Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1a10c824c02ea5f5caf36a29d9398d60269ad44.cer
File:                     f1a10c824c02ea5f5caf36a29d9398d60269ad44.cer (raw, json)
Hash identifier:          O9/VRyA3/mhr9peWjsmHi8fq0WsQiPrBvQ7Tfx3jOkU=
Subject key identifier:   5A:90:1C:7F:A9:F2:D4:46:DF:BE:F4:5A:9C:EB:C5:01:C6:3A:53:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9E7A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9ea6b2ec-a204-40d9-8211-35bd71dfa159/f1a10c824c02ea5f5caf36a29d9398d60269ad44.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9ea6b2ec-a204-40d9-8211-35bd71dfa159/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 19:45:38 +0000
Certificate not after:    Wed 10 Jul 2024 15:37:46 +0000
Subordinate resources:    AS: 266903
                          IP: 45.162.0.0/22
                          IP: 2801:1f4::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15329188 (0xe9e7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 19:45:38 2023 GMT
            Not After : Jul 10 15:37:46 2024 GMT
        Subject: CN=f1a10c824c02ea5f5caf36a29d9398d60269ad44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:bc:50:07:08:ee:28:17:8e:fb:de:84:f7:
                    c4:0b:5e:fc:11:d7:ec:39:18:f3:e4:57:c7:46:ad:
                    23:4b:8d:df:7f:45:a9:ad:4e:89:c0:d6:9f:fe:81:
                    cc:6e:0e:24:26:73:95:dc:ee:53:d1:5e:91:01:4c:
                    44:6f:94:f2:cf:94:1f:fa:94:48:79:35:7f:dd:08:
                    1d:2a:f9:30:21:40:57:45:0b:67:68:0a:e1:37:22:
                    da:10:54:6b:7e:7a:d5:0d:95:f1:ee:83:c3:8d:7b:
                    fd:68:d0:c5:a1:15:96:59:fb:6f:ff:48:71:d3:b0:
                    bb:a6:92:b2:a3:25:69:72:69:d6:64:59:91:a8:ce:
                    66:d6:51:36:77:5b:32:d6:31:06:ea:41:ed:45:07:
                    24:91:12:cb:a0:e0:76:06:b4:18:52:a8:a6:f0:b5:
                    e4:13:a3:c9:d3:e9:cd:7c:6c:88:b4:b1:b3:6b:f2:
                    47:ff:f0:21:5d:d9:d4:75:d2:27:8d:ce:72:a0:4e:
                    e3:8c:23:59:64:68:22:49:b0:5a:22:5f:fc:de:eb:
                    d0:66:c7:aa:f1:dd:92:8d:9b:38:5e:db:f3:0e:86:
                    76:d9:36:1c:47:63:79:08:35:33:b4:c7:af:45:62:
                    47:99:b6:ba:eb:1a:10:df:b2:f3:50:dd:9c:b0:d9:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:1C:7F:A9:F2:D4:46:DF:BE:F4:5A:9C:EB:C5:01:C6:3A:53:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9ea6b2ec-a204-40d9-8211-35bd71dfa159/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9ea6b2ec-a204-40d9-8211-35bd71dfa159/f1a10c824c02ea5f5caf36a29d9398d60269ad44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.0.0/22
