Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4e31410d42fedbaa0a5fd1ba6f1f42cde199e94.cer
File:                     f4e31410d42fedbaa0a5fd1ba6f1f42cde199e94.cer (raw, json)
Hash identifier:          gDd/NK4peb1mVx1zFBJUJrCvOTvvFgJjMoh8zN+/Z5E=
Subject key identifier:   83:69:79:CC:8C:1E:E6:55:F9:38:AD:79:FD:62:18:C7:78:E5:BE:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCD0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0cc618cb-48ed-4be9-ae96-93170a4750f8/f4e31410d42fedbaa0a5fd1ba6f1f42cde199e94.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0cc618cb-48ed-4be9-ae96-93170a4750f8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 20:14:09 +0000
Certificate not after:    Tue 29 Jul 2025 06:00:00 +0000
Subordinate resources:    IP: 200.115.72.0/21
                          IP: 2803:cfc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16568571 (0xfcd0fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 13 20:14:09 2023 GMT
            Not After : Jul 29 06:00:00 2025 GMT
        Subject: CN=f4e31410d42fedbaa0a5fd1ba6f1f42cde199e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a9:5c:7c:08:a2:b4:32:74:a0:c2:6d:b4:2c:
                    d2:cf:08:39:b7:e3:87:aa:dc:c8:14:58:98:c8:5d:
                    d7:39:ea:6a:2b:6c:18:33:2c:83:2e:21:87:b0:58:
                    30:b5:69:8d:a1:f7:50:c6:96:a8:2c:1d:73:68:94:
                    ae:71:07:31:98:d1:e3:85:16:53:3a:a3:93:cc:84:
                    01:84:8e:47:8c:7c:cd:30:63:02:37:74:b8:1e:be:
                    ba:b1:64:31:6b:0b:76:14:9b:50:68:59:55:d5:7d:
                    e2:66:9e:55:9d:62:7f:14:63:82:55:f8:d6:76:07:
                    25:19:52:d4:24:4f:66:e9:92:be:2c:f4:45:73:95:
                    b0:a3:e9:03:5e:5a:0b:1e:4b:69:d5:43:11:c2:59:
                    18:b1:8f:d9:5a:38:3a:a2:39:5a:b3:47:ec:74:43:
                    87:7f:f3:66:62:27:cd:79:0a:2c:08:e7:f8:ec:52:
                    2a:29:4e:27:38:4d:21:14:a0:53:e8:af:52:7a:e8:
                    db:a6:36:65:a6:38:4d:85:8c:68:b2:1b:08:22:3d:
                    d4:11:4d:01:2b:2a:a6:16:18:d4:cd:10:4d:65:62:
                    2b:d9:ef:d9:0b:71:20:40:89:33:dc:23:48:c5:36:
                    5f:66:97:f0:f1:9d:24:a2:f7:fa:2f:4b:cd:d4:b7:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:79:CC:8C:1E:E6:55:F9:38:AD:79:FD:62:18:C7:78:E5:BE:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc618cb-48ed-4be9-ae96-93170a4750f8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc618cb-48ed-4be9-ae96-93170a4750f8/f4e31410d42fedbaa0a5fd1ba6f1f42cde199e94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.72.0/21
                IPv6:
                  2803:cfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:c3:50:ef:76:32:21:14:fe:d3:36:db:8c:ca:67:e4:10:
         c7:d7:a5:f6:9c:73:b6:80:2e:c1:19:d0:be:5f:5e:2d:33:3d:
         7a:3f:00:29:43:b4:64:cd:05:71:69:97:a8:90:a3:55:ee:9a:
         b8:30:d3:33:7f:8f:7d:43:97:01:1b:4e:91:1d:2c:d0:ef:4a:
         c6:af:a3:c6:ef:8c:59:13:c1:e1:bc:a9:d2:44:b5:22:6d:82:
         44:be:11:39:d9:8b:a8:e4:aa:e0:1d:3c:f4:e2:ac:e5:ac:b1:
         01:c3:a0:ad:a3:2e:2a:d9:21:b7:b3:45:73:1c:26:df:85:83:
         89:b2:09:1e:73:86:a4:2f:86:19:b8:3d:27:7a:ea:03:7e:13:
         30:fe:e9:0f:44:88:4f:bd:cc:bb:41:db:d4:56:6d:41:db:32:
         73:1c:94:8d:cc:0a:f2:52:c6:57:3f:ec:a9:dd:55:1f:7a:43:
         2d:22:5b:a6:21:ff:e1:8c:c8:33:4b:8a:3b:8e:30:ce:5c:bc:
         d4:92:79:cd:12:db:0e:3e:1a:30:e4:4b:a3:bb:52:b2:db:3d:
         1a:5f:02:93:be:68:a1:d5:61:9e:dd:89:40:f5:6e:91:a6:5e:
         3c:d5:ea:25:8f:04:e6:a9:e9:a6:c5:10:8c:81:94:1c:fc:28:
         96:52:7d:9d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAPzQ+zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAxMzIwMTQwOVoXDTI1MDcyOTA2MDAw
MFowMzExMC8GA1UEAxMoZjRlMzE0MTBkNDJmZWRiYWEwYTVmZDFiYTZmMWY0MmNk
ZTE5OWU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI2pXHwIorQy
dKDCbbQs0s8IObfjh6rcyBRYmMhd1znqaitsGDMsgy4hh7BYMLVpjaH3UMaWqCwd
c2iUrnEHMZjR44UWUzqjk8yEAYSOR4x8zTBjAjd0uB6+urFkMWsLdhSbUGhZVdV9
4maeVZ1ifxRjglX41nYHJRlS1CRPZumSviz0RXOVsKPpA15aCx5LadVDEcJZGLGP
2Vo4OqI5WrNH7HRDh3/zZmInzXkKLAjn+OxSKilOJzhNIRSgU+ivUnro26Y2ZaY4
TYWMaLIbCCI91BFNASsqphYY1M0QTWViK9nv2QtxIECJM9wjSMU2X2aX8PGdJKL3
+i9LzdS3xccCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBSDaXnMjB7mVfk4rXn9YhjH
eOW+XTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wY2M2MThjYi00OGVk
LTRiZTktYWU5Ni05MzE3MGE0NzUwZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGNjNjE4Y2ItNDhlZC00
YmU5LWFlOTYtOTMxNzBhNDc1MGY4L2Y0ZTMxNDEwZDQyZmVkYmFhMGE1ZmQxYmE2
ZjFmNDJjZGUxOTllOTQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA8hzSDANBAIAAjAHAwUAKAPPwDAN
BgkqhkiG9w0BAQsFAAOCAQEAbirDUO92MiEU/tM224zKZ+QQx9el9pxztoAuwRnQ
vl9eLTM9ej8AKUO0ZM0FcWmXqJCjVe6auDDTM3+PfUOXARtOkR0s0O9Kxq+jxu+M
WRPB4byp0kS1Im2CRL4ROdmLqOSq4B089OKs5ayxAcOgraMuKtkht7NFcxwm34WD
ibIJHnOGpC+GGbg9J3rqA34TMP7pD0SIT73Mu0Hb1FZtQdsycxyUjcwK8lLGVz/s
qd1VH3pDLSJbpiH/4YzIM0uKO44wzly81JJ5zRLbDj4aMORLo7tSsts9Gl8Ck75o
odVhnt2JQPVukaZePNXqJY8E5qnppsUQjIGUHPwollJ9nQ==
-----END CERTIFICATE-----