Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcc9b3a9eeb9d420d893271f72081395bd4d8c7a.cer
File:                     dcc9b3a9eeb9d420d893271f72081395bd4d8c7a.cer (raw, json)
Hash identifier:          /fPzgdaKNFTjBrpyqKYQAJraE4c6FmeneqsW9iZuiE4=
Subject key identifier:   D9:28:ED:AA:42:24:62:9C:C5:27:08:DE:1D:8D:01:FE:3B:1E:F4:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE8E3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba34b632-1b11-4f57-8309-2e6d799afbd5/dcc9b3a9eeb9d420d893271f72081395bd4d8c7a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba34b632-1b11-4f57-8309-2e6d799afbd5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 17:18:13 +0000
Certificate not after:    Sun 09 Mar 2025 19:10:54 +0000
Subordinate resources:    AS: 266797
                          IP: 45.235.227.0/24
                          IP: 2801:1b:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15633983 (0xee8e3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 17:18:13 2023 GMT
            Not After : Mar  9 19:10:54 2025 GMT
        Subject: CN=dcc9b3a9eeb9d420d893271f72081395bd4d8c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:b7:48:dd:e9:e7:67:e1:a1:7e:4b:f8:d1:
                    1d:ce:61:9d:68:02:f8:db:2e:2d:83:cd:df:52:ab:
                    f7:45:d8:01:f3:f9:fc:cf:24:3a:f3:e7:e0:97:f8:
                    79:91:93:32:68:68:37:c7:db:32:a3:d2:70:8a:fa:
                    41:0a:f7:3d:4e:43:ee:f2:26:7c:77:59:56:71:2d:
                    cc:4a:48:41:e7:71:59:62:8b:db:e6:27:26:90:b2:
                    ba:09:20:45:cc:ef:5c:d9:73:d0:15:bf:ef:77:ed:
                    84:e7:e9:a9:1e:ef:d8:c0:99:1e:74:eb:58:ee:24:
                    27:63:85:77:76:03:d3:e6:fd:14:e0:18:a8:07:d8:
                    a6:fa:5b:db:8e:2d:dc:23:81:91:9b:96:61:64:ed:
                    67:2b:37:ad:00:ef:83:fe:26:44:2b:4b:69:52:c2:
                    51:54:d9:f1:e8:b5:50:3e:c6:74:be:98:85:81:e4:
                    56:f9:a1:3b:2e:2e:43:92:57:e6:fa:08:66:03:f4:
                    3c:fb:47:76:3d:00:ae:23:6f:58:4b:8b:2f:12:fe:
                    11:12:5a:1a:e0:3b:ce:63:b5:83:79:56:bf:3a:8b:
                    60:03:88:e6:6b:2a:53:95:e3:b0:6c:ea:e6:d0:97:
                    00:80:4c:e1:10:b3:29:ef:f2:f7:7a:3b:6e:de:aa:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:ED:AA:42:24:62:9C:C5:27:08:DE:1D:8D:01:FE:3B:1E:F4:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba34b632-1b11-4f57-8309-2e6d799afbd5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba34b632-1b11-4f57-8309-2e6d799afbd5/dcc9b3a9eeb9d420d893271f72081395bd4d8c7a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.227.0/24
                IPv6:
                  2801:1b:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266797

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:28:ef:91:5f:b0:fc:3e:ed:77:ab:12:90:12:c2:76:8d:
         6d:f6:2b:c7:0c:0b:69:92:41:93:ed:db:8a:d9:72:75:f1:ce:
         59:d1:b8:76:55:37:49:8d:e5:54:3b:c1:46:ee:9b:ce:4d:61:
         e5:1d:ce:96:c3:1f:3e:b7:48:b2:ce:3d:92:10:a8:2a:1e:05:
         d5:1d:60:6c:4d:d8:37:32:4d:c8:16:4d:ed:92:4c:6d:03:17:
         52:e2:53:48:8f:29:66:ec:aa:35:6b:31:fb:bd:4b:23:a4:e8:
         28:b4:32:e5:7e:dc:f8:c2:1e:e4:f9:fd:87:74:50:a7:21:83:
         8b:6e:e8:95:37:ae:b1:d4:c0:91:09:91:1d:bb:81:13:61:3a:
         04:0f:04:a7:cc:81:c7:50:e0:28:5f:f5:0b:31:d6:aa:b4:f6:
         de:c0:1d:18:5b:23:a4:bb:2f:13:26:cf:d3:7d:df:75:20:63:
         cf:d8:ac:82:58:45:d9:1c:9c:02:08:84:b3:ae:75:76:1c:6b:
         bf:d1:a7:ef:97:1c:96:3b:00:dd:33:62:f1:90:a7:c7:10:e5:
         70:6f:f2:0e:bc:3a:49:cd:e1:3d:9f:ed:63:8f:14:d4:36:99:
         c9:71:f1:3c:e8:5f:c9:63:a6:2f:10:54:3e:55:57:d1:d1:46:
         25:db:ee:3f
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAO6OPzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyMDE3MTgxM1oXDTI1MDMwOTE5MTA1
NFowMzExMC8GA1UEAxMoZGNjOWIzYTllZWI5ZDQyMGQ4OTMyNzFmNzIwODEzOTVi
ZDRkOGM3YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6tt0jd6edn
4aF+S/jRHc5hnWgC+NsuLYPN31Kr90XYAfP5/M8kOvPn4Jf4eZGTMmhoN8fbMqPS
cIr6QQr3PU5D7vImfHdZVnEtzEpIQedxWWKL2+YnJpCyugkgRczvXNlz0BW/73ft
hOfpqR7v2MCZHnTrWO4kJ2OFd3YD0+b9FOAYqAfYpvpb244t3COBkZuWYWTtZys3
rQDvg/4mRCtLaVLCUVTZ8ei1UD7GdL6YhYHkVvmhOy4uQ5JX5voIZgP0PPtHdj0A
riNvWEuLLxL+ERJaGuA7zmO1g3lWvzqLYAOI5msqU5XjsGzq5tCXAIBM4RCzKe/y
93o7bt6qJqECAwEAAaOCAwswggMHMB0GA1UdDgQWBBTZKO2qQiRinMUnCN4djQH+
Ox70qzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iYTM0YjYzMi0xYjEx
LTRmNTctODMwOS0yZTZkNzk5YWZiZDUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmEzNGI2MzItMWIxMS00
ZjU3LTgzMDktMmU2ZDc5OWFmYmQ1L2RjYzliM2E5ZWViOWQ0MjBkODkzMjcxZjcy
MDgxMzk1YmQ0ZDhjN2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC3r4zAPBAIAAjAJAwcAKAEAG3AA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSLTANBgkqhkiG9w0BAQsFAAOCAQEA
SBwo75FfsPw+7XerEpASwnaNbfYrxwwLaZJBk+3bitlydfHOWdG4dlU3SY3lVDvB
Ru6bzk1h5R3OlsMfPrdIss49khCoKh4F1R1gbE3YNzJNyBZN7ZJMbQMXUuJTSI8p
ZuyqNWsx+71LI6ToKLQy5X7c+MIe5Pn9h3RQpyGDi27olTeusdTAkQmRHbuBE2E6
BA8Ep8yBx1DgKF/1CzHWqrT23sAdGFsjpLsvEybP033fdSBjz9isglhF2RycAgiE
s651dhxrv9Gn75ccljsA3TNi8ZCnxxDlcG/yDrw6Sc3hPZ/tY48U1DaZyXHxPOhf
yWOmLxBUPlVX0dFGJdvuPw==
-----END CERTIFICATE-----