Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cccdb90fabc7bb538acde21a0451f8a9b208f636.cer
File:                     cccdb90fabc7bb538acde21a0451f8a9b208f636.cer (raw, json)
Hash identifier:          x2v5dfdqRp2xnz8a/xPB8k6y/FeXvX6R1s+Vwsc3JVs=
Subject key identifier:   1B:EA:76:6F:5C:1A:55:95:13:BD:F8:3D:48:B5:09:3C:A5:E9:61:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D0212
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d616ebf-017a-478a-8a35-0938518399c0/cccdb90fabc7bb538acde21a0451f8a9b208f636.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d616ebf-017a-478a-8a35-0938518399c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 18:23:11 +0000
Certificate not after:    Sat 01 Nov 2025 14:00:00 +0000
Subordinate resources:    IP: 207.248.118.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17629714 (0x10d0212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 18:23:11 2024 GMT
            Not After : Nov  1 14:00:00 2025 GMT
        Subject: CN=cccdb90fabc7bb538acde21a0451f8a9b208f636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:f4:05:f4:be:7a:f0:0a:b3:39:50:28:9e:
                    bc:a8:a1:b9:e5:da:cb:75:9a:ec:c7:6f:5c:45:92:
                    0a:40:25:7e:6b:48:58:27:0d:33:df:0b:af:a4:a0:
                    25:75:bb:9f:f5:37:67:4b:14:7f:6c:90:86:73:6a:
                    3b:21:e3:9b:18:94:ec:37:28:70:bd:10:af:bd:cc:
                    5d:b1:06:44:2a:00:4f:98:75:e3:d8:39:6f:8b:e0:
                    bb:2e:43:b3:55:71:84:8a:df:4c:a2:4b:83:62:3d:
                    fd:be:7b:87:2f:21:a2:ac:d0:e1:4e:7c:e8:0c:93:
                    74:d0:7d:b0:4e:9a:ad:16:3e:28:bd:e8:e0:82:67:
                    af:07:86:c1:0f:15:cf:68:32:69:29:48:81:11:fd:
                    1f:63:cc:29:13:4f:45:28:72:9e:42:03:30:ce:4c:
                    5f:ec:3b:da:23:9e:4f:f2:ff:54:bf:d4:b7:0f:7b:
                    f8:84:79:56:f2:b7:bc:e3:0d:2f:c9:cb:f9:c5:f0:
                    bb:e9:de:85:77:63:35:d9:70:92:db:d8:b0:ec:1d:
                    b1:64:9d:cf:cf:50:b8:80:a2:a9:a5:ce:09:58:63:
                    33:ab:40:03:1c:59:d5:9a:16:a7:91:fa:35:d0:8b:
                    52:52:b5:aa:8f:de:97:bd:a2:0a:8f:cf:07:4f:1c:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EA:76:6F:5C:1A:55:95:13:BD:F8:3D:48:B5:09:3C:A5:E9:61:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d616ebf-017a-478a-8a35-0938518399c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d616ebf-017a-478a-8a35-0938518399c0/cccdb90fabc7bb538acde21a0451f8a9b208f636.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:c7:30:70:1a:7f:e7:8a:c5:0d:0a:a3:67:12:4d:0f:45:
         03:84:d4:31:14:40:89:a1:03:4f:f1:52:f9:b1:29:89:6b:6d:
         3b:b5:27:8e:a3:df:ac:92:f1:38:2d:bf:99:c0:bd:1f:e2:c3:
         a5:31:b0:3c:84:7d:b2:6e:4f:dd:7f:fb:55:3e:89:f8:69:93:
         5a:01:52:44:ff:20:93:c9:29:d1:48:e2:b1:f4:12:43:5d:e8:
         66:cc:2f:2a:81:f5:e5:aa:27:bb:54:94:32:a1:b3:42:65:8f:
         44:f4:7b:f1:a0:a7:48:ef:42:b0:2b:3d:c0:f6:20:6b:31:03:
         70:f2:a2:e5:d1:f9:d7:69:9d:4f:46:1f:13:96:28:49:93:cb:
         24:9e:0a:03:28:61:a9:bc:e4:eb:cf:d4:16:59:17:93:de:a8:
         6c:1f:d8:ce:4d:8f:87:77:bf:22:3a:0d:99:7b:43:ed:77:ab:
         5c:ed:79:67:27:8c:f4:43:85:f2:7a:85:19:16:49:df:f6:5a:
         d1:63:c9:76:8d:87:6f:88:29:c5:37:21:72:e2:9e:10:c8:72:
         5c:7e:a1:1f:86:d7:d2:c7:1b:aa:f9:b7:9b:f1:6e:b1:59:ec:
         42:b7:31:0e:f8:fe:c9:59:41:19:61:b1:7d:dd:9b:0c:81:c0:
         91:7e:49:41
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAQ0CEjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDMwNjE4MjMxMVoXDTI1MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoY2NjZGI5MGZhYmM3YmI1MzhhY2RlMjFhMDQ1MWY4YTli
MjA4ZjYzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALB49AX0vnrw
CrM5UCievKihueXay3Wa7MdvXEWSCkAlfmtIWCcNM98Lr6SgJXW7n/U3Z0sUf2yQ
hnNqOyHjmxiU7DcocL0Qr73MXbEGRCoAT5h149g5b4vguy5Ds1VxhIrfTKJLg2I9
/b57hy8hoqzQ4U586AyTdNB9sE6arRY+KL3o4IJnrweGwQ8Vz2gyaSlIgRH9H2PM
KRNPRShynkIDMM5MX+w72iOeT/L/VL/Utw97+IR5VvK3vOMNL8nL+cXwu+nehXdj
NdlwktvYsOwdsWSdz89QuICiqaXOCVhjM6tAAxxZ1ZoWp5H6NdCLUlK1qo/el72i
Co/PB08ckekCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBQb6nZvXBpVlRO9+D1ItQk8
pelhxTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZDYxNmViZi0wMTdh
LTQ3OGEtOGEzNS0wOTM4NTE4Mzk5YzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWQ2MTZlYmYtMDE3YS00
NzhhLThhMzUtMDkzODUxODM5OWMwL2NjY2RiOTBmYWJjN2JiNTM4YWNkZTIxYTA0
NTFmOGE5YjIwOGY2MzYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAc/4djANBgkqhkiG9w0BAQsFAAOC
AQEAij/HMHAaf+eKxQ0Ko2cSTQ9FA4TUMRRAiaEDT/FS+bEpiWttO7UnjqPfrJLx
OC2/mcC9H+LDpTGwPIR9sm5P3X/7VT6J+GmTWgFSRP8gk8kp0UjisfQSQ13oZswv
KoH15aonu1SUMqGzQmWPRPR78aCnSO9CsCs9wPYgazEDcPKi5dH512mdT0YfE5Yo
SZPLJJ4KAyhhqbzk68/UFlkXk96obB/Yzk2Ph3e/IjoNmXtD7XerXO15ZyeM9EOF
8nqFGRZJ3/Za0WPJdo2Hb4gpxTchcuKeEMhyXH6hH4bX0scbqvm3m/FusVnsQrcx
Dvj+yVlBGWGxfd2bDIHAkX5JQQ==
-----END CERTIFICATE-----