Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3eafcf7625fef2fd0fa2bacc7903c2cb4320eac.cer
File:                     e3eafcf7625fef2fd0fa2bacc7903c2cb4320eac.cer (raw, json)
Hash identifier:          xrq8M8ALBm58kLdst3ylLw9BxtYRWb6pMA7eL+ZJh3U=
Subject key identifier:   8D:64:6C:36:CF:69:EB:F5:72:1B:76:33:A5:F7:20:56:0A:69:F3:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       011114B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83deb14e-9803-4ebf-9322-7f4472d4df2a/e3eafcf7625fef2fd0fa2bacc7903c2cb4320eac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83deb14e-9803-4ebf-9322-7f4472d4df2a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 16:48:11 +0000
Certificate not after:    Sun 04 Jan 2026 05:00:00 +0000
Subordinate resources:    AS: 273217
                          IP: 2803:e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17896627 (0x11114b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 16:48:11 2024 GMT
            Not After : Jan  4 05:00:00 2026 GMT
        Subject: CN=e3eafcf7625fef2fd0fa2bacc7903c2cb4320eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:93:bd:18:d9:3d:48:e9:5b:6b:89:c5:6f:
                    23:c8:15:f7:4d:10:cf:ea:c0:40:24:8d:ec:9b:f6:
                    28:ce:73:7f:48:c2:39:50:8d:b2:82:e8:5b:6e:d0:
                    08:90:60:dd:bf:f9:d1:fc:08:21:65:47:a8:1b:36:
                    72:e0:f9:b2:26:8c:b8:bb:b8:97:40:21:ca:5e:ae:
                    e3:af:a9:b8:8e:3d:90:5f:ad:84:6e:25:d2:8c:68:
                    02:15:3a:18:9c:94:ab:15:b1:84:71:aa:ed:90:76:
                    82:3c:3e:fa:11:f5:b1:00:37:f5:6e:7a:75:18:4a:
                    3d:33:d7:0f:0e:ce:71:30:28:47:68:b7:15:fd:11:
                    a6:d3:f5:52:62:11:b7:7a:9b:ac:d3:c1:f8:15:22:
                    5c:12:c6:3d:d8:8b:a2:8e:7d:fa:39:b7:9a:4d:f7:
                    2d:f2:33:70:fb:70:a2:ed:22:e2:4c:9c:d9:6a:9a:
                    54:13:05:f7:91:9c:34:8a:56:18:55:dd:65:9d:46:
                    68:0d:5e:60:5e:d8:16:63:ca:14:1c:3e:4f:7a:6e:
                    bf:2e:e5:bc:f4:bc:4c:ec:5a:9b:fe:90:2a:01:d1:
                    60:cf:ea:ee:ca:cf:04:99:88:a4:9d:92:da:9c:d6:
                    c0:cc:ef:68:de:fc:6e:02:79:c7:35:a3:6a:34:38:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:6C:36:CF:69:EB:F5:72:1B:76:33:A5:F7:20:56:0A:69:F3:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83deb14e-9803-4ebf-9322-7f4472d4df2a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83deb14e-9803-4ebf-9322-7f4472d4df2a/e3eafcf7625fef2fd0fa2bacc7903c2cb4320eac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273217

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:e6:3d:db:21:07:26:ca:9c:67:b2:11:35:fa:97:d5:9f:
         25:e0:76:e4:dc:c9:57:65:5f:77:de:9c:1b:49:27:84:64:b2:
         fa:d1:fe:db:ef:0e:f0:b1:bb:fe:d8:e6:8c:49:71:18:fe:d7:
         64:b9:1d:fe:fe:ec:d3:49:02:ca:d6:44:aa:c0:e0:fa:13:30:
         97:d1:03:7e:f0:7b:48:2d:1a:a1:a2:d9:60:49:ac:1e:ff:f6:
         8c:3b:13:bb:f0:08:80:46:72:7d:df:83:bd:40:00:1b:2b:4a:
         ed:ba:9d:dd:a4:9f:c2:ea:df:9b:63:66:db:4d:c6:a7:a9:4b:
         24:89:29:cd:b0:5f:06:a6:35:ef:b8:5a:fc:c2:4d:6b:a9:35:
         cc:80:5a:8f:33:ef:3f:2d:31:c7:ef:c0:f3:62:00:7d:4a:0a:
         df:e6:4f:09:e6:94:b9:02:1a:8f:57:06:b4:cb:82:36:5e:fe:
         3f:4e:cc:bd:d6:34:75:d2:bc:f9:9e:7c:d8:09:f7:34:dd:22:
         16:53:8a:00:a3:72:10:8a:50:2c:be:22:53:84:37:95:a1:93:
         8b:06:62:9e:9f:df:15:7a:2e:50:fd:16:69:5e:9e:b8:e3:ea:
         15:f3:57:31:da:72:cc:9e:6a:54:7f:66:ba:0d:9b:55:db:55:
         47:0f:37:92
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAREUszANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDQxMjE2NDgxMVoXDTI2MDEwNDA1MDAw
MFowMzExMC8GA1UEAxMoZTNlYWZjZjc2MjVmZWYyZmQwZmEyYmFjYzc5MDNjMmNi
NDMyMGVhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJh9k70Y2T1I
6VtricVvI8gV900Qz+rAQCSN7Jv2KM5zf0jCOVCNsoLoW27QCJBg3b/50fwIIWVH
qBs2cuD5siaMuLu4l0Ahyl6u46+puI49kF+thG4l0oxoAhU6GJyUqxWxhHGq7ZB2
gjw++hH1sQA39W56dRhKPTPXDw7OcTAoR2i3Ff0RptP1UmIRt3qbrNPB+BUiXBLG
PdiLoo59+jm3mk33LfIzcPtwou0i4kyc2WqaVBMF95GcNIpWGFXdZZ1GaA1eYF7Y
FmPKFBw+T3puvy7lvPS8TOxam/6QKgHRYM/q7srPBJmIpJ2S2pzWwMzvaN78bgJ5
xzWjajQ4+Z8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBSNZGw2z2nr9XIbdjOl9yBW
CmnzlTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84M2RlYjE0ZS05ODAz
LTRlYmYtOTMyMi03ZjQ0NzJkNGRmMmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODNkZWIxNGUtOTgwMy00
ZWJmLTkzMjItN2Y0NDcyZDRkZjJhL2UzZWFmY2Y3NjI1ZmVmMmZkMGZhMmJhY2M3
OTAzYzJjYjQzMjBlYWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDDlAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCtBMA0GCSqGSIb3DQEBCwUAA4IBAQCn6+Y92yEHJsqcZ7IRNfqX
1Z8l4Hbk3MlXZV933pwbSSeEZLL60f7b7w7wsbv+2OaMSXEY/tdkuR3+/uzTSQLK
1kSqwOD6EzCX0QN+8HtILRqhotlgSawe//aMOxO78AiARnJ934O9QAAbK0rtup3d
pJ/C6t+bY2bbTcanqUskiSnNsF8GpjXvuFr8wk1rqTXMgFqPM+8/LTHH78DzYgB9
Sgrf5k8J5pS5AhqPVwa0y4I2Xv4/Tsy91jR10rz5nnzYCfc03SIWU4oAo3IQilAs
viJThDeVoZOLBmKen98Vei5Q/RZpXp644+oV81cx2nLMnmpUf2a6DZtV21VHDzeS
-----END CERTIFICATE-----