Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2c7c418e21eea1f5d8531ed51a2a2e85c17d16.cer
File:                     ef2c7c418e21eea1f5d8531ed51a2a2e85c17d16.cer (raw, json)
Hash identifier:          goJqD7GX6SdxkanmLq+v4NZQQtISKAbEUOsSBHIxQuc=
Subject key identifier:   08:87:F8:CB:6E:DA:29:9E:7F:9B:16:0F:7C:2F:6D:06:B9:91:A0:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B6FF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/394ec426-54ac-4955-9a86-0118162d8609/ef2c7c418e21eea1f5d8531ed51a2a2e85c17d16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/394ec426-54ac-4955-9a86-0118162d8609/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 21:33:38 +0000
Certificate not after:    Mon 15 Sep 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:1a:7800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17526772 (0x10b6ff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 21:33:38 2024 GMT
            Not After : Sep 15 06:00:00 2025 GMT
        Subject: CN=ef2c7c418e21eea1f5d8531ed51a2a2e85c17d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:b8:e0:e3:a1:8c:d5:c2:3b:13:6a:3c:b9:
                    5f:23:27:c7:42:cc:6f:b8:5e:9d:ee:b1:07:e6:b0:
                    14:62:71:22:bc:90:a9:70:68:80:e3:ee:24:29:3a:
                    ab:c4:a3:77:a5:8b:6d:08:eb:33:6e:31:61:cf:ef:
                    e4:7f:d6:ac:23:ec:f2:91:7a:82:95:69:01:e7:eb:
                    d4:79:62:85:48:e6:89:93:28:c7:fc:c4:ac:ee:ca:
                    7f:39:47:e2:35:8c:80:3c:74:fe:e1:79:be:08:26:
                    c7:9d:d4:3b:53:2d:7f:ca:89:ac:46:f6:68:6f:51:
                    6b:07:ce:72:45:9a:74:8e:0d:9a:e0:85:b4:b1:64:
                    7b:67:bd:18:2a:b3:88:90:be:4a:a8:fa:0b:eb:f8:
                    89:49:d2:32:07:64:fd:34:98:c6:0b:33:7f:56:c5:
                    2a:07:50:97:3a:84:63:64:4b:d4:36:68:2a:d8:a2:
                    f8:00:62:9f:b9:50:f8:5d:71:d7:8a:ae:ba:c7:12:
                    8b:bc:e8:e1:cc:4d:f0:f1:88:29:a6:ce:50:f7:f2:
                    fd:25:08:45:55:eb:dc:22:27:a5:3e:f4:dc:a4:35:
                    94:47:b3:cf:56:44:03:e3:96:32:c5:0d:54:4b:53:
                    ff:18:fc:49:e7:86:24:3e:3f:3a:15:d5:25:9b:6a:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:87:F8:CB:6E:DA:29:9E:7F:9B:16:0F:7C:2F:6D:06:B9:91:A0:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/394ec426-54ac-4955-9a86-0118162d8609/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/394ec426-54ac-4955-9a86-0118162d8609/ef2c7c418e21eea1f5d8531ed51a2a2e85c17d16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:75:71:52:c6:30:03:3a:ad:0c:c8:3e:1b:0b:f4:d3:00:7a:
         d2:a9:60:20:30:e0:1b:23:7f:1b:d1:e9:00:32:07:4a:99:8b:
         cb:be:76:36:fd:10:82:4c:cd:d6:76:06:99:d9:02:76:65:93:
         7a:af:30:00:eb:7e:08:46:8e:21:79:4e:0e:03:ab:a7:ee:51:
         14:8e:db:15:79:47:a6:8d:f1:3f:93:07:16:7d:df:5e:f3:72:
         73:e7:91:de:52:47:69:ab:f0:de:97:fe:c9:7d:42:14:f8:5e:
         b8:23:67:0c:35:43:66:0c:70:f5:9b:de:97:8c:24:c3:9c:c8:
         dd:e5:61:69:d4:fa:54:ec:bf:7e:d1:6f:dd:9d:a5:71:37:b0:
         00:21:e0:66:8f:b8:ed:cb:99:6a:d8:d4:86:c7:07:65:ce:73:
         1d:64:0d:6a:d8:64:17:8d:ed:95:0f:c4:c5:ac:3d:2b:9f:88:
         d0:bf:41:30:05:fb:a9:98:54:f9:59:08:fa:71:a6:8a:b3:62:
         4b:8f:32:08:f7:97:c0:6f:d8:cd:d5:6c:b6:84:58:8e:2c:4b:
         fb:21:35:43:4b:96:db:fe:89:de:bd:fa:74:17:92:cf:d5:85:
         47:94:e7:c6:37:77:23:c1:1f:2a:6a:92:c6:e5:6c:8e:0f:10:
         09:ee:07:44
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQtv9DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyMjIxMzMzOFoXDTI1MDkxNTA2MDAw
MFowMzExMC8GA1UEAxMoZWYyYzdjNDE4ZTIxZWVhMWY1ZDg1MzFlZDUxYTJhMmU4
NWMxN2QxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJheuODjoYzV
wjsTajy5XyMnx0LMb7hene6xB+awFGJxIryQqXBogOPuJCk6q8Sjd6WLbQjrM24x
Yc/v5H/WrCPs8pF6gpVpAefr1HlihUjmiZMox/zErO7KfzlH4jWMgDx0/uF5vggm
x53UO1Mtf8qJrEb2aG9RawfOckWadI4NmuCFtLFke2e9GCqziJC+Sqj6C+v4iUnS
Mgdk/TSYxgszf1bFKgdQlzqEY2RL1DZoKtii+ABin7lQ+F1x14quuscSi7zo4cxN
8PGIKabOUPfy/SUIRVXr3CInpT703KQ1lEezz1ZEA+OWMsUNVEtT/xj8SeeGJD4/
OhXVJZtqikECAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQIh/jLbtopnn+bFg98L20G
uZGgsjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zOTRlYzQyNi01NGFj
LTQ5NTUtOWE4Ni0wMTE4MTYyZDg2MDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzk0ZWM0MjYtNTRhYy00
OTU1LTlhODYtMDExODE2MmQ4NjA5L2VmMmM3YzQxOGUyMWVlYTFmNWQ4NTMxZWQ1
MWEyYTJlODVjMTdkMTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABp4ADANBgkqhkiG9w0BAQsF
AAOCAQEAZHVxUsYwAzqtDMg+Gwv00wB60qlgIDDgGyN/G9HpADIHSpmLy752Nv0Q
gkzN1nYGmdkCdmWTeq8wAOt+CEaOIXlODgOrp+5RFI7bFXlHpo3xP5MHFn3fXvNy
c+eR3lJHaavw3pf+yX1CFPheuCNnDDVDZgxw9Zvel4wkw5zI3eVhadT6VOy/ftFv
3Z2lcTewACHgZo+47cuZatjUhscHZc5zHWQNathkF43tlQ/Exaw9K5+I0L9BMAX7
qZhU+VkI+nGmirNiS48yCPeXwG/YzdVstoRYjixL+yE1Q0uW2/6J3r36dBeSz9WF
R5Tnxjd3I8EfKmqSxuVsjg8QCe4HRA==
-----END CERTIFICATE-----