Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02a84420e5b011e20166eecfe35fb948df48f47.cer
File:                     f02a84420e5b011e20166eecfe35fb948df48f47.cer (raw, json)
Hash identifier:          q6tVv6sChQ4eCysB/a9smuaBJHBx90tGu7QfCsVC/jU=
Subject key identifier:   89:9C:98:0D:48:C3:75:81:2B:0B:16:D3:8D:E5:48:C1:93:B0:20:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAB703
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/f02a84420e5b011e20166eecfe35fb948df48f47.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 13:37:23 +0000
Certificate not after:    Sat 07 Sep 2024 16:58:48 +0000
Subordinate resources:    AS: 269834
                          IP: 45.188.212.0/22
                          IP: 2803:6f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15382275 (0xeab703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 13:37:23 2023 GMT
            Not After : Sep  7 16:58:48 2024 GMT
        Subject: CN=f02a84420e5b011e20166eecfe35fb948df48f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:5e:d6:58:3c:e0:07:5f:38:40:8d:1c:04:
                    6b:bb:8b:33:7e:c1:c8:92:78:5f:c3:ca:4f:ea:61:
                    dc:06:1e:e1:7b:bb:71:64:06:45:9b:0a:be:2c:81:
                    b6:0b:ef:fa:c4:67:91:a0:47:42:60:15:c3:d5:6a:
                    70:aa:12:2f:45:43:fa:04:74:4f:cd:07:03:ef:07:
                    db:1e:6b:97:70:63:14:4c:89:81:fe:54:70:4d:5a:
                    54:51:8e:50:71:69:4f:f9:5c:3f:16:57:fa:09:73:
                    61:2d:e2:fc:c8:37:28:a4:7e:9f:72:c5:05:b4:08:
                    8a:ce:f6:49:e9:15:e6:00:6c:46:7a:e3:bb:49:cc:
                    f1:f6:97:6d:a7:d5:17:1c:46:60:d2:89:76:44:c5:
                    7b:99:91:c4:b8:4a:f9:04:aa:76:7e:03:f8:df:d1:
                    80:9b:f5:02:04:2d:65:c2:15:f0:7c:78:bb:f2:7b:
                    fb:b7:8e:24:7e:11:fb:aa:c2:a1:f9:86:88:6c:17:
                    e0:6a:bf:21:ae:a4:c2:90:c6:5c:bc:92:63:de:02:
                    1b:af:68:55:27:f2:cd:bf:61:e9:d5:7c:c9:77:8b:
                    04:93:2c:b8:f1:3f:20:1c:21:dc:ef:8b:a5:7e:b4:
                    77:01:c1:50:a5:aa:0c:14:72:d3:eb:51:99:07:82:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9C:98:0D:48:C3:75:81:2B:0B:16:D3:8D:E5:48:C1:93:B0:20:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/f02a84420e5b011e20166eecfe35fb948df48f47.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.212.0/22
                IPv6:
                  2803:6f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269834

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:9b:65:2e:18:67:ff:44:03:04:dc:91:16:20:ef:88:5b:
         c1:98:a5:c6:16:18:88:e0:e1:b6:22:b9:6c:ea:42:68:d5:a0:
         35:d5:b7:ed:3f:d0:b3:65:8c:42:8e:3c:f2:d5:94:12:e9:e2:
         08:f0:ed:44:b3:1c:4e:2d:98:0f:c7:fc:e1:d6:b4:7b:ad:d3:
         e7:7d:c9:2e:60:ba:a7:70:81:eb:ef:80:31:ca:5e:52:1a:00:
         6f:2d:7c:28:06:a4:24:0e:69:3f:a5:45:f7:5a:af:b9:73:a2:
         45:a5:e4:1e:49:13:7c:ef:12:f9:e2:3c:d6:67:11:61:88:4d:
         0c:29:e9:9e:69:2b:e4:09:05:60:c7:1e:57:34:83:ef:df:79:
         3a:db:f6:2e:6f:03:97:fa:ae:be:3d:b8:2e:35:b6:6a:6a:83:
         d0:89:6a:ea:ee:3d:90:36:7b:ea:55:98:86:2a:0f:a7:b9:f8:
         2b:50:8a:c5:39:f7:f5:76:ea:4f:4c:de:3a:40:b7:3f:32:32:
         14:29:23:b8:3f:79:53:74:db:3c:ef:c0:f2:99:1f:d9:c4:92:
         3b:67:b5:f0:cb:06:4c:b4:0c:ef:b4:0f:cd:4e:cc:ea:26:20:
         53:69:01:41:c7:98:e6:18:12:dc:0c:3f:85:f4:c5:0f:24:dc:
         3f:ec:0f:c9
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOq3AzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUyMjEzMzcyM1oXDTI0MDkwNzE2NTg0
OFowMzExMC8GA1UEAxMoZjAyYTg0NDIwZTViMDExZTIwMTY2ZWVjZmUzNWZiOTQ4
ZGY0OGY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIjMXtZYPOAH
XzhAjRwEa7uLM37ByJJ4X8PKT+ph3AYe4Xu7cWQGRZsKviyBtgvv+sRnkaBHQmAV
w9VqcKoSL0VD+gR0T80HA+8H2x5rl3BjFEyJgf5UcE1aVFGOUHFpT/lcPxZX+glz
YS3i/Mg3KKR+n3LFBbQIis72SekV5gBsRnrju0nM8faXbafVFxxGYNKJdkTFe5mR
xLhK+QSqdn4D+N/RgJv1AgQtZcIV8Hx4u/J7+7eOJH4R+6rCofmGiGwX4Gq/Ia6k
wpDGXLySY94CG69oVSfyzb9h6dV8yXeLBJMsuPE/IBwh3O+LpX60dwHBUKWqDBRy
0+tRmQeCKKkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSJnJgNSMN1gSsLFtON5UjB
k7AgiTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMjllMThhZC1lMTk1
LTQ1ZWYtYmU5Mi04OGU3MTk0ODg0ZGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjI5ZTE4YWQtZTE5NS00
NWVmLWJlOTItODhlNzE5NDg4NGRmL2YwMmE4NDQyMGU1YjAxMWUyMDE2NmVlY2Zl
MzVmYjk0OGRmNDhmNDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi281DANBAIAAjAHAwUAKANvYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHgowDQYJKoZIhvcNAQELBQADggEBAC7T
m2UuGGf/RAME3JEWIO+IW8GYpcYWGIjg4bYiuWzqQmjVoDXVt+0/0LNljEKOPPLV
lBLp4gjw7USzHE4tmA/H/OHWtHut0+d9yS5guqdwgevvgDHKXlIaAG8tfCgGpCQO
aT+lRfdar7lzokWl5B5JE3zvEvniPNZnEWGITQwp6Z5pK+QJBWDHHlc0g+/feTrb
9i5vA5f6rr49uC41tmpqg9CJauruPZA2e+pVmIYqD6e5+CtQisU59/V26k9M3jpA
tz8yMhQpI7g/eVN02zzvwPKZH9nEkjtntfDLBky0DO+0D81OzOomIFNpAUHHmOYY
EtwMP4X0xQ8k3D/sD8k=
-----END CERTIFICATE-----