Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcb0b91aca6ca52dfed8bf576c54bfb9e9b0867f.cer
File:                     dcb0b91aca6ca52dfed8bf576c54bfb9e9b0867f.cer (raw, json)
Hash identifier:          LHGROTgZ+Fx5eAM7IuK9VVRhUMHfwvJgVCPn5xqE/sg=
Subject key identifier:   53:76:BD:95:17:4E:41:4C:65:D0:8D:B8:00:4B:FC:3A:61:D7:D4:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B944C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ebacb411-b897-49f4-b05b-c9de1686a15b/dcb0b91aca6ca52dfed8bf576c54bfb9e9b0867f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ebacb411-b897-49f4-b05b-c9de1686a15b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 14:54:03 +0000
Certificate not after:    Mon 02 Jun 2025 19:39:27 +0000
Subordinate resources:    AS: 52386

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17536076 (0x10b944c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 23 14:54:03 2024 GMT
            Not After : Jun  2 19:39:27 2025 GMT
        Subject: CN=dcb0b91aca6ca52dfed8bf576c54bfb9e9b0867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:65:81:86:d6:75:ee:47:72:33:65:60:30:
                    d7:1a:9b:d6:53:3a:45:f5:ca:ea:eb:ae:92:bf:7e:
                    66:01:ba:06:bc:bf:02:8a:28:0e:ca:20:82:7e:88:
                    8a:2e:36:69:28:fd:3d:cc:f4:47:3f:1f:18:27:5d:
                    da:67:a9:cf:89:db:ea:f8:5f:ac:c9:ee:27:0e:1c:
                    f2:0b:f0:d9:77:74:c4:df:df:2d:4e:ba:18:dd:fc:
                    09:ab:d6:92:bb:f3:59:c6:53:58:d0:65:5d:52:5c:
                    ca:0b:32:94:f5:68:02:cc:b8:30:3a:f3:d0:dc:9f:
                    d8:bb:c6:f2:5c:dd:6c:02:9e:28:35:c1:a0:35:a4:
                    c6:cc:8a:f8:80:31:54:fe:7f:a3:79:5b:79:2a:5c:
                    43:f9:68:5c:f4:60:14:17:94:9b:0a:a5:cc:c3:2e:
                    21:9d:41:37:4f:22:c7:3b:ab:5c:e8:44:95:18:55:
                    51:8e:11:98:03:e3:06:45:1f:bf:54:3b:2d:94:a6:
                    72:d6:a9:77:50:7b:b2:45:be:38:04:8a:d9:25:7c:
                    1e:3b:3c:c6:09:d2:dd:f5:45:01:8b:62:61:60:bc:
                    0b:72:25:fe:2a:31:da:f3:b3:18:da:9e:74:28:43:
                    1f:c8:24:2e:8f:70:9b:4e:ed:eb:81:14:92:0e:ff:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:76:BD:95:17:4E:41:4C:65:D0:8D:B8:00:4B:FC:3A:61:D7:D4:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ebacb411-b897-49f4-b05b-c9de1686a15b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ebacb411-b897-49f4-b05b-c9de1686a15b/dcb0b91aca6ca52dfed8bf576c54bfb9e9b0867f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52386

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:ee:ab:49:b8:59:6c:de:d6:b1:8a:3b:e4:36:27:63:fd:
         bd:c6:bb:48:c5:90:0b:57:bb:bb:b3:9a:b8:cc:f5:10:10:ce:
         56:56:25:d8:83:1d:b4:ef:b5:f3:ec:e3:e9:ea:79:2d:f2:88:
         b5:a9:72:65:84:7b:51:fd:a7:b1:df:56:26:02:53:db:cb:b8:
         bd:03:60:b8:04:f1:ae:27:a3:36:8e:85:53:e3:46:c7:19:a3:
         7f:00:06:01:55:6f:0b:c4:b4:8d:4a:08:cd:1e:7d:9a:8d:d2:
         f2:b0:d8:fa:09:7d:b5:eb:af:91:bc:58:66:96:dd:a6:6b:fa:
         e6:26:c1:d4:26:31:83:0f:a4:00:42:9d:72:0b:01:f5:2c:14:
         86:83:65:3b:b9:83:8c:b5:1e:e3:b4:ef:82:f9:9b:61:90:e4:
         5e:59:35:63:c3:23:1b:77:42:fe:ac:d6:e6:1d:db:5f:fa:bc:
         ed:56:a7:3d:f5:10:c2:21:6b:61:84:86:b0:de:36:17:cd:dd:
         bb:14:70:73:90:cf:57:9d:9e:98:40:0f:43:ce:c8:8d:0c:d3:
         1a:4f:53:ee:89:05:72:c8:ae:4c:a4:b3:96:21:03:79:cd:49:
         94:fc:3e:21:09:fb:85:43:da:0e:48:a2:8c:f3:9e:54:a3:d7:
         96:29:ec:df
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIEAQuUTDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyMzE0NTQwM1oXDTI1MDYwMjE5Mzky
N1owMzExMC8GA1UEAxMoZGNiMGI5MWFjYTZjYTUyZGZlZDhiZjU3NmM1NGJmYjll
OWIwODY3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKWJZYGG1nXu
R3IzZWAw1xqb1lM6RfXK6uuukr9+ZgG6Bry/AoooDsoggn6Iii42aSj9Pcz0Rz8f
GCdd2mepz4nb6vhfrMnuJw4c8gvw2Xd0xN/fLU66GN38CavWkrvzWcZTWNBlXVJc
ygsylPVoAsy4MDrz0Nyf2LvG8lzdbAKeKDXBoDWkxsyK+IAxVP5/o3lbeSpcQ/lo
XPRgFBeUmwqlzMMuIZ1BN08ixzurXOhElRhVUY4RmAPjBkUfv1Q7LZSmctapd1B7
skW+OASK2SV8Hjs8xgnS3fVFAYtiYWC8C3Il/iox2vOzGNqedChDH8gkLo9wm07t
64EUkg7/YwMCAwEAAaOCAtkwggLVMB0GA1UdDgQWBBRTdr2VF05BTGXQjbgAS/w6
YdfUiTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYmFjYjQxMS1iODk3
LTQ5ZjQtYjA1Yi1jOWRlMTY4NmExNWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWJhY2I0MTEtYjg5Ny00
OWY0LWIwNWItYzlkZTE2ODZhMTViL2RjYjBiOTFhY2E2Y2E1MmRmZWQ4YmY1NzZj
NTRiZmI5ZTliMDg2N2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzKIwDQYJKoZIhvcNAQELBQADggEBAC17
7qtJuFls3taxijvkNidj/b3Gu0jFkAtXu7uzmrjM9RAQzlZWJdiDHbTvtfPs4+nq
eS3yiLWpcmWEe1H9p7HfViYCU9vLuL0DYLgE8a4nozaOhVPjRscZo38ABgFVbwvE
tI1KCM0efZqN0vKw2PoJfbXrr5G8WGaW3aZr+uYmwdQmMYMPpABCnXILAfUsFIaD
ZTu5g4y1HuO074L5m2GQ5F5ZNWPDIxt3Qv6s1uYd21/6vO1Wpz31EMIha2GEhrDe
NhfN3bsUcHOQz1ednphAD0POyI0M0xpPU+6JBXLIrkyks5YhA3nNSZT8PiEJ+4VD
2g5IoozznlSj15Yp7N8=
-----END CERTIFICATE-----