Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cecf3538837b8502ccb033fd3e582e061ff565b4.cer
File:                     cecf3538837b8502ccb033fd3e582e061ff565b4.cer (raw, json)
Hash identifier:          ZpIB5eK4V4xSBf30smidNFoI4sTfbjut7pB0VcrelBg=
Subject key identifier:   04:44:4B:6E:01:6C:E6:40:72:83:A5:A2:A2:F7:01:B5:B4:E8:88:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FECE7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a78af07-8b44-49e9-8a01-b9e6a78246ad/cecf3538837b8502ccb033fd3e582e061ff565b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a78af07-8b44-49e9-8a01-b9e6a78246ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:36:41 +0000
Certificate not after:    Sat 21 Sep 2024 16:32:51 +0000
Subordinate resources:    AS: 262646
                          IP: 168.197.112.0/22
                          IP: 177.87.40.0/22
                          IP: 2804:34c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16699003 (0xfece7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:36:41 2023 GMT
            Not After : Sep 21 16:32:51 2024 GMT
        Subject: CN=cecf3538837b8502ccb033fd3e582e061ff565b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:b6:e4:12:22:d5:74:b3:80:a0:e4:40:b0:
                    3a:67:13:ff:a9:ed:2e:74:71:ae:e5:ad:3d:7f:8f:
                    0e:cc:0e:84:94:f6:95:5a:80:f8:68:6e:1b:ca:9a:
                    5b:25:4c:04:0a:a7:96:9c:b6:f9:da:9d:92:f7:9d:
                    07:29:15:f8:14:05:20:e5:87:7a:7a:e7:47:cd:09:
                    2d:54:6a:9c:b3:f5:9d:fb:38:18:49:a6:0c:51:ab:
                    17:63:31:b1:f1:37:a8:30:0e:47:66:11:f0:95:49:
                    f1:46:80:aa:cd:05:25:8b:88:8d:55:1f:7b:fd:6b:
                    80:8b:7e:f4:a4:28:01:a2:e4:e5:19:9e:82:35:f3:
                    f6:ac:1e:72:7d:09:4a:87:33:60:15:96:7f:bd:e9:
                    b7:fe:a9:70:68:a9:08:b9:7c:22:c5:8a:4b:87:be:
                    5b:c1:40:58:8a:e0:5e:7f:fd:84:47:72:c6:ce:08:
                    80:4f:b0:c7:33:b6:bf:d2:bb:cb:08:74:00:7b:a2:
                    a9:ad:03:56:4e:5a:55:ad:fc:c9:48:ad:86:32:b4:
                    5f:da:1d:e5:6b:72:e6:cb:65:24:a5:6c:7f:fc:21:
                    c2:61:fd:b0:81:2c:81:e3:30:92:03:70:cf:e5:30:
                    c4:39:29:62:3b:22:b3:2a:e2:df:47:13:62:fc:37:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:4B:6E:01:6C:E6:40:72:83:A5:A2:A2:F7:01:B5:B4:E8:88:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a78af07-8b44-49e9-8a01-b9e6a78246ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a78af07-8b44-49e9-8a01-b9e6a78246ad/cecf3538837b8502ccb033fd3e582e061ff565b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.112.0/22
                  177.87.40.0/22
                IPv6:
                  2804:34c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262646

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:f1:02:1b:5e:53:1f:63:9a:3d:53:47:12:f2:3c:62:af:
         6e:67:76:3c:a1:4e:d7:24:eb:b4:b0:cd:cc:dd:56:f1:4d:2d:
         ae:8f:22:10:ed:9e:e5:57:7d:28:55:79:58:69:58:7e:c4:d0:
         43:de:73:a9:df:25:c9:03:85:63:9c:e8:b7:ed:cd:57:91:b4:
         d5:cf:e2:a7:4b:16:be:7b:59:29:7e:67:98:df:a0:82:15:f9:
         16:f2:20:53:46:c9:79:f2:ff:88:17:4d:0e:19:be:8e:b4:3d:
         15:3f:49:cc:ee:34:d1:99:60:24:49:06:e2:b7:eb:75:9d:d3:
         d9:f4:3d:ab:8d:87:c7:28:8f:ff:3d:76:75:68:03:19:d8:75:
         25:b3:dd:ee:21:af:ea:6b:90:53:60:a1:8e:7a:4b:b1:d9:4f:
         ea:13:97:c8:b7:75:46:24:03:c4:58:c7:7d:98:42:7f:2e:e8:
         b4:a5:11:f5:82:da:b4:d6:ef:d9:7e:a2:73:f6:70:cf:e2:c6:
         39:08:0a:2e:69:84:63:78:11:d3:8f:12:e2:7e:02:ce:2d:ba:
         2c:87:63:5e:34:2d:bd:55:1f:c9:db:2c:db:40:2f:4c:0a:11:
         0b:e1:5c:04:f9:80:b5:df:6b:49:8f:18:bf:36:8e:5e:d5:07:
         c1:ef:ca:a8
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP7OezANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwMzY0MVoXDTI0MDkyMTE2MzI1
MVowMzExMC8GA1UEAxMoY2VjZjM1Mzg4MzdiODUwMmNjYjAzM2ZkM2U1ODJlMDYx
ZmY1NjViNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIj0tuQSItV0
s4Cg5ECwOmcT/6ntLnRxruWtPX+PDswOhJT2lVqA+GhuG8qaWyVMBAqnlpy2+dqd
kvedBykV+BQFIOWHenrnR80JLVRqnLP1nfs4GEmmDFGrF2MxsfE3qDAOR2YR8JVJ
8UaAqs0FJYuIjVUfe/1rgIt+9KQoAaLk5RmegjXz9qwecn0JSoczYBWWf73pt/6p
cGipCLl8IsWKS4e+W8FAWIrgXn/9hEdyxs4IgE+wxzO2v9K7ywh0AHuiqa0DVk5a
Va38yUithjK0X9od5Wty5stlJKVsf/whwmH9sIEsgeMwkgNwz+UwxDkpYjsisyri
30cTYvw3XukCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBQEREtuAWzmQHKDpaKi9wG1
tOiIgDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYTc4YWYwNy04YjQ0
LTQ5ZTktOGEwMS1iOWU2YTc4MjQ2YWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2E3OGFmMDctOGI0NC00
OWU5LThhMDEtYjllNmE3ODI0NmFkL2NlY2YzNTM4ODM3Yjg1MDJjY2IwMzNmZDNl
NTgyZTA2MWZmNTY1YjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqjFcAMEArFXKDANBAIAAjAHAwUA
KAQ0xDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAfYwDQYJKoZIhvcNAQELBQAD
ggEBAKbV8QIbXlMfY5o9U0cS8jxir25ndjyhTtck67SwzczdVvFNLa6PIhDtnuVX
fShVeVhpWH7E0EPec6nfJckDhWOc6LftzVeRtNXP4qdLFr57WSl+Z5jfoIIV+Rby
IFNGyXny/4gXTQ4Zvo60PRU/SczuNNGZYCRJBuK363Wd09n0PauNh8coj/89dnVo
AxnYdSWz3e4hr+prkFNgoY56S7HZT+oTl8i3dUYkA8RYx32YQn8u6LSlEfWC2rTW
79l+onP2cM/ixjkICi5phGN4EdOPEuJ+As4tuiyHY140Lb1VH8nbLNtAL0wKEQvh
XAT5gLXfa0mPGL82jl7VB8Hvyqg=
-----END CERTIFICATE-----