Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb825f37648a160212f8d49a084ea3a9799f3a79.cer
File:                     cb825f37648a160212f8d49a084ea3a9799f3a79.cer (raw, json)
Hash identifier:          jhUMUZffnkfz5RE/rBqA1jOh4xOPKXpVfF72P1hTeC8=
Subject key identifier:   D3:C2:99:FE:00:DA:0E:AA:46:E4:70:5D:03:6E:8A:55:FE:E7:EE:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAB429
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/cb825f37648a160212f8d49a084ea3a9799f3a79.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 14:47:42 +0000
Certificate not after:    Mon 06 Jan 2025 17:13:14 +0000
Subordinate resources:    AS: 272957
                          IP: 200.150.240.0/22
                          IP: 2803:50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16430121 (0xfab429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  6 14:47:42 2023 GMT
            Not After : Jan  6 17:13:14 2025 GMT
        Subject: CN=cb825f37648a160212f8d49a084ea3a9799f3a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:53:4e:4c:0e:3f:42:ce:09:4d:8f:5d:f8:
                    85:c4:7c:71:4f:8d:c7:67:3b:4c:e2:ad:c2:64:ef:
                    b7:d4:64:33:61:4e:b9:26:50:9c:63:06:3b:66:f1:
                    bf:6a:6e:01:89:b5:2a:36:ce:cb:ea:84:5c:b5:0d:
                    b0:1e:1c:f5:f5:07:2d:6b:58:0b:56:18:ce:37:b4:
                    25:f7:30:67:79:3c:c6:c1:59:fe:90:0e:0b:ea:fb:
                    91:35:2a:e8:67:17:4d:79:5a:3f:05:dd:52:70:bb:
                    21:56:bb:2a:03:5a:56:30:2c:e2:27:b7:13:05:9f:
                    19:14:4c:63:eb:e2:53:65:59:a4:ef:d8:b7:12:98:
                    7b:82:e7:e0:3d:97:0f:3b:d9:e5:83:ce:75:f8:62:
                    58:5c:86:5f:25:43:83:c0:b4:8a:80:df:67:a4:61:
                    ee:ed:a9:d7:20:01:9e:fe:c7:c5:24:0b:45:94:88:
                    99:5b:0d:32:69:a5:65:1d:8b:a8:50:84:c3:78:da:
                    15:22:18:81:e2:b6:50:0e:7e:db:04:ad:3f:a8:c6:
                    94:2c:37:e6:10:41:88:88:48:11:1d:fa:4e:4e:04:
                    68:77:4f:a7:97:f9:32:91:40:09:26:80:5a:1d:00:
                    c0:97:7d:f3:c0:12:de:4c:cf:05:51:19:13:99:75:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C2:99:FE:00:DA:0E:AA:46:E4:70:5D:03:6E:8A:55:FE:E7:EE:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/cb825f37648a160212f8d49a084ea3a9799f3a79.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.240.0/22
                IPv6:
                  2803:50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272957

    Signature Algorithm: sha256WithRSAEncryption
         0d:7a:37:3e:04:78:0f:0c:5c:07:d4:08:ff:47:94:de:27:92:
         08:64:4d:e7:50:f4:77:48:08:1b:ff:d6:f7:b6:1e:d6:de:2d:
         41:4d:2b:69:24:af:05:26:c4:17:4a:fa:85:09:d9:77:d6:47:
         2a:e1:37:d3:fe:1b:92:71:31:d1:06:40:95:ad:dc:6e:57:6c:
         38:4a:a7:e2:d0:99:40:f2:2a:ec:24:eb:e8:b7:24:58:01:7b:
         b3:34:da:f2:80:a0:9f:44:67:9d:1e:84:b6:8b:7e:7f:3d:d7:
         59:92:1d:0a:2a:36:c8:b7:e6:cc:b6:ec:c1:5e:d6:63:30:75:
         f4:b8:65:91:42:6b:37:b1:fc:39:f0:b9:24:12:2d:83:8b:10:
         3c:0a:41:7f:58:8a:2d:d1:fe:a4:d8:ce:62:26:31:ee:c1:96:
         56:97:ae:01:59:21:f9:7a:56:cb:14:e5:5a:23:2a:99:80:5e:
         b1:ad:3a:a3:ba:28:e5:cf:cd:f3:01:4e:cf:15:d2:ef:4b:72:
         e2:37:84:b9:f2:8a:18:89:8a:8c:e8:50:17:f5:3a:4f:77:65:
         30:b1:e9:6f:d3:e0:63:65:92:5e:df:97:b4:46:77:61:08:24:
         ee:a7:34:18:44:03:e6:69:96:41:50:da:68:33:4b:33:a9:5a:
         e2:f2:6f:b7
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPq0KTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcwNjE0NDc0MloXDTI1MDEwNjE3MTMx
NFowMzExMC8GA1UEAxMoY2I4MjVmMzc2NDhhMTYwMjEyZjhkNDlhMDg0ZWEzYTk3
OTlmM2E3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJJDU05MDj9C
zglNj134hcR8cU+Nx2c7TOKtwmTvt9RkM2FOuSZQnGMGO2bxv2puAYm1KjbOy+qE
XLUNsB4c9fUHLWtYC1YYzje0JfcwZ3k8xsFZ/pAOC+r7kTUq6GcXTXlaPwXdUnC7
IVa7KgNaVjAs4ie3EwWfGRRMY+viU2VZpO/YtxKYe4Ln4D2XDzvZ5YPOdfhiWFyG
XyVDg8C0ioDfZ6Rh7u2p1yABnv7HxSQLRZSImVsNMmmlZR2LqFCEw3jaFSIYgeK2
UA5+2wStP6jGlCw35hBBiIhIER36Tk4EaHdPp5f5MpFACSaAWh0AwJd988AS3kzP
BVEZE5l16S0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTTwpn+ANoOqkbkcF0DbopV
/ufuATAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZGVhNzI0ZS0wODg5
LTQxM2YtYWExMC04ZTI0OGY1Nzk2YmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2RlYTcyNGUtMDg4OS00
MTNmLWFhMTAtOGUyNDhmNTc5NmJiL2NiODI1ZjM3NjQ4YTE2MDIxMmY4ZDQ5YTA4
NGVhM2E5Nzk5ZjNhNzkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsiW8DANBAIAAjAHAwUAKAMAUDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKj0wDQYJKoZIhvcNAQELBQADggEBAA16
Nz4EeA8MXAfUCP9HlN4nkghkTedQ9HdICBv/1ve2HtbeLUFNK2kkrwUmxBdK+oUJ
2XfWRyrhN9P+G5JxMdEGQJWt3G5XbDhKp+LQmUDyKuwk6+i3JFgBe7M02vKAoJ9E
Z50ehLaLfn8911mSHQoqNsi35sy27MFe1mMwdfS4ZZFCazex/DnwuSQSLYOLEDwK
QX9Yii3R/qTYzmImMe7BllaXrgFZIfl6VssU5VojKpmAXrGtOqO6KOXPzfMBTs8V
0u9LcuI3hLnyihiJiozoUBf1Ok93ZTCx6W/T4GNlkl7fl7RGd2EIJO6nNBhEA+Zp
lkFQ2mgzSzOpWuLyb7c=
-----END CERTIFICATE-----