e9:b9:c8:88:0b:29:43:1a:f8:f9:22:78:e8:1b:80:79:
         c6:8e:ff:58:7b:9c:79:04:2a:44:ee:0c:d4:a1:05:a9:a6:2a:
         ee:1e:67:29:f1:96:88:d3:8f:d6:0e:97:3c:53:02:a7:1a:68:
         1b:31:3d:36:4f:95:c1:3e:cf:a6:04:90:4b:d8:ed:c8:5a:53:
         f5:a8:94:35:cd:7f:89:85:0b:dd:21:45:5a:51:ac:ad:2c:03:
         35:b1:9b:40:74:1a:07:2f:37:e6:eb:09:2a:b1:91:7d:ae:9d:
         ee:b9:d9:5e:bc:b4:ce:56:52:b6:4a:bf:eb:ba:b9:49:d1:90:
         27:05:8c:86:c2:f2:cc:9e:e5:ab:73:35:ff:d5:6b:cc:5f:ee:
         ae:ad:11:71:1b:04:87:a4:3f:97:c9:4e:1e:8d:3d:7d:49:64:
         81:07:a9:64:dd:60:74:6d:1b:3b:00:9f:b4:64:8e:f3:b4:62:
         79:52:5c:f9
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPA3/DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcwMTAxMDIxOFoXDTI0MDgxNzE2MTk1
OVowMzExMC8GA1UEAxMoYzhmMTMxMGEzNjJjZDY5Y2U3OTVlM2FhOTY5YThkYTE4
ZDk2NDhmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjYQfrDbR+M
fUxpqktGc3NXeuGjSDC7eUm8bqqJ/QI6RkXraCk4e9TiTQrZZBQ4fqGYvkdWxIt4
3CjJN/20yQvSNX/OJcOUGeIUoRGdlUCjhMDDqbAHmDlN2CDv0s8w/cESI+y0jHm/
I0QsTfRVbuMnLXG26zPjcTZuxXxIXTOHxHCJMjIjryT2Ym2peodNyOEoObI7HXF4
2Gxq9/p5i94fP8IzKApRniL31bI6rvQZSo9oF7BHeumwdxRlPKNxBRI7KYRI2rcl
WWwyXBJpvLzOu3D3fpEBfzJFQ9s41mVw2w9I7PLYqV/A5IB+WHZmbDVfzBC99MA3
PRxek+aSj2MCAwEAAaOCAvswggL3MB0GA1UdDgQWBBTKi6i1G4IUH2wZKLxy1vIQ
A8ZV4TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNDkzM2I3YS0xNDQ1
LTQ3NzQtOTBmYi0zNTY3ZGUzYTUzNjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDQ5MzNiN2EtMTQ0NS00
Nzc0LTkwZmItMzU2N2RlM2E1MzY0L2M4ZjEzMTBhMzYyY2Q2OWNlNzk1ZTNhYTk2
OWE4ZGExOGQ5NjQ4ZjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDhpAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCn5MA0GCSqGSIb3DQEBCwUAA4IBAQAoyjrV8ct1gh2Jm9hJ9cCI
NfPj9GEIO6ldgE6xGsSlLHYBMHFoJRjVgpE8Ai+0WaPxgDtoO9ufKokIetXtXulc
Pg8ZV+jMoOBPaOm5yIgLKUMa+PkieOgbgHnGjv9Ye5x5BCpE7gzUoQWppiruHmcp
8ZaI04/WDpc8UwKnGmgbMT02T5XBPs+mBJBL2O3IWlP1qJQ1zX+JhQvdIUVaUayt
LAM1sZtAdBoHLzfm6wkqsZF9rp3uudlevLTOVlK2Sr/rurlJ0ZAnBYyGwvLMnuWr
czX/1WvMX+6urRFxGwSHpD+XyU4ejT19SWSBB6lk3WB0bRs7AJ+0ZI7ztGJ5Ulz5
-----END CERTIFICATE-----