Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d509a47fb6051758d7bd1a005b513a23a55b4dec.cer
File:                     d509a47fb6051758d7bd1a005b513a23a55b4dec.cer (raw, json)
Hash identifier:          qoqU5DNw0dWqULpf4GyaMdv+xfuHj+sRxpvEnXtYYLI=
Subject key identifier:   21:F7:70:A7:0D:F7:7B:80:FE:C1:5B:12:06:05:15:2A:86:C4:97:5C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D27B44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 17 Sep 2022 22:31:26 +0000
Certificate not after:    Tue 09 Jul 2024 15:25:22 +0000
Subordinate resources:    AS: 272864
                          IP: 2803:5290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13794116 (0xd27b44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 22:31:26 2022 GMT
            Not After : Jul  9 15:25:22 2024 GMT
        Subject: CN=d509a47fb6051758d7bd1a005b513a23a55b4dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:0d:e1:56:f5:2b:f7:6e:39:c5:66:48:2d:
                    40:cb:b5:c2:b0:ae:c2:e3:34:30:05:1d:8f:d4:80:
                    25:4b:d8:68:10:8b:e0:35:6f:1f:7c:89:f1:c9:67:
                    a2:7d:76:58:96:4c:7d:b4:f0:f3:72:18:fa:4f:d0:
                    5d:57:ba:de:ed:14:92:9b:f0:e8:bb:82:08:7e:56:
                    fa:c5:96:c7:83:37:b4:08:70:f7:2d:d7:7b:6d:ff:
                    fa:50:f0:4e:36:f9:70:9c:14:0c:a9:34:d0:21:30:
                    94:bd:de:cb:82:77:c3:85:e8:d2:e2:9a:aa:97:15:
                    04:8d:83:e5:4d:e5:10:76:43:f0:a1:ff:d1:e1:24:
                    78:34:9d:aa:5e:fb:b7:ca:be:fc:5b:f5:9f:67:ec:
                    87:10:8a:fa:3e:b2:93:b6:73:37:97:2f:cd:50:43:
                    41:71:b4:5d:bb:69:cc:69:3d:58:49:28:b8:9d:f6:
                    3c:8f:69:c0:8b:12:53:ee:1a:98:39:95:ae:2d:df:
                    35:a7:6a:77:00:39:fd:0f:b1:21:78:94:85:c3:25:
                    1c:da:13:40:2d:da:e1:9f:9a:57:c7:c7:37:c2:26:
                    35:87:80:b8:52:b3:42:60:34:e4:99:bb:43:b4:19:
                    69:43:db:a6:52:fc:1c:4e:7a:28:76:0a:05:0a:58:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F7:70:A7:0D:F7:7B:80:FE:C1:5B:12:06:05:15:2A:86:C4:97:5C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272864

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:3b:75:75:a6:83:c2:66:6c:0d:db:bc:82:61:52:24:fd:
         45:42:ca:0f:4b:b2:37:41:a2:7d:39:25:13:a1:74:a9:23:d9:
         27:c3:41:6e:63:50:70:67:2e:ad:37:a1:6d:58:37:c8:02:d3:
         a9:d0:3d:66:c7:bc:8d:49:f1:6c:36:1f:e1:c3:1c:09:9b:29:
         e2:7e:27:8b:4f:4a:bc:cf:8f:80:05:06:7f:3a:57:47:43:43:
         93:ed:7d:db:b7:d9:df:a3:49:76:b2:a7:e8:c3:21:53:ca:10:
         f9:6c:c7:c9:51:7b:e2:97:dd:65:b1:2f:a8:14:21:b0:dc:02:
         1e:9e:1d:fd:94:fe:30:2c:7f:0a:6a:e8:89:da:da:f8:de:9d:
         7b:ef:39:e7:b5:83:13:7c:03:87:15:c1:7e:ef:a6:8e:5d:fa:
         06:d2:0a:d5:4d:f5:32:d4:84:5c:dd:f1:bd:bb:26:36:20:b2:
         19:7f:73:bd:9b:f1:d3:3a:29:ad:a8:66:e9:59:61:b8:1c:81:
         dc:87:4c:6c:fb:f5:7a:4f:c7:b8:b7:94:25:80:a7:b6:99:11:
         9d:89:6a:82:ed:e1:60:65:51:b8:ae:58:40:bc:c5:dd:3c:5d:
         9e:93:73:69:d4:44:46:bd:b4:8a:87:dd:0e:a5:d7:5f:65:2f:
         a3:4f:f1:50
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEANJ7RDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkxNzIyMzEyNloXDTI0MDcwOTE1MjUy
MlowMzExMC8GA1UEAxMoZDUwOWE0N2ZiNjA1MTc1OGQ3YmQxYTAwNWI1MTNhMjNh
NTViNGRlYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ04DeFW9Sv3
bjnFZkgtQMu1wrCuwuM0MAUdj9SAJUvYaBCL4DVvH3yJ8clnon12WJZMfbTw83IY
+k/QXVe63u0Ukpvw6LuCCH5W+sWWx4M3tAhw9y3Xe23/+lDwTjb5cJwUDKk00CEw
lL3ey4J3w4Xo0uKaqpcVBI2D5U3lEHZD8KH/0eEkeDSdql77t8q+/Fv1n2fshxCK
+j6yk7ZzN5cvzVBDQXG0XbtpzGk9WEkouJ32PI9pwIsSU+4amDmVri3fNadqdwA5
/Q+xIXiUhcMlHNoTQC3a4Z+aV8fHN8ImNYeAuFKzQmA05Jm7Q7QZaUPbplL8HE56
KHYKBQpYOBUCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQh93CnDfd7gP7BWxIGBRUq
hsSXXDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNDk2OTE0Ni01YmVl
LTQ4NTYtYmMwNC1mM2IxYmYzMzE5ODUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzQ5NjkxNDYtNWJlZS00
ODU2LWJjMDQtZjNiMWJmMzMxOTg1L2Q1MDlhNDdmYjYwNTE3NThkN2JkMWEwMDVi
NTEzYTIzYTU1YjRkZWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUpAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCngMA0GCSqGSIb3DQEBCwUAA4IBAQB70Dt1daaDwmZsDdu8gmFS
JP1FQsoPS7I3QaJ9OSUToXSpI9knw0FuY1BwZy6tN6FtWDfIAtOp0D1mx7yNSfFs
Nh/hwxwJmynifieLT0q8z4+ABQZ/OldHQ0OT7X3bt9nfo0l2sqfowyFTyhD5bMfJ
UXvil91lsS+oFCGw3AIenh39lP4wLH8KauiJ2tr43p177znntYMTfAOHFcF+76aO
XfoG0grVTfUy1IRc3fG9uyY2ILIZf3O9m/HTOimtqGbpWWG4HIHch0xs+/V6T8e4
t5QlgKe2mRGdiWqC7eFgZVG4rlhAvMXdPF2ek3Np1ERGvbSKh90OpddfZS+jT/FQ
-----END CERTIFICATE-----