Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e907a0b6738ee87dfa593f7c0c8854e8b9b1a8d3.cer
File:                     e907a0b6738ee87dfa593f7c0c8854e8b9b1a8d3.cer (raw, json)
Hash identifier:          FSDTYM0NS7sKpE4Wmtka8TkwdrV/z/TKxffGEZ3P91I=
Subject key identifier:   0B:80:E4:08:4B:F0:AE:F0:5C:DA:90:19:8C:4E:9B:19:9E:0B:F4:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AD3D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24759eba-e9fc-43b8-90b2-30f549620050/e907a0b6738ee87dfa593f7c0c8854e8b9b1a8d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24759eba-e9fc-43b8-90b2-30f549620050/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 05:54:35 +0000
Certificate not after:    Tue 16 Dec 2025 19:19:48 +0000
Subordinate resources:    IP: 2803:1a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17486800 (0x10ad3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 17 05:54:35 2024 GMT
            Not After : Dec 16 19:19:48 2025 GMT
        Subject: CN=e907a0b6738ee87dfa593f7c0c8854e8b9b1a8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:ee:ec:cb:c0:78:21:b3:64:bb:94:1f:4a:
                    96:52:ae:3e:2c:00:10:30:09:4a:11:66:9e:64:f1:
                    b1:99:cf:04:c3:36:55:d1:7c:37:9e:b1:41:96:03:
                    4a:c8:25:81:c4:e3:a1:ca:0f:6d:a9:14:86:aa:e5:
                    47:74:73:a8:f2:8e:dc:39:02:df:2e:9d:04:43:d5:
                    21:5a:c9:58:18:9a:52:dd:b8:14:88:ba:e0:00:b5:
                    19:58:85:5c:0d:02:2b:97:0e:c2:ca:71:63:ed:f1:
                    08:e8:72:9c:91:18:a6:eb:d1:56:f9:d2:92:ea:ef:
                    0e:8f:4d:90:9b:c4:cc:ac:2d:59:ef:18:7a:16:ee:
                    5f:4e:fb:0b:78:49:d7:d2:83:40:eb:be:b7:61:93:
                    9b:d6:b4:75:49:6f:cc:cd:28:19:81:00:1c:28:83:
                    8b:13:0c:81:57:9a:0c:3b:44:2e:0d:67:25:5f:0f:
                    ba:c6:04:4c:ed:eb:e1:18:5a:8c:ef:b6:86:be:82:
                    ed:70:c8:37:28:e7:13:ef:9f:56:3f:5b:28:6d:a8:
                    2e:6b:0a:24:9f:d5:fb:36:38:92:84:1f:9a:31:9c:
                    bb:27:f5:be:80:44:47:85:8b:e7:2d:e8:5e:3b:7b:
                    e4:14:0f:16:b8:d6:51:36:b6:9f:56:7e:cf:4e:a2:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:E4:08:4B:F0:AE:F0:5C:DA:90:19:8C:4E:9B:19:9E:0B:F4:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24759eba-e9fc-43b8-90b2-30f549620050/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24759eba-e9fc-43b8-90b2-30f549620050/e907a0b6738ee87dfa593f7c0c8854e8b9b1a8d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:ec:d2:4f:7f:81:51:b2:d9:34:5c:cc:26:f6:22:0f:2a:
         4d:2c:54:7a:c2:70:5c:4a:06:87:99:3f:bd:52:aa:38:34:51:
         08:37:79:d3:70:d7:ce:f2:77:45:de:5a:5e:ca:b0:08:d5:43:
         41:55:11:36:c0:c2:59:0a:b2:32:a2:6e:d7:d8:12:5f:87:9d:
         fa:fe:39:3b:e9:7f:28:61:87:9e:38:cd:0e:ad:5d:6f:79:06:
         ce:8a:a8:91:2b:8b:d5:14:42:7d:b6:bf:fc:59:72:08:82:8c:
         c1:52:35:c3:75:6c:11:42:53:95:4d:9c:fb:82:8e:1f:32:32:
         2a:43:84:ca:85:f5:9d:c0:51:a9:0d:0c:58:e3:9e:c2:5b:58:
         f9:29:5d:d8:d3:1d:e4:25:4a:bb:c8:c3:53:ef:39:3f:fe:d0:
         64:c8:8f:0f:d8:8b:a2:cb:4f:78:85:9f:77:8d:30:26:ce:55:
         9b:6c:b1:d9:9a:6a:50:b1:e5:e2:b3:0d:03:8e:ec:b7:cc:11:
         f9:3e:c1:31:49:63:bc:9b:7c:38:57:38:47:fd:27:82:44:66:
         ec:7a:f3:dd:90:8f:2c:45:d2:0d:ce:3d:b6:5a:b3:3d:fd:76:
         fb:bb:d3:ac:d5:0b:7c:ef:16:67:f2:14:23:3a:09:7b:c4:39:
         b7:63:21:42
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIEAQrT0DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIxNzA1NTQzNVoXDTI1MTIxNjE5MTk0
OFowMzExMC8GA1UEAxMoZTkwN2EwYjY3MzhlZTg3ZGZhNTkzZjdjMGM4ODU0ZThi
OWIxYThkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/H7uzLwHgh
s2S7lB9KllKuPiwAEDAJShFmnmTxsZnPBMM2VdF8N56xQZYDSsglgcTjocoPbakU
hqrlR3RzqPKO3DkC3y6dBEPVIVrJWBiaUt24FIi64AC1GViFXA0CK5cOwspxY+3x
COhynJEYpuvRVvnSkurvDo9NkJvEzKwtWe8YehbuX077C3hJ19KDQOu+t2GTm9a0
dUlvzM0oGYEAHCiDixMMgVeaDDtELg1nJV8PusYETO3r4RhajO+2hr6C7XDINyjn
E++fVj9bKG2oLmsKJJ/V+zY4koQfmjGcuyf1voBER4WL5y3oXjt75BQPFrjWUTa2
n1Z+z06irXcCAwEAAaOCAt8wggLbMB0GA1UdDgQWBBQLgOQIS/Cu8FzakBmMTpsZ
ngv0ejAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNDc1OWViYS1lOWZj
LTQzYjgtOTBiMi0zMGY1NDk2MjAwNTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjQ3NTllYmEtZTlmYy00
M2I4LTkwYjItMzBmNTQ5NjIwMDUwL2U5MDdhMGI2NzM4ZWU4N2RmYTU5M2Y3YzBj
ODg1NGU4YjliMWE4ZDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGlAwDQYJKoZIhvcNAQELBQAD
ggEBAGrP7NJPf4FRstk0XMwm9iIPKk0sVHrCcFxKBoeZP71Sqjg0UQg3edNw187y
d0XeWl7KsAjVQ0FVETbAwlkKsjKibtfYEl+Hnfr+OTvpfyhhh544zQ6tXW95Bs6K
qJEri9UUQn22v/xZcgiCjMFSNcN1bBFCU5VNnPuCjh8yMipDhMqF9Z3AUakNDFjj
nsJbWPkpXdjTHeQlSrvIw1PvOT/+0GTIjw/Yi6LLT3iFn3eNMCbOVZtssdmaalCx
5eKzDQOO7LfMEfk+wTFJY7ybfDhXOEf9J4JEZux6892QjyxF0g3OPbZasz39dvu7
06zVC3zvFmfyFCM6CXvEObdjIUI=
-----END CERTIFICATE-----