Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
File:                     cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer (raw, json)
Hash identifier:          1ePQHIDVrIg7MBsPy6vvG1PLsfZMjNSt05XGx1JhXac=
Subject key identifier:   AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB0FBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 17:39:32 +0000
Certificate not after:    Tue 18 Feb 2025 17:58:19 +0000
Subordinate resources:    AS: 273008
                          IP: 2803:b590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15404987 (0xeb0fbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 18 17:39:32 2023 GMT
            Not After : Feb 18 17:58:19 2025 GMT
        Subject: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:be:93:a7:08:50:4b:50:f8:fa:34:72:0d:
                    5f:c9:be:66:a2:61:93:43:5f:6e:63:45:6d:23:fe:
                    c8:72:0f:59:89:f5:68:58:73:bd:e4:d0:27:b5:a8:
                    21:b1:21:e7:64:c3:52:bb:14:31:51:6f:3a:b3:e7:
                    4d:b9:a8:3c:13:02:c3:16:f3:a2:4b:80:5b:ed:ea:
                    78:18:20:88:d1:37:45:c3:9e:3c:be:3f:13:56:2e:
                    67:89:2c:cc:5c:e5:aa:54:bc:9d:7a:79:85:2c:d2:
                    39:14:f4:c5:1a:3e:90:31:2f:90:5c:35:44:6b:a3:
                    da:bc:bd:32:cd:c8:0e:4b:6f:e3:54:01:ef:4f:17:
                    be:5f:82:7d:42:30:c7:06:58:08:82:e2:4e:e2:1e:
                    c9:d1:90:67:ac:9a:84:d4:fb:ad:35:ba:ff:f5:13:
                    61:ae:8e:e2:34:16:86:7c:a3:3e:3f:83:a1:a9:8a:
                    f6:04:c1:7f:5a:71:87:a3:f7:3a:c6:ca:30:95:2c:
                    fb:14:26:c3:a8:41:17:eb:9b:20:42:ce:70:c6:0c:
                    ea:3c:06:f0:2d:ed:61:63:76:ce:5d:c0:c8:08:67:
                    44:cc:18:b3:0c:43:7c:14:04:86:a0:d7:fe:6e:77:
                    8b:64:46:c2:6f:ee:4a:98:de:7f:4d:74:e1:a0:61:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273008

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:93:20:8a:ad:fe:9d:26:98:9e:3c:d7:11:4c:78:02:d8:
         e0:c7:dc:f9:8e:7e:f0:97:7c:1b:b1:c6:19:1e:43:52:76:04:
         e5:27:fd:8c:c9:4b:0b:25:1d:b8:4b:db:67:c1:72:d2:9b:d1:
         2e:ec:c5:c8:57:9f:5c:8f:5e:62:66:ea:7c:14:21:20:31:9f:
         af:0b:fb:87:6d:dc:39:76:84:ca:c1:2e:cb:7f:fd:95:df:c2:
         5e:b3:9b:a1:82:a6:c3:22:cf:74:00:19:7a:7e:3e:ac:d7:fb:
         2d:a0:b6:24:91:29:dc:44:9d:63:2c:41:a5:88:0f:b9:1c:86:
         80:92:a2:22:57:ba:60:9a:57:bb:bb:9b:f2:6b:a1:21:80:b1:
         74:1d:78:6d:de:ca:97:0b:50:ce:d7:6c:15:9c:d4:52:4a:be:
         d1:73:26:90:40:11:fd:89:fc:b0:43:81:7f:dc:79:b5:30:8f:
         f0:37:f4:9c:ea:2e:6f:ce:1d:c2:9e:91:24:bf:7f:bc:88:a6:
         61:59:8f:38:d6:16:98:16:da:11:6b:9e:1c:cd:b0:32:a4:f7:
         58:04:43:97:2a:d7:2f:6d:35:e1:e2:c2:cf:81:22:4b:d5:69:
         7a:84:e0:c0:72:0b:25:ca:e5:59:b3:35:4a:3e:d0:d0:5e:d5:
         bc:ec:25:20
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOsPuzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxODE3MzkzMloXDTI1MDIxODE3NTgx
OVowMzExMC8GA1UEAxMoY2JhZmQ2NGIyNjRhZTNmZWM5NTMzZDJjOGQwNTliMTgw
ZTI2ODVjMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKiJvpOnCFBL
UPj6NHINX8m+ZqJhk0NfbmNFbSP+yHIPWYn1aFhzveTQJ7WoIbEh52TDUrsUMVFv
OrPnTbmoPBMCwxbzokuAW+3qeBggiNE3RcOePL4/E1YuZ4kszFzlqlS8nXp5hSzS
ORT0xRo+kDEvkFw1RGuj2ry9Ms3IDktv41QB708Xvl+CfUIwxwZYCILiTuIeydGQ
Z6yahNT7rTW6//UTYa6O4jQWhnyjPj+DoamK9gTBf1pxh6P3OsbKMJUs+xQmw6hB
F+ubIELOcMYM6jwG8C3tYWN2zl3AyAhnRMwYswxDfBQEhqDX/m53i2RGwm/uSpje
f0104aBh9xkCAwEAAaOCAvswggL3MB0GA1UdDgQWBBStw9NiuhBHQquUvjky8Z2j
uHUpZDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMmQ2MDVmYi1jM2E1
LTQ2YjktYjEwMC1iMDdkOTE3OTEyZWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTJkNjA1ZmItYzNhNS00
NmI5LWIxMDAtYjA3ZDkxNzkxMmVmL2NiYWZkNjRiMjY0YWUzZmVjOTUzM2QyYzhk
MDU5YjE4MGUyNjg1YzAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtZAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCpwMA0GCSqGSIb3DQEBCwUAA4IBAQBMoJMgiq3+nSaYnjzXEUx4
Atjgx9z5jn7wl3wbscYZHkNSdgTlJ/2MyUsLJR24S9tnwXLSm9Eu7MXIV59cj15i
Zup8FCEgMZ+vC/uHbdw5doTKwS7Lf/2V38Jes5uhgqbDIs90ABl6fj6s1/stoLYk
kSncRJ1jLEGliA+5HIaAkqIiV7pgmle7u5vya6EhgLF0HXht3sqXC1DO12wVnNRS
Sr7RcyaQQBH9ifywQ4F/3Hm1MI/wN/Sc6i5vzh3CnpEkv3+8iKZhWY841haYFtoR
a54czbAypPdYBEOXKtcvbTXh4sLPgSJL1Wl6hODAcgslyuVZszVKPtDQXtW87CUg
-----END CERTIFICATE-----