Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer
File:                     e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer (raw, json)
Hash identifier:          Z/61sxH/dxtpXE7hE4ZPxD917u9Wu/8x3DRqNQm+jVg=
Subject key identifier:   B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6B8F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 Apr 2023 23:47:50 +0000
Certificate not after:    Thu 15 Aug 2024 16:30:05 +0000
Subordinate resources:    AS: 269811
                          IP: 45.185.186.0/23
                          IP: 2803:3b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15120629 (0xe6b8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 21 23:47:50 2023 GMT
            Not After : Aug 15 16:30:05 2024 GMT
        Subject: CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:8e:5f:75:12:53:43:dc:08:2d:35:11:87:
                    49:4a:58:14:6c:6e:ba:40:da:51:be:13:e0:ea:eb:
                    f8:ec:7e:b4:54:77:b5:4d:6f:1b:1d:86:1c:6e:97:
                    63:c4:d5:ae:0d:50:2e:fe:1a:82:ae:41:88:15:1e:
                    05:5a:bf:7d:44:77:3f:0b:59:3d:83:31:5c:80:f4:
                    ac:15:57:12:f6:a2:71:98:d8:04:b0:2e:2d:4c:21:
                    a2:5c:cd:13:35:a8:d5:04:0b:12:e8:cd:e1:77:ef:
                    cf:30:14:2c:0d:66:9b:f4:84:4b:d9:58:48:98:5f:
                    d6:23:04:5d:b6:b4:e2:d5:85:a0:42:ff:b4:4b:d8:
                    8f:49:3a:d6:8d:41:20:87:a1:9d:fe:06:58:96:39:
                    a9:71:70:03:9a:68:e8:b9:56:c2:1b:2e:c3:c0:c8:
                    1a:a8:6b:95:46:47:d7:7f:41:6d:d4:f5:9e:a2:15:
                    43:93:d5:3b:27:8d:b5:04:84:44:f7:56:f9:92:37:
                    d6:bc:f0:48:d5:c3:f2:e5:58:d6:74:4c:4c:e8:ac:
                    84:b7:eb:b9:5f:bd:d1:e3:9e:17:93:ca:07:b4:8e:
                    61:fd:65:f4:fe:4c:35:14:8f:64:7a:55:ed:b1:67:
                    1f:6a:82:5b:61:c9:dc:2c:0a:46:0d:c0:8b:f9:f6:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.186.0/23
                IPv6:
                  2803:3b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269811

    Signature Algorithm: sha256WithRSAEncryption
         68:c8:50:f4:af:e0:2c:62:90:0a:61:f3:d5:3b:7a:d4:5b:86:
         ee:9e:52:c2:cc:ae:9a:a1:b9:24:0f:01:57:87:18:fb:3d:de:
         06:8b:27:13:e6:c2:a7:66:84:2a:8b:69:85:71:74:ad:70:a3:
         0c:9d:ec:b4:38:4e:45:3b:9b:20:33:86:1d:32:25:4c:ae:30:
         92:d4:11:08:20:34:e6:6c:fb:bf:c5:63:95:d4:79:19:b6:8a:
         6f:1c:59:de:3c:6b:ad:b4:c5:23:44:f9:cd:4d:cb:ad:89:60:
         58:3c:fd:37:ef:51:8a:84:e9:85:7c:57:ea:fa:ba:18:cb:46:
         41:3d:06:b1:4f:15:81:d5:fa:c6:9e:5d:c8:73:87:3e:3a:fe:
         23:ca:36:4c:fb:2f:3a:37:ef:0b:82:f7:7c:ec:c5:c3:d5:fe:
         d5:ee:22:b9:85:aa:d8:41:56:80:91:43:00:3a:ac:1a:ec:0c:
         ce:b6:f2:d3:a0:d2:d1:37:c2:32:a3:90:0e:48:6c:59:07:a8:
         5f:ef:2d:72:f6:0d:06:6f:07:89:1e:14:76:e5:c8:4b:7e:53:
         bb:79:e1:59:67:ed:d7:87:65:cc:60:fa:df:db:57:8e:b1:e8:
         c2:96:a8:ca:13:74:d9:4e:84:1e:e4:b2:48:53:65:c6:f2:0c:
         79:3c:a5:dc
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOa49TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQyMTIzNDc1MFoXDTI0MDgxNTE2MzAw
NVowMzExMC8GA1UEAxMoZThjNjNkNWQzYzA5NzliZDBjMjdhYzM1ZDg4MmYyOWY5
ZmFiYTUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtAjl91ElND
3AgtNRGHSUpYFGxuukDaUb4T4Orr+Ox+tFR3tU1vGx2GHG6XY8TVrg1QLv4agq5B
iBUeBVq/fUR3PwtZPYMxXID0rBVXEvaicZjYBLAuLUwholzNEzWo1QQLEujN4Xfv
zzAULA1mm/SES9lYSJhf1iMEXba04tWFoEL/tEvYj0k61o1BIIehnf4GWJY5qXFw
A5po6LlWwhsuw8DIGqhrlUZH139BbdT1nqIVQ5PVOyeNtQSERPdW+ZI31rzwSNXD
8uVY1nRMTOishLfruV+90eOeF5PKB7SOYf1l9P5MNRSPZHpV7bFnH2qCW2HJ3CwK
Rg3Ai/n2vKsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSww4ed1m5+nndBDwOXK+N+
DlyzUzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YjdiNzY0ZC1kYmM2
LTQ2NzktOGQwNy05ZTg0ZGVmY2EwYTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGI3Yjc2NGQtZGJjNi00
Njc5LThkMDctOWU4NGRlZmNhMGEwL2U4YzYzZDVkM2MwOTc5YmQwYzI3YWMzNWQ4
ODJmMjlmOWZhYmE1MDkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS25ujANBAIAAjAHAwUAKAM7YDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHfMwDQYJKoZIhvcNAQELBQADggEBAGjI
UPSv4CxikAph89U7etRbhu6eUsLMrpqhuSQPAVeHGPs93gaLJxPmwqdmhCqLaYVx
dK1wowyd7LQ4TkU7myAzhh0yJUyuMJLUEQggNOZs+7/FY5XUeRm2im8cWd48a620
xSNE+c1Ny62JYFg8/TfvUYqE6YV8V+r6uhjLRkE9BrFPFYHV+saeXchzhz46/iPK
Nkz7Lzo37wuC93zsxcPV/tXuIrmFqthBVoCRQwA6rBrsDM628tOg0tE3wjKjkA5I
bFkHqF/vLXL2DQZvB4keFHblyEt+U7t54Vln7deHZcxg+t/bV46x6MKWqMoTdNlO
hB7kskhTZcbyDHk8pdw=
-----END CERTIFICATE-----