Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efbd9d522aec3bd4aebfce55454831d0612c4376.cer
File:                     efbd9d522aec3bd4aebfce55454831d0612c4376.cer (raw, json)
Hash identifier:          W/ag4rIo514ZiJdifmq97ZwCwytg5weB/V7XX2VE4o8=
Subject key identifier:   24:66:A2:FB:B0:12:AA:BB:BB:0E:7B:BA:EC:EA:E6:5C:62:CD:C5:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE8B1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5f7b2eb4-2606-4f5f-b1e6-be39bd935e6b/efbd9d522aec3bd4aebfce55454831d0612c4376.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5f7b2eb4-2606-4f5f-b1e6-be39bd935e6b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 17:05:23 +0000
Certificate not after:    Sat 27 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 27788

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15633182 (0xee8b1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 17:05:23 2023 GMT
            Not After : Jul 27 15:00:00 2024 GMT
        Subject: CN=efbd9d522aec3bd4aebfce55454831d0612c4376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:c6:6c:02:92:20:4f:fc:d8:1c:d8:9a:b7:
                    55:88:56:6c:58:d1:3e:01:6e:48:53:7a:a7:9c:66:
                    64:ca:8d:d4:fb:c1:62:d9:82:19:34:d1:6c:b5:3f:
                    20:c8:36:b0:24:fa:15:d9:e2:6e:2a:d0:d8:12:39:
                    3e:79:56:09:a8:97:ec:37:ae:b4:75:66:bb:85:aa:
                    73:e9:03:b0:a8:b7:88:19:af:ee:50:67:13:51:dc:
                    dd:d5:a3:9f:6b:d6:24:6a:3c:6e:7f:9f:f8:60:66:
                    be:a3:9b:4c:d0:76:af:3e:d2:d0:18:4e:a8:6f:f1:
                    de:2d:e2:72:30:c4:fd:46:bf:79:29:68:8f:f5:13:
                    f6:b5:fb:5f:80:91:a3:92:b1:a5:08:5c:e7:0f:9f:
                    1e:61:12:9b:48:d0:43:ea:fd:95:02:5d:ca:e4:f9:
                    b4:91:2d:29:a3:89:d3:d9:1c:a9:b1:4a:1b:29:bd:
                    20:98:7a:88:b4:ea:70:6b:eb:f0:d3:b4:8b:7a:81:
                    f9:27:6c:56:34:0b:bc:3d:fe:56:54:8d:2d:9f:75:
                    4f:6c:bd:84:5d:1d:9e:f3:e2:cd:9a:a4:28:63:c6:
                    50:c5:2a:d9:0e:93:05:84:72:06:71:83:00:4d:13:
                    51:7e:1e:ca:f2:c4:49:3e:47:48:96:c0:6b:5c:81:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:A2:FB:B0:12:AA:BB:BB:0E:7B:BA:EC:EA:E6:5C:62:CD:C5:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5f7b2eb4-2606-4f5f-b1e6-be39bd935e6b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5f7b2eb4-2606-4f5f-b1e6-be39bd935e6b/efbd9d522aec3bd4aebfce55454831d0612c4376.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27788

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:61:50:4e:47:df:f3:8d:d4:f8:8d:1b:94:45:8b:1b:c0:
         ea:a0:3c:36:f4:69:14:19:21:25:22:a3:ae:39:c0:1b:62:f1:
         69:6d:72:2d:96:32:e6:0f:8a:e6:b5:62:7c:71:cc:4c:7f:41:
         3f:25:f2:49:4a:8a:fd:a6:8c:d7:cf:05:b7:c6:ba:a3:05:4e:
         dd:4c:1e:a3:8e:71:8e:ef:00:9c:9d:56:36:2f:36:0d:12:61:
         43:09:92:eb:34:09:a5:d3:10:86:6c:1a:b6:eb:f8:89:2c:41:
         b4:b6:dd:77:1e:25:c3:49:cf:41:08:b6:9f:10:21:12:69:87:
         01:d3:04:3d:92:2a:bd:1f:43:cf:17:b1:19:7f:18:86:76:8d:
         d7:3a:78:be:c8:04:08:5b:69:f9:f6:fe:85:85:55:4a:39:58:
         8d:e2:b2:f6:e4:4f:13:5f:88:2e:4d:41:f9:97:7c:43:e9:f0:
         d6:92:23:63:75:35:45:10:76:84:e7:c5:1c:50:71:b6:72:c5:
         04:d6:12:4b:6c:be:96:cc:7d:ca:d4:02:bd:05:5e:a0:45:be:
         54:92:db:cc:93:a8:a6:8f:fc:c2:93:cf:e8:e1:16:e3:0b:c3:
         fd:21:9f:bc:de:ed:58:21:9e:90:36:05:06:58:e2:ec:86:55:
         80:e8:a0:35
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIEAO6LHjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyMDE3MDUyM1oXDTI0MDcyNzE1MDAw
MFowMzExMC8GA1UEAxMoZWZiZDlkNTIyYWVjM2JkNGFlYmZjZTU1NDU0ODMxZDA2
MTJjNDM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7ixmwCkiBP
/Ngc2Jq3VYhWbFjRPgFuSFN6p5xmZMqN1PvBYtmCGTTRbLU/IMg2sCT6FdnibirQ
2BI5PnlWCaiX7DeutHVmu4Wqc+kDsKi3iBmv7lBnE1Hc3dWjn2vWJGo8bn+f+GBm
vqObTNB2rz7S0BhOqG/x3i3icjDE/Ua/eSloj/UT9rX7X4CRo5KxpQhc5w+fHmES
m0jQQ+r9lQJdyuT5tJEtKaOJ09kcqbFKGym9IJh6iLTqcGvr8NO0i3qB+SdsVjQL
vD3+VlSNLZ91T2y9hF0dnvPizZqkKGPGUMUq2Q6TBYRyBnGDAE0TUX4eyvLEST5H
SJbAa1yBkCkCAwEAAaOCAtgwggLUMB0GA1UdDgQWBBQkZqL7sBKqu7sOe7rs6uZc
Ys3FnDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81ZjdiMmViNC0yNjA2
LTRmNWYtYjFlNi1iZTM5YmQ5MzVlNmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWY3YjJlYjQtMjYwNi00
ZjVmLWIxZTYtYmUzOWJkOTM1ZTZiL2VmYmQ5ZDUyMmFlYzNiZDRhZWJmY2U1NTQ1
NDgzMWQwNjEyYzQzNzYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJsjDANBgkqhkiG9w0BAQsFAAOCAQEAf+ph
UE5H3/ON1PiNG5RFixvA6qA8NvRpFBkhJSKjrjnAG2LxaW1yLZYy5g+K5rVifHHM
TH9BPyXySUqK/aaM188Ft8a6owVO3Uweo45xju8AnJ1WNi82DRJhQwmS6zQJpdMQ
hmwatuv4iSxBtLbddx4lw0nPQQi2nxAhEmmHAdMEPZIqvR9DzxexGX8YhnaN1zp4
vsgECFtp+fb+hYVVSjlYjeKy9uRPE1+ILk1B+Zd8Q+nw1pIjY3U1RRB2hOfFHFBx
tnLFBNYSS2y+lsx9ytQCvQVeoEW+VJLbzJOopo/8wpPP6OEW4wvD/SGfvN7tWCGe
kDYFBlji7IZVgOigNQ==
-----END CERTIFICATE-----