                IPv6:
                  2801:1f4::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266903

    Signature Algorithm: sha256WithRSAEncryption
         c1:fc:c1:95:17:b0:e3:b9:35:cf:f9:7b:51:21:6f:54:b7:aa:
         71:bd:a8:28:76:58:b6:91:fd:c8:f9:46:f2:2c:60:c9:a8:22:
         d0:be:a3:a1:23:05:6a:a6:96:5a:56:0d:44:4a:d6:95:b8:43:
         ee:a8:ad:7d:4b:dd:39:f1:72:39:96:a2:1e:fd:ee:df:0d:f8:
         47:7c:01:5e:02:2f:25:96:4e:0e:d9:e9:fc:26:bf:79:34:82:
         e9:08:88:9c:0d:12:e0:2f:e1:43:26:6b:57:f4:f7:35:e9:7b:
         bb:2c:25:9b:7a:b0:3a:27:de:31:e5:a1:67:77:ec:ba:fa:97:
         d6:7f:a3:8c:c6:ac:63:79:85:64:d7:e1:0c:57:06:df:2a:0e:
         6a:9d:d1:05:bf:31:70:1a:c6:ff:1f:cb:0a:d5:e2:26:08:b0:
         11:76:12:30:ee:31:d4:00:76:1b:ec:45:af:db:9c:c7:68:1c:
         9d:b7:f9:a6:ef:c3:b0:d7:e5:3c:e8:79:e3:f3:12:29:69:58:
         2d:0f:d6:cc:c2:f4:bc:6b:e3:7e:8b:ad:df:f2:7e:06:36:45:
         45:57:db:49:1e:1d:c7:fb:a6:43:10:d2:33:f6:f3:47:e7:a3:
         04:ec:76:e9:ad:f8:58:67:26:ef:54:91:62:6b:f9:45:26:09:
         b3:f0:b8:69
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgIEAOnnpDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxNTE5NDUzOFoXDTI0MDcxMDE1Mzc0
NlowMzExMC8GA1UEAxMoZjFhMTBjODI0YzAyZWE1ZjVjYWYzNmEyOWQ5Mzk4ZDYw
MjY5YWQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTMvFAHCO4o
F4773oT3xAte/BHX7DkY8+RXx0atI0uN339Fqa1OicDWn/6BzG4OJCZzldzuU9Fe
kQFMRG+U8s+UH/qUSHk1f90IHSr5MCFAV0ULZ2gK4Tci2hBUa3561Q2V8e6Dw417
/WjQxaEVlln7b/9IcdOwu6aSsqMlaXJp1mRZkajOZtZRNndbMtYxBupB7UUHJJES
y6Dgdga0GFKopvC15BOjydPpzXxsiLSxs2vyR//wIV3Z1HXSJ43OcqBO44wjWWRo
IkmwWiJf/N7r0GbHqvHdko2bOF7b8w6Gdtk2HEdjeQg1M7THr0ViR5m2uusaEN+y
81DdnLDZdTsCAwEAAaOCAwowggMGMB0GA1UdDgQWBBRakBx/qfLURt++9Fqc68UB
xjpTHjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZWE2YjJlYy1hMjA0
LTQwZDktODIxMS0zNWJkNzFkZmExNTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWVhNmIyZWMtYTIwNC00
MGQ5LTgyMTEtMzViZDcxZGZhMTU5L2YxYTEwYzgyNGMwMmVhNWY1Y2FmMzZhMjlk
OTM5OGQ2MDI2OWFkNDQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAi2iADAOBAIAAjAIAwYAKAEB9AAw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBKXMA0GCSqGSIb3DQEBCwUAA4IBAQDB
/MGVF7DjuTXP+XtRIW9Ut6pxvagodli2kf3I+UbyLGDJqCLQvqOhIwVqppZaVg1E
StaVuEPuqK19S9058XI5lqIe/e7fDfhHfAFeAi8llk4O2en8Jr95NILpCIicDRLg
L+FDJmtX9Pc16Xu7LCWberA6J94x5aFnd+y6+pfWf6OMxqxjeYVk1+EMVwbfKg5q
ndEFvzFwGsb/H8sK1eImCLARdhIw7jHUAHYb7EWv25zHaBydt/mm78Ow1+U86Hnj
8xIpaVgtD9bMwvS8a+N+i63f8n4GNkVFV9tJHh3H+6ZDENIz9vNH56ME7HbprfhY
ZybvVJFia/lFJgmz8Lhp
-----END CERTIFICATE-----