Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e03476e9a82909ea7d683a3d81c5d39535595d4f.cer
File:                     e03476e9a82909ea7d683a3d81c5d39535595d4f.cer (raw, json)
Hash identifier:          ztEhpR+fi6LIqBj0Gtw6l1FkoLygvCHbzER9N2UQdKU=
Subject key identifier:   50:D5:EA:43:1C:F7:3C:E8:C6:18:09:D0:CB:57:11:2B:B1:6B:C5:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B66FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/87face07-70cb-4ace-8e9c-ad616e02693b/e03476e9a82909ea7d683a3d81c5d39535595d4f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/87face07-70cb-4ace-8e9c-ad616e02693b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 18:31:03 +0000
Certificate not after:    Wed 17 Dec 2025 01:16:02 +0000
Subordinate resources:    AS: 272366
                          IP: 2806:415::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17524476 (0x10b66fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 18:31:03 2024 GMT
            Not After : Dec 17 01:16:02 2025 GMT
        Subject: CN=e03476e9a82909ea7d683a3d81c5d39535595d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:ea:eb:f9:d8:ae:29:bb:1d:d5:47:8d:54:
                    85:de:0a:d0:52:39:ed:f4:5c:cb:b8:fb:ca:97:19:
                    dd:cf:b1:68:f9:8e:68:9c:26:e4:8a:d1:09:eb:b3:
                    fb:4a:88:21:35:05:8c:52:0a:33:4b:07:e0:e8:40:
                    04:82:b7:95:58:87:3d:4a:ff:6d:9f:1e:a9:9b:b2:
                    c7:9b:c4:49:d8:6a:e0:25:36:49:83:ee:9f:be:2b:
                    cc:84:81:89:b8:87:18:06:80:e6:fd:c3:94:7c:e3:
                    91:8e:22:4d:ae:40:89:ee:6f:6f:9f:e9:a8:65:96:
                    1a:aa:e6:a3:ba:16:2f:28:d0:c8:7c:22:a8:f4:e6:
                    e0:00:71:73:26:13:9c:73:05:8e:4a:17:88:a0:d6:
                    f2:40:22:6d:18:b3:62:32:1b:77:00:43:9a:7f:38:
                    41:b3:56:ea:36:0c:bd:69:0d:4f:b5:62:75:c3:df:
                    f9:f9:82:c6:50:54:6e:14:f1:07:19:52:84:1d:9f:
                    a4:e7:b4:5b:aa:6d:fb:3d:3d:25:4c:c7:f4:ad:ba:
                    59:86:70:6a:c9:ac:4c:f2:4a:0a:c9:c4:e6:8e:38:
                    9e:3a:6d:6e:71:59:c3:18:aa:d2:18:65:38:a0:8a:
                    f0:04:c6:9a:6e:04:99:e6:af:39:a7:d2:31:b2:60:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D5:EA:43:1C:F7:3C:E8:C6:18:09:D0:CB:57:11:2B:B1:6B:C5:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/87face07-70cb-4ace-8e9c-ad616e02693b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/87face07-70cb-4ace-8e9c-ad616e02693b/e03476e9a82909ea7d683a3d81c5d39535595d4f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:415::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272366

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:d0:56:a0:40:a6:b7:47:a3:b7:83:59:43:53:21:d8:87:
         90:f1:6e:c4:76:b5:25:c2:f4:a6:2a:26:21:35:24:4a:31:31:
         4a:17:24:6d:77:99:84:0c:0b:4b:1f:8e:44:6f:ba:b1:f7:1d:
         5a:82:b6:1a:42:2f:ce:d2:7e:ea:a3:e8:25:5b:71:fb:91:5d:
         ae:1b:ba:15:f8:40:c2:dc:28:6e:b2:66:1f:f2:c1:16:35:35:
         aa:59:91:9d:aa:f1:e3:fd:3f:f9:54:f5:ff:bd:14:01:f9:33:
         21:f6:e4:fc:d5:6b:a2:9d:37:64:20:80:04:b0:96:2b:e4:de:
         28:b8:87:e8:d4:5a:8e:88:ce:5b:21:f9:dd:17:12:b3:fa:84:
         48:30:00:1e:93:72:3d:bd:fb:8f:63:53:f3:8c:7d:e5:5a:ca:
         44:de:0d:a8:03:33:54:bf:ba:8e:83:cf:b9:ba:67:69:55:97:
         be:cf:7d:33:e6:ff:03:99:dd:54:e3:7c:a0:73:6a:3b:5d:86:
         ec:bb:80:22:67:e0:2f:af:92:e8:53:75:b8:17:60:09:88:7c:
         7c:e1:80:ac:e1:e7:8f:dd:be:4a:3f:29:b2:36:f6:ca:0c:1e:
         09:6e:cb:61:e2:9f:b9:72:e6:ac:25:77:fd:44:1e:22:c0:72:
         fa:ec:73:31
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQtm/DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyMjE4MzEwM1oXDTI1MTIxNzAxMTYw
MlowMzExMC8GA1UEAxMoZTAzNDc2ZTlhODI5MDllYTdkNjgzYTNkODFjNWQzOTUz
NTU5NWQ0ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKsN6uv52K4p
ux3VR41Uhd4K0FI57fRcy7j7ypcZ3c+xaPmOaJwm5IrRCeuz+0qIITUFjFIKM0sH
4OhABIK3lViHPUr/bZ8eqZuyx5vESdhq4CU2SYPun74rzISBibiHGAaA5v3DlHzj
kY4iTa5Aie5vb5/pqGWWGqrmo7oWLyjQyHwiqPTm4ABxcyYTnHMFjkoXiKDW8kAi
bRizYjIbdwBDmn84QbNW6jYMvWkNT7VidcPf+fmCxlBUbhTxBxlShB2fpOe0W6pt
+z09JUzH9K26WYZwasmsTPJKCsnE5o44njptbnFZwxiq0hhlOKCK8ATGmm4Emeav
OafSMbJg7wMCAwEAAaOCAvswggL3MB0GA1UdDgQWBBRQ1epDHPc86MYYCdDLVxEr
sWvFmjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84N2ZhY2UwNy03MGNi
LTRhY2UtOGU5Yy1hZDYxNmUwMjY5M2IvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODdmYWNlMDctNzBjYi00
YWNlLThlOWMtYWQ2MTZlMDI2OTNiL2UwMzQ3NmU5YTgyOTA5ZWE3ZDY4M2EzZDgx
YzVkMzk1MzU1OTVkNGYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgGBBUwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCfuMA0GCSqGSIb3DQEBCwUAA4IBAQBMANBWoECmt0ejt4NZQ1Mh
2IeQ8W7EdrUlwvSmKiYhNSRKMTFKFyRtd5mEDAtLH45Eb7qx9x1agrYaQi/O0n7q
o+glW3H7kV2uG7oV+EDC3ChusmYf8sEWNTWqWZGdqvHj/T/5VPX/vRQB+TMh9uT8
1WuinTdkIIAEsJYr5N4ouIfo1FqOiM5bIfndFxKz+oRIMAAek3I9vfuPY1PzjH3l
WspE3g2oAzNUv7qOg8+5umdpVZe+z30z5v8Dmd1U43ygc2o7XYbsu4AiZ+Avr5Lo
U3W4F2AJiHx84YCs4eeP3b5KPymyNvbKDB4Jbsth4p+5cuasJXf9RB4iwHL67HMx
-----END CERTIFICATE-----