Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6f054fd00cd119111b437b7b6194a3740f4324c.cer
File:                     d6f054fd00cd119111b437b7b6194a3740f4324c.cer (raw, json)
Hash identifier:          N9yxvfXkijRNRFM7m9k9EkpSe1x3aTf+QsoNVt+unt0=
Subject key identifier:   89:9F:B5:6F:53:4D:C5:80:8D:09:7B:A7:68:28:2C:B1:95:A8:30:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107BE3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/301ba0c2-ac2b-416c-8b24-038a2472d606/d6f054fd00cd119111b437b7b6194a3740f4324c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/301ba0c2-ac2b-416c-8b24-038a2472d606/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 18:08:07 +0000
Certificate not after:    Mon 16 Jun 2025 15:29:41 +0000
Subordinate resources:    AS: 273059
                          IP: 2801:12:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17284666 (0x107be3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 22 18:08:07 2024 GMT
            Not After : Jun 16 15:29:41 2025 GMT
        Subject: CN=d6f054fd00cd119111b437b7b6194a3740f4324c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:10:5d:18:7d:32:cb:25:04:19:6e:2c:44:
                    15:e4:44:eb:b0:f8:81:c3:c1:46:1f:04:aa:41:c4:
                    5d:d4:41:75:df:a9:17:4e:48:35:74:f1:72:d4:b4:
                    12:e3:49:72:a5:99:b4:7a:d6:57:2f:f4:b9:ba:7e:
                    42:e3:12:60:bb:63:85:c9:31:46:69:cc:9d:69:d9:
                    a4:71:d5:70:2f:df:f7:13:ea:52:b7:9d:3a:15:47:
                    e4:b6:53:01:6e:84:a8:39:77:71:39:5e:0e:86:87:
                    9d:02:bd:cb:ff:73:90:35:3f:44:c8:9a:c7:e5:9c:
                    1d:fc:c2:f4:ef:35:9f:a6:65:46:34:bb:e1:51:9b:
                    84:00:01:08:60:65:c4:f8:54:5d:b4:d6:84:2f:fa:
                    65:14:70:ed:b5:a2:e4:b5:af:62:9c:4e:6f:37:bf:
                    3a:4d:eb:98:fb:a9:3d:21:b7:6f:86:4a:fb:28:31:
                    46:ca:bf:13:eb:e5:85:82:e3:63:4d:b4:8c:ac:48:
                    b8:73:61:c1:3d:dd:92:33:3b:69:75:fb:1e:1f:aa:
                    d5:4d:89:a9:37:50:97:45:00:23:2e:98:c4:00:e5:
                    6e:42:1a:2f:84:68:eb:ef:52:e6:f2:9a:b8:ce:d6:
                    7a:56:56:ca:64:63:ed:a5:e4:55:a7:c1:26:44:85:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9F:B5:6F:53:4D:C5:80:8D:09:7B:A7:68:28:2C:B1:95:A8:30:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/301ba0c2-ac2b-416c-8b24-038a2472d606/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/301ba0c2-ac2b-416c-8b24-038a2472d606/d6f054fd00cd119111b437b7b6194a3740f4324c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:b800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273059

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:a3:82:e5:e0:ff:9d:85:6c:39:e8:0e:c2:03:80:86:d9:
         29:65:a9:17:1c:06:b0:e5:a6:97:61:b1:b3:b2:4f:00:48:5a:
         6b:a8:4c:09:5e:7b:33:a0:6e:f0:d7:86:21:1e:7e:c4:06:bd:
         07:32:08:99:57:5e:e1:94:9f:9f:a9:86:55:25:e4:04:fe:7a:
         75:d9:3a:2f:3c:fd:a3:bf:f6:89:6f:15:cb:4b:24:02:20:10:
         80:c3:3c:06:33:db:41:71:43:eb:9e:13:58:57:e2:2c:62:3f:
         4a:d7:da:a8:b5:94:f8:fa:4f:80:4f:5d:a8:f7:f6:ae:d1:db:
         8e:19:22:f1:79:01:c9:d8:cc:1f:a6:9a:38:4b:48:cc:39:db:
         29:92:c7:c5:a0:44:73:1a:ec:52:99:37:fc:be:ec:59:08:d0:
         cb:c4:2b:a1:bc:f5:0d:8b:9c:15:12:5b:49:1d:73:74:26:8e:
         00:91:33:f7:09:b0:56:2f:b8:01:2c:95:3c:be:2b:14:50:83:
         74:9b:2b:f9:04:9d:f9:2f:07:d4:90:cf:68:d5:94:d8:e1:00:
         30:a1:0a:75:3e:fa:aa:57:fc:82:f6:ca:d9:05:50:71:03:38:
         ab:82:2d:77:20:ca:25:60:d6:01:4a:a1:e3:4b:cf:ea:05:6b:
         22:3c:0d:dc
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAQe+OjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEyMjE4MDgwN1oXDTI1MDYxNjE1Mjk0
MVowMzExMC8GA1UEAxMoZDZmMDU0ZmQwMGNkMTE5MTExYjQzN2I3YjYxOTRhMzc0
MGY0MzI0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAILCEF0YfTLL
JQQZbixEFeRE67D4gcPBRh8EqkHEXdRBdd+pF05INXTxctS0EuNJcqWZtHrWVy/0
ubp+QuMSYLtjhckxRmnMnWnZpHHVcC/f9xPqUredOhVH5LZTAW6EqDl3cTleDoaH
nQK9y/9zkDU/RMiax+WcHfzC9O81n6ZlRjS74VGbhAABCGBlxPhUXbTWhC/6ZRRw
7bWi5LWvYpxObze/Ok3rmPupPSG3b4ZK+ygxRsq/E+vlhYLjY020jKxIuHNhwT3d
kjM7aXX7Hh+q1U2JqTdQl0UAIy6YxADlbkIaL4Ro6+9S5vKauM7WelZWymRj7aXk
VafBJkSFbYUCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBSJn7VvU03FgI0Je6doKCyx
lagwWzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zMDFiYTBjMi1hYzJi
LTQxNmMtOGIyNC0wMzhhMjQ3MmQ2MDYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzAxYmEwYzItYWMyYi00
MTZjLThiMjQtMDM4YTI0NzJkNjA2L2Q2ZjA1NGZkMDBjZDExOTExMWI0MzdiN2I2
MTk0YTM3NDBmNDMyNGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABK4ADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEKqMwDQYJKoZIhvcNAQELBQADggEBAFyuo4Ll4P+dhWw56A7C
A4CG2SllqRccBrDlppdhsbOyTwBIWmuoTAleezOgbvDXhiEefsQGvQcyCJlXXuGU
n5+phlUl5AT+enXZOi88/aO/9olvFctLJAIgEIDDPAYz20FxQ+ueE1hX4ixiP0rX
2qi1lPj6T4BPXaj39q7R244ZIvF5AcnYzB+mmjhLSMw52ymSx8WgRHMa7FKZN/y+
7FkI0MvEK6G89Q2LnBUSW0kdc3QmjgCRM/cJsFYvuAEslTy+KxRQg3SbK/kEnfkv
B9SQz2jVlNjhADChCnU++qpX/IL2ytkFUHEDOKuCLXcgyiVg1gFKoeNLz+oFayI8
Ddw=
-----END CERTIFICATE-----