Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0b8fc01f33dea3299e9fd36258f4f80eff5234d.cer
File:                     e0b8fc01f33dea3299e9fd36258f4f80eff5234d.cer (raw, json)
Hash identifier:          CwiHhQWc5pLL+1ITpppTp/tmJoaohKIuidV1oeQIhC0=
Subject key identifier:   EE:46:69:F3:07:5B:3D:89:D0:62:F7:43:FF:40:7E:A3:7B:E4:C7:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7BC6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0d3749fa-d0f5-4cbb-beb4-2a89fb02b899/e0b8fc01f33dea3299e9fd36258f4f80eff5234d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0d3749fa-d0f5-4cbb-beb4-2a89fb02b899/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Sep 2023 15:51:42 +0000
Certificate not after:    Sun 17 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 45.170.48.0/22
                          IP: 2803:53a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16235629 (0xf7bc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 15:51:42 2023 GMT
            Not After : Nov 17 04:00:00 2024 GMT
        Subject: CN=e0b8fc01f33dea3299e9fd36258f4f80eff5234d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:5b:22:87:6b:e6:be:f6:81:b6:fc:09:5c:
                    cc:b7:44:fa:65:2f:28:5e:57:59:14:d9:a1:ff:16:
                    4f:ef:c9:2b:a9:eb:eb:95:7b:c3:98:db:cd:39:1e:
                    41:27:ea:6d:71:9f:b3:80:57:e9:77:54:33:b0:c7:
                    94:8a:aa:ac:40:2a:ff:09:ef:d1:c8:5a:3a:42:23:
                    95:83:1f:31:0f:7c:9b:1b:8a:36:0f:3a:3a:da:2a:
                    78:a4:fc:b5:80:42:31:60:0e:06:ca:21:dd:c9:20:
                    5e:b5:5c:b6:9e:65:c5:7e:ef:f9:a5:d9:26:6a:2e:
                    af:a8:3f:6f:ee:0b:8a:af:0c:a0:5a:85:29:5b:62:
                    42:aa:cd:2a:c5:fa:46:7f:c5:67:a2:a8:29:bb:36:
                    6f:30:f6:55:f2:1c:73:a1:6b:9f:0f:0e:c8:dd:2b:
                    8b:37:c9:31:7a:12:41:b1:54:7d:6f:4d:79:dd:9d:
                    31:44:4d:45:df:64:81:1b:bf:7f:15:ea:c3:a6:90:
                    ad:76:46:ae:7f:c4:f6:6b:15:c1:27:a5:18:cb:85:
                    d0:f8:41:b8:c5:4d:2e:2c:ca:e2:21:dd:dc:80:bf:
                    17:1a:a1:59:db:d3:b7:fc:a5:11:2a:f9:da:c0:41:
                    25:81:4f:f2:1e:be:db:6f:ad:18:6a:55:0d:37:4f:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:46:69:F3:07:5B:3D:89:D0:62:F7:43:FF:40:7E:A3:7B:E4:C7:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0d3749fa-d0f5-4cbb-beb4-2a89fb02b899/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0d3749fa-d0f5-4cbb-beb4-2a89fb02b899/e0b8fc01f33dea3299e9fd36258f4f80eff5234d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.48.0/22
                IPv6:
                  2803:53a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:23:38:42:18:ad:15:2c:65:37:9d:b0:e1:60:3c:d7:ef:f6:
         99:87:e2:ea:e8:a1:1d:ef:01:06:1a:76:f8:a1:40:58:de:96:
         01:c3:e5:3f:5c:a6:53:df:26:dd:94:7f:88:2a:c0:f3:c8:61:
         96:b2:75:08:81:46:0c:97:49:ea:52:02:47:02:fb:fd:5f:12:
         d1:58:b8:ab:90:26:f7:a6:15:5a:4c:e6:f6:e7:1d:d7:c9:0e:
         d7:06:75:da:67:16:6b:55:41:4a:b6:4e:e4:e8:03:7a:38:39:
         9e:0f:5b:2b:56:a0:db:85:c8:c7:e2:cf:4f:2d:f6:de:1a:4c:
         cc:a8:6d:1a:c4:eb:56:81:68:27:77:07:06:78:8d:97:3b:e9:
         98:23:f8:83:d4:cb:ee:19:5f:2f:01:d8:29:36:46:b5:22:af:
         ea:0f:7b:20:c1:72:4f:5e:1b:99:10:2a:d7:10:b2:a9:42:c5:
         5b:82:8a:d9:56:e9:c0:e8:de:41:83:bf:c3:75:51:a5:14:c2:
         4d:07:1c:c7:23:2e:2d:ad:5c:0b:fb:86:a4:2a:11:96:27:5e:
         a2:61:59:2d:e8:a4:e1:6a:11:77:18:55:49:27:00:5c:81:a3:
         12:60:56:ed:1d:9e:6b:fa:2b:e6:70:64:bf:c7:e8:ad:e4:2e:
         bb:68:09:56
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAPe8bTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkwMTE1NTE0MloXDTI0MTExNzA0MDAw
MFowMzExMC8GA1UEAxMoZTBiOGZjMDFmMzNkZWEzMjk5ZTlmZDM2MjU4ZjRmODBl
ZmY1MjM0ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIEcWyKHa+a+
9oG2/AlczLdE+mUvKF5XWRTZof8WT+/JK6nr65V7w5jbzTkeQSfqbXGfs4BX6XdU
M7DHlIqqrEAq/wnv0chaOkIjlYMfMQ98mxuKNg86OtoqeKT8tYBCMWAOBsoh3ckg
XrVctp5lxX7v+aXZJmour6g/b+4Liq8MoFqFKVtiQqrNKsX6Rn/FZ6KoKbs2bzD2
VfIcc6Frnw8OyN0rizfJMXoSQbFUfW9Ned2dMURNRd9kgRu/fxXqw6aQrXZGrn/E
9msVwSelGMuF0PhBuMVNLizK4iHd3IC/FxqhWdvTt/ylESr52sBBJYFP8h6+22+t
GGpVDTdP8m0CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTuRmnzB1s9idBi90P/QH6j
e+THRDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wZDM3NDlmYS1kMGY1
LTRjYmItYmViNC0yYTg5ZmIwMmI4OTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGQzNzQ5ZmEtZDBmNS00
Y2JiLWJlYjQtMmE4OWZiMDJiODk5L2UwYjhmYzAxZjMzZGVhMzI5OWU5ZmQzNjI1
OGY0ZjgwZWZmNTIzNGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2qMDANBAIAAjAHAwUAKANToDAN
BgkqhkiG9w0BAQsFAAOCAQEAxyM4QhitFSxlN52w4WA81+/2mYfi6uihHe8BBhp2
+KFAWN6WAcPlP1ymU98m3ZR/iCrA88hhlrJ1CIFGDJdJ6lICRwL7/V8S0Vi4q5Am
96YVWkzm9ucd18kO1wZ12mcWa1VBSrZO5OgDejg5ng9bK1ag24XIx+LPTy323hpM
zKhtGsTrVoFoJ3cHBniNlzvpmCP4g9TL7hlfLwHYKTZGtSKv6g97IMFyT14bmRAq
1xCyqULFW4KK2VbpwOjeQYO/w3VRpRTCTQccxyMuLa1cC/uGpCoRlideomFZLeik
4WoRdxhVSScAXIGjEmBW7R2ea/or5nBkv8foreQuu2gJVg==
-----END CERTIFICATE-----