Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/caef8887541a0a74e61baa07c2344427455902d8.cer
File:                     caef8887541a0a74e61baa07c2344427455902d8.cer (raw, json)
Hash identifier:          Ab8iBrcVGAjZNPgpFeXEmpNq9LOTSckVJyKk6Trjhsg=
Subject key identifier:   CB:C6:FD:67:7B:3D:79:4C:7D:37:FA:02:44:DF:D4:AD:CE:7A:5B:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4DA86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4425746d-5664-441f-b2f4-fbb348a2b806/caef8887541a0a74e61baa07c2344427455902d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4425746d-5664-441f-b2f4-fbb348a2b806/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 13:34:34 +0000
Certificate not after:    Wed 27 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 2801:130::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14998150 (0xe4da86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 13:34:34 2023 GMT
            Not After : Nov 27 04:00:00 2024 GMT
        Subject: CN=caef8887541a0a74e61baa07c2344427455902d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:d7:06:28:a1:4f:0d:dd:9c:01:0a:ff:1b:
                    2c:c7:2c:39:dc:60:df:86:95:6f:d0:82:6f:f3:81:
                    52:47:0b:ed:1b:01:16:40:1f:54:f0:8c:38:26:5b:
                    c9:2a:6a:58:5a:a1:4a:7a:04:ed:da:30:6f:48:6a:
                    59:3a:27:d9:37:7e:cb:7f:85:43:b9:f5:a7:3c:f0:
                    e7:17:08:4d:77:dc:dc:a3:c0:a3:4d:d1:4b:92:4a:
                    45:d1:cf:31:91:37:db:c2:ce:4e:ed:00:e3:ec:0b:
                    95:2c:49:91:dc:ee:16:13:c1:6f:6a:b9:35:a7:15:
                    93:25:fd:19:17:06:f5:19:2b:b2:2d:38:39:e7:99:
                    ef:58:cc:66:e8:2a:ba:bc:07:ef:14:7f:cd:a0:5f:
                    7b:78:0f:29:60:f2:4c:92:19:92:46:76:fe:23:aa:
                    8c:88:a7:89:ff:2e:7d:1b:d0:c7:9e:40:72:a8:3a:
                    61:c5:fb:95:f1:b8:af:20:25:b2:bc:a9:ba:1d:3f:
                    56:f0:9f:8b:d5:de:c5:d8:eb:9e:6f:fb:4b:e1:1c:
                    9b:ad:6a:50:c0:0f:12:5a:96:cf:c5:f2:43:35:f4:
                    23:4a:35:68:f4:c4:c8:be:fd:75:19:91:ac:55:4a:
                    51:a1:e8:db:37:e4:3f:da:34:fb:a1:0b:40:34:5c:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:FD:67:7B:3D:79:4C:7D:37:FA:02:44:DF:D4:AD:CE:7A:5B:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4425746d-5664-441f-b2f4-fbb348a2b806/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4425746d-5664-441f-b2f4-fbb348a2b806/caef8887541a0a74e61baa07c2344427455902d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:130::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:84:f7:bf:ca:21:25:7e:1f:d1:fb:c0:89:cc:5f:4d:57:1b:
         8b:a8:6f:66:a5:0c:31:f1:9e:39:7c:25:f2:1e:07:40:bd:31:
         50:22:3f:f8:62:00:f0:b2:fa:72:12:39:43:a0:f9:c6:64:48:
         89:b7:1c:c4:a9:66:f0:41:2a:f7:9d:83:7a:c3:ab:7f:dc:30:
         ae:c4:fa:86:c8:2f:3d:4e:dd:91:db:6a:66:f0:2c:8f:2f:1f:
         b5:8a:2f:21:67:3a:c6:22:56:74:5d:88:f6:65:64:47:52:01:
         85:88:f5:87:41:65:c6:e9:1c:7f:7a:06:2e:8a:ed:a4:fe:28:
         4d:df:0e:d4:9a:61:67:36:ad:e6:37:b6:59:fc:b0:3b:4e:f3:
         be:61:ca:2c:1e:c5:a6:f2:13:e5:fb:4a:05:16:86:fd:32:23:
         0c:f5:cc:61:0b:40:3c:58:71:23:af:2a:03:85:d0:1b:bc:5d:
         8d:e9:53:6d:bb:97:e7:97:10:dd:63:59:db:df:ea:3f:1f:4f:
         34:71:db:51:92:fa:1d:19:88:c1:84:cb:1c:29:d1:d2:74:b9:
         b6:a3:82:0c:e1:8d:f9:22:4c:89:62:d1:0b:de:07:ed:e0:97:
         17:7f:e9:f4:21:c3:f5:d4:53:b8:f2:53:66:a2:02:78:ed:4f:
         d7:ff:9a:40
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIEAOTahjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMTEzMzQzNFoXDTI0MTEyNzA0MDAw
MFowMzExMC8GA1UEAxMoY2FlZjg4ODc1NDFhMGE3NGU2MWJhYTA3YzIzNDQ0Mjc0
NTU5MDJkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQ71wYooU8N
3ZwBCv8bLMcsOdxg34aVb9CCb/OBUkcL7RsBFkAfVPCMOCZbySpqWFqhSnoE7dow
b0hqWTon2Td+y3+FQ7n1pzzw5xcITXfc3KPAo03RS5JKRdHPMZE328LOTu0A4+wL
lSxJkdzuFhPBb2q5NacVkyX9GRcG9Rkrsi04OeeZ71jMZugqurwH7xR/zaBfe3gP
KWDyTJIZkkZ2/iOqjIinif8ufRvQx55Acqg6YcX7lfG4ryAlsrypuh0/VvCfi9Xe
xdjrnm/7S+Ecm61qUMAPElqWz8XyQzX0I0o1aPTEyL79dRmRrFVKUaHo2zfkP9o0
+6ELQDRc+u8CAwEAAaOCAuAwggLcMB0GA1UdDgQWBBTLxv1nez15TH03+gJE39St
znpbLzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80NDI1NzQ2ZC01NjY0
LTQ0MWYtYjJmNC1mYmIzNDhhMmI4MDYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDQyNTc0NmQtNTY2NC00
NDFmLWIyZjQtZmJiMzQ4YTJiODA2L2NhZWY4ODg3NTQxYTBhNzRlNjFiYWEwN2My
MzQ0NDI3NDU1OTAyZDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgBATAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCChPe/yiElfh/R+8CJzF9NVxuLqG9mpQwx8Z45fCXyHgdAvTFQIj/4YgDw
svpyEjlDoPnGZEiJtxzEqWbwQSr3nYN6w6t/3DCuxPqGyC89Tt2R22pm8CyPLx+1
ii8hZzrGIlZ0XYj2ZWRHUgGFiPWHQWXG6Rx/egYuiu2k/ihN3w7UmmFnNq3mN7ZZ
/LA7TvO+YcosHsWm8hPl+0oFFob9MiMM9cxhC0A8WHEjryoDhdAbvF2N6VNtu5fn
lxDdY1nb3+o/H080cdtRkvodGYjBhMscKdHSdLm2o4IM4Y35IkyJYtEL3gft4JcX
f+n0IcP11FO48lNmogJ47U/X/5pA
-----END CERTIFICATE-----