Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.cer
File:                     cb16c0c5aa0a219fb67e0c841c70540f72b09db0.cer (raw, json)
Hash identifier:          rh1mAifdojPCvTM8fpoZVW0a+88dqrC8pjAilzVi6A4=
Subject key identifier:   11:38:CA:6D:A7:8A:A7:F5:FD:FF:13:A6:9A:CA:59:6D:2C:F1:6D:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFE92A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 12:54:57 +0000
Certificate not after:    Tue 17 Sep 2024 20:29:21 +0000
Subordinate resources:    IP: 2801:1c:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15722794 (0xefe92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 28 12:54:57 2023 GMT
            Not After : Sep 17 20:29:21 2024 GMT
        Subject: CN=cb16c0c5aa0a219fb67e0c841c70540f72b09db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:80:db:51:4c:07:19:2b:88:ce:a2:a5:1a:
                    69:9d:c8:07:5d:cf:72:4c:b9:a2:2a:01:18:58:c2:
                    aa:05:17:50:87:2d:2c:1f:58:64:5b:bd:46:5b:94:
                    cc:e6:04:47:b6:2d:10:aa:43:41:e5:02:8a:13:80:
                    6c:6c:70:73:da:15:2c:2f:56:d7:be:c9:1c:75:ce:
                    32:c5:36:85:fc:d2:b1:65:53:91:1d:cf:ee:b9:d2:
                    00:e9:5c:1c:ae:58:6f:ad:ad:2d:69:87:92:b7:4a:
                    1f:29:9a:e0:df:ab:53:c8:e4:da:99:c1:00:c7:50:
                    83:6b:65:fb:b7:bd:03:76:3a:51:53:4a:b4:08:f9:
                    6b:f8:a9:49:57:06:1a:99:96:f0:d8:86:cc:c6:a5:
                    a2:79:87:28:e0:96:c0:8b:e9:7f:79:3e:bd:64:f4:
                    8e:c0:26:cd:89:ed:5f:9b:18:c9:67:cf:d2:29:86:
                    dc:f9:2d:65:9e:dd:b4:08:cf:d3:c3:09:eb:75:07:
                    a6:af:19:3e:1f:71:51:38:d7:01:f7:d3:4a:22:4b:
                    0a:3c:9c:9c:aa:d4:f6:fe:b7:25:b2:34:10:82:b5:
                    71:0b:af:ab:b6:7e:a6:5c:4e:99:37:ea:d7:d4:28:
                    e6:0b:4d:67:00:a1:c3:a0:ab:a9:fb:91:0c:23:a2:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:CA:6D:A7:8A:A7:F5:FD:FF:13:A6:9A:CA:59:6D:2C:F1:6D:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:9e:a5:47:8a:f1:5b:18:43:ca:7f:3e:a7:01:0e:4b:db:
         52:02:e5:80:f7:d1:9a:23:45:11:1d:36:44:b1:33:0a:4b:1a:
         c4:c3:61:b0:57:a6:69:a7:85:d6:91:8e:dd:bc:7c:9e:39:d0:
         70:7f:86:05:81:69:0b:a7:93:12:f7:d5:86:3a:4a:fc:d2:3a:
         6b:b8:db:c1:a2:98:7b:ca:40:b0:75:49:99:63:97:65:43:d4:
         66:1c:e8:66:39:b4:97:be:5d:4f:b0:29:62:10:d7:5d:7b:08:
         6d:d1:14:2a:bf:7b:c8:cb:6d:ac:4e:e6:12:a3:aa:b3:aa:58:
         58:41:7c:03:d1:21:b7:fc:7a:f2:95:89:34:5e:a8:e5:07:45:
         6c:cd:df:8c:97:f4:5d:bb:41:49:a2:ea:31:46:9a:33:7b:24:
         a5:2f:e8:e8:d8:7a:ad:4e:a9:82:a5:8d:fc:4a:95:13:19:71:
         f9:c6:55:b1:16:15:bb:e4:28:24:be:52:98:d1:59:04:a2:41:
         83:82:d9:6e:ba:81:ac:2c:e5:a9:5a:6c:0f:a8:2e:4f:eb:72:
         39:8f:b2:b3:36:3a:2b:22:60:2f:4f:9f:0e:8c:1c:03:3a:7f:
         49:50:b4:71:a1:fd:87:81:cb:ec:3c:5c:40:ec:ad:e2:66:b2:
         f0:38:d2:f2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAO/pKjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyODEyNTQ1N1oXDTI0MDkxNzIwMjky
MVowMzExMC8GA1UEAxMoY2IxNmMwYzVhYTBhMjE5ZmI2N2UwYzg0MWM3MDU0MGY3
MmIwOWRiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbPgNtRTAcZ
K4jOoqUaaZ3IB13Pcky5oioBGFjCqgUXUIctLB9YZFu9RluUzOYER7YtEKpDQeUC
ihOAbGxwc9oVLC9W177JHHXOMsU2hfzSsWVTkR3P7rnSAOlcHK5Yb62tLWmHkrdK
Hyma4N+rU8jk2pnBAMdQg2tl+7e9A3Y6UVNKtAj5a/ipSVcGGpmW8NiGzMalonmH
KOCWwIvpf3k+vWT0jsAmzYntX5sYyWfP0imG3PktZZ7dtAjP08MJ63UHpq8ZPh9x
UTjXAffTSiJLCjycnKrU9v63JbI0EIK1cQuvq7Z+plxOmTfq19Qo5gtNZwChw6Cr
qfuRDCOi5SECAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQROMptp4qn9f3/E6aayllt
LPFtKTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YTM0ZjExYy1iNTYy
LTQ2YjEtOTM4Zi00NDA2MTVmNTdkNTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWEzNGYxMWMtYjU2Mi00
NmIxLTkzOGYtNDQwNjE1ZjU3ZDUwL2NiMTZjMGM1YWEwYTIxOWZiNjdlMGM4NDFj
NzA1NDBmNzJiMDlkYjAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABzYADANBgkqhkiG9w0BAQsF
AAOCAQEAJQuepUeK8VsYQ8p/PqcBDkvbUgLlgPfRmiNFER02RLEzCksaxMNhsFem
aaeF1pGO3bx8njnQcH+GBYFpC6eTEvfVhjpK/NI6a7jbwaKYe8pAsHVJmWOXZUPU
ZhzoZjm0l75dT7ApYhDXXXsIbdEUKr97yMttrE7mEqOqs6pYWEF8A9Eht/x68pWJ
NF6o5QdFbM3fjJf0XbtBSaLqMUaaM3skpS/o6Nh6rU6pgqWN/EqVExlx+cZVsRYV
u+QoJL5SmNFZBKJBg4LZbrqBrCzlqVpsD6guT+tyOY+yszY6KyJgL0+fDowcAzp/
SVC0caH9h4HL7DxcQOyt4may8DjS8g==
-----END CERTIFICATE-----