Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eab4e0f1d490bae1d7ad91bbbc8ec04f8ca006ce.cer
File:                     eab4e0f1d490bae1d7ad91bbbc8ec04f8ca006ce.cer (raw, json)
Hash identifier:          c7S52oGnOLRVUor1qCt9B19h89hO8H0SnOStsKzwJWM=
Subject key identifier:   9E:A4:4C:B4:FC:BA:1B:13:33:FD:4B:0B:52:0F:46:DA:F1:9C:BF:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F19E2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2baa219e-9a1c-4aef-8b3b-032d441d89f8/eab4e0f1d490bae1d7ad91bbbc8ec04f8ca006ce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2baa219e-9a1c-4aef-8b3b-032d441d89f8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 01:18:15 +0000
Certificate not after:    Wed 23 Oct 2024 17:16:24 +0000
Subordinate resources:    IP: 2801:17:1800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15834669 (0xf19e2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 01:18:15 2023 GMT
            Not After : Oct 23 17:16:24 2024 GMT
        Subject: CN=eab4e0f1d490bae1d7ad91bbbc8ec04f8ca006ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:fc:73:57:34:d6:49:58:1f:ee:97:97:ef:
                    a2:0a:a0:0a:a2:ec:77:66:a7:63:0e:b0:d7:ca:54:
                    38:0d:09:13:42:bd:e6:32:62:94:4c:a9:50:13:b7:
                    e3:ac:3e:37:35:eb:5d:f5:b8:42:77:e4:7d:bc:c4:
                    5c:0e:b3:35:03:63:7f:b3:f0:be:0c:c4:ac:05:52:
                    23:c9:a4:39:f5:ab:d2:d8:75:1c:1a:d1:31:46:4b:
                    10:5a:a4:fc:72:f3:68:17:30:5c:e9:75:39:a7:de:
                    29:ed:34:e5:ae:f9:f7:36:b0:fb:20:ff:b1:f3:b3:
                    55:90:04:24:65:bc:0d:27:65:76:07:c4:4c:40:7a:
                    8b:09:bf:a7:34:94:88:22:56:4b:d7:01:65:e0:ec:
                    24:97:cb:be:a4:30:9e:36:2d:15:09:cc:b9:f8:82:
                    2e:25:ac:63:be:9d:9a:21:92:05:ef:e8:2d:e0:41:
                    c2:35:a3:2d:60:1a:1c:96:c3:b2:44:9e:f7:ba:73:
                    d7:ba:1d:57:9e:26:db:82:08:cf:3a:42:20:c1:6e:
                    3a:3a:9a:ca:9e:57:f8:5f:b4:5a:02:ed:3c:a3:e9:
                    f9:6e:33:81:d3:44:48:64:20:2b:aa:c0:aa:51:8d:
                    2d:1e:16:11:1d:92:ce:8d:dc:f5:66:08:5d:06:93:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:4C:B4:FC:BA:1B:13:33:FD:4B:0B:52:0F:46:DA:F1:9C:BF:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2baa219e-9a1c-4aef-8b3b-032d441d89f8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2baa219e-9a1c-4aef-8b3b-032d441d89f8/eab4e0f1d490bae1d7ad91bbbc8ec04f8ca006ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:e8:4d:8f:21:a6:22:9b:75:a3:d9:d1:cd:dd:cd:09:55:
         2d:d4:77:68:ab:52:ca:1c:63:8a:22:bc:f4:2c:55:5a:dc:fa:
         66:ad:49:56:2c:52:e9:49:1d:03:7d:95:c8:bc:a1:55:aa:54:
         c5:1b:24:ba:ef:82:13:55:51:76:71:13:db:49:aa:72:11:ea:
         74:ad:72:85:84:e5:fe:d1:8c:d0:8d:2d:b1:c0:63:37:67:35:
         27:e2:7d:dc:45:e4:d7:16:75:6a:2b:64:54:b0:13:1c:11:fa:
         c8:e4:f0:36:7e:d7:c5:b9:d9:ca:7b:cc:ea:83:6c:69:d2:c0:
         80:b2:b5:63:90:22:25:03:52:03:03:e6:b2:4b:b2:d1:54:c3:
         1c:fb:ba:b1:22:a1:73:44:53:e2:95:6d:d5:60:41:73:c6:f4:
         da:10:5f:7b:a8:6d:c5:2b:10:ed:8a:5b:ed:13:00:ff:7d:31:
         42:e9:37:40:05:65:c0:24:07:79:cd:2b:74:c6:fb:ee:68:ec:
         65:07:87:e8:1e:92:7c:40:9c:e2:33:c5:10:3e:58:a7:d7:89:
         4d:ba:f5:bc:e2:c5:bc:14:76:c2:36:b0:47:da:e5:f8:55:7d:
         c5:eb:ae:d8:e8:a9:0f:c6:a6:ed:73:07:bc:2a:2f:63:37:da:
         f3:67:c9:ce
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPGeLTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcxMzAxMTgxNVoXDTI0MTAyMzE3MTYy
NFowMzExMC8GA1UEAxMoZWFiNGUwZjFkNDkwYmFlMWQ3YWQ5MWJiYmM4ZWMwNGY4
Y2EwMDZjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI6b/HNXNNZJ
WB/ul5fvogqgCqLsd2anYw6w18pUOA0JE0K95jJilEypUBO346w+NzXrXfW4Qnfk
fbzEXA6zNQNjf7PwvgzErAVSI8mkOfWr0th1HBrRMUZLEFqk/HLzaBcwXOl1Oafe
Ke005a759zaw+yD/sfOzVZAEJGW8DSdldgfETEB6iwm/pzSUiCJWS9cBZeDsJJfL
vqQwnjYtFQnMufiCLiWsY76dmiGSBe/oLeBBwjWjLWAaHJbDskSe97pz17odV54m
24IIzzpCIMFuOjqayp5X+F+0WgLtPKPp+W4zgdNESGQgK6rAqlGNLR4WER2Szo3c
9WYIXQaTnF8CAwEAAaOCAuEwggLdMB0GA1UdDgQWBBSepEy0/LobEzP9SwtSD0ba
8Zy/izAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYmFhMjE5ZS05YTFj
LTRhZWYtOGIzYi0wMzJkNDQxZDg5ZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmJhYTIxOWUtOWExYy00
YWVmLThiM2ItMDMyZDQ0MWQ4OWY4L2VhYjRlMGYxZDQ5MGJhZTFkN2FkOTFiYmJj
OGVjMDRmOGNhMDA2Y2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABcYADANBgkqhkiG9w0BAQsF
AAOCAQEAXUfoTY8hpiKbdaPZ0c3dzQlVLdR3aKtSyhxjiiK89CxVWtz6Zq1JVixS
6UkdA32VyLyhVapUxRskuu+CE1VRdnET20mqchHqdK1yhYTl/tGM0I0tscBjN2c1
J+J93EXk1xZ1aitkVLATHBH6yOTwNn7XxbnZynvM6oNsadLAgLK1Y5AiJQNSAwPm
skuy0VTDHPu6sSKhc0RT4pVt1WBBc8b02hBfe6htxSsQ7Ypb7RMA/30xQuk3QAVl
wCQHec0rdMb77mjsZQeH6B6SfECc4jPFED5Yp9eJTbr1vOLFvBR2wjawR9rl+FV9
xeuu2OipD8am7XMHvCovYzfa82fJzg==
-----END CERTIFICATE-----