Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbb5de8813b22c4c2a2da55c81d5ad2b05a8b7ee.cer
File:                     fbb5de8813b22c4c2a2da55c81d5ad2b05a8b7ee.cer (raw, json)
Hash identifier:          QzwK+6soQGsAON0AlnOYehwVRm1G3HavvSuEaHPe8+Y=
Subject key identifier:   F8:94:E9:2F:7D:4B:48:24:CC:B1:AA:3F:A0:5D:02:09:09:A2:73:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3D8C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4adbd270-3de5-498d-87c4-39a07a239ff8/fbb5de8813b22c4c2a2da55c81d5ad2b05a8b7ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4adbd270-3de5-498d-87c4-39a07a239ff8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 17:32:36 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 129.90.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14932168 (0xe3d8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 17:32:36 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=fbb5de8813b22c4c2a2da55c81d5ad2b05a8b7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:fa:99:0c:c4:a1:89:ed:16:43:b0:60:7a:
                    13:56:1a:5b:a3:f6:ff:30:c9:2e:5f:5e:d3:90:3b:
                    8e:95:2e:44:f3:a4:bd:0e:91:5d:98:76:7a:fa:35:
                    2f:1c:b7:8c:7a:a2:a8:b5:e6:0b:4e:4b:e4:3c:13:
                    01:73:5f:4d:63:07:e7:87:d5:ee:8a:6d:ff:3f:31:
                    96:3d:3f:c9:18:e8:9b:e7:01:4c:a1:7b:45:e6:2d:
                    6e:84:63:26:02:b0:b5:6b:7a:29:42:fc:11:f0:c1:
                    b8:c6:e5:ba:b8:fe:33:86:66:a3:3f:dd:b8:08:4f:
                    36:89:92:38:4e:98:45:c5:19:91:de:2d:3b:73:3f:
                    5e:30:fe:e8:1d:05:32:5b:ae:c1:2f:89:5c:17:eb:
                    f0:bc:2e:ab:df:ee:63:79:99:e0:e9:f5:a8:dc:bb:
                    87:e7:b3:5e:56:98:4a:ce:c7:46:79:d0:4c:a6:de:
                    6b:b0:0c:a7:c6:61:31:45:44:f6:85:e0:65:8c:5c:
                    a8:e7:f1:ac:5e:ae:1e:da:86:13:67:e3:ad:a2:cf:
                    2c:c9:bc:ee:7f:7f:bd:17:eb:8e:61:92:4b:f2:2b:
                    df:ae:ec:49:2b:79:4a:6b:5f:02:e3:33:e1:7e:01:
                    99:b7:1f:73:61:37:aa:85:d0:6f:7b:e1:57:84:33:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:E9:2F:7D:4B:48:24:CC:B1:AA:3F:A0:5D:02:09:09:A2:73:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4adbd270-3de5-498d-87c4-39a07a239ff8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4adbd270-3de5-498d-87c4-39a07a239ff8/fbb5de8813b22c4c2a2da55c81d5ad2b05a8b7ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.90.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:1f:d6:c7:10:60:f2:2a:e9:c1:3b:99:07:fd:07:16:42:
         37:33:47:6d:cc:5e:c5:32:65:73:6e:f6:22:30:19:87:c0:c4:
         55:c1:e4:42:4a:85:cf:6c:48:b8:7b:5c:f2:24:c1:26:9f:62:
         89:ab:2f:b7:1d:df:b4:a1:40:ca:b8:c4:d5:80:76:c2:08:e0:
         f2:11:54:3e:a7:b0:c9:6d:23:97:e3:d4:bd:7c:e2:ca:c4:24:
         b7:60:df:66:5b:88:0c:5b:a0:e6:c4:98:ee:60:32:1c:3a:a8:
         88:30:79:fb:a2:80:59:52:03:a1:88:f3:2c:ee:cd:42:e6:ab:
         f8:eb:b5:ff:ff:6b:dd:4b:31:47:e4:9d:0d:1d:6a:da:5a:ce:
         61:00:f2:16:fd:4e:6f:be:5b:bd:30:90:a8:af:26:3a:b9:4e:
         bd:0c:3b:4a:71:1e:d3:87:ec:dc:54:4b:36:8b:cb:c6:ba:b4:
         b5:f0:29:c3:bc:46:9c:0c:a8:9d:10:40:0f:79:c4:38:f9:24:
         85:0e:45:ee:f5:e9:20:52:55:bb:c9:b2:22:d0:c6:1a:f1:69:
         48:b6:4c:b1:5c:33:64:d4:7b:e3:46:09:91:b2:77:1d:5e:a9:
         0b:fa:80:cd:6a:81:2d:f1:0b:72:56:39:c5:91:75:b0:cc:6f:
         36:dd:f2:95
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIEAOPYyDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwNTE3MzIzNloXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoZmJiNWRlODgxM2IyMmM0YzJhMmRhNTVjODFkNWFkMmIw
NWE4YjdlZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJE1+pkMxKGJ
7RZDsGB6E1YaW6P2/zDJLl9e05A7jpUuRPOkvQ6RXZh2evo1Lxy3jHqiqLXmC05L
5DwTAXNfTWMH54fV7opt/z8xlj0/yRjom+cBTKF7ReYtboRjJgKwtWt6KUL8EfDB
uMblurj+M4Zmoz/duAhPNomSOE6YRcUZkd4tO3M/XjD+6B0FMluuwS+JXBfr8Lwu
q9/uY3mZ4On1qNy7h+ezXlaYSs7HRnnQTKbea7AMp8ZhMUVE9oXgZYxcqOfxrF6u
HtqGE2fjraLPLMm87n9/vRfrjmGSS/Ir367sSSt5SmtfAuMz4X4Bmbcfc2E3qoXQ
b3vhV4QzIxMCAwEAAaOCAt0wggLZMB0GA1UdDgQWBBT4lOkvfUtIJMyxqj+gXQIJ
CaJz/DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YWRiZDI3MC0zZGU1
LTQ5OGQtODdjNC0zOWEwN2EyMzlmZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGFkYmQyNzAtM2RlNS00
OThkLTg3YzQtMzlhMDdhMjM5ZmY4L2ZiYjVkZTg4MTNiMjJjNGMyYTJkYTU1Yzgx
ZDVhZDJiMDVhOGI3ZWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIFaMA0GCSqGSIb3DQEBCwUAA4IB
AQAlpx/WxxBg8irpwTuZB/0HFkI3M0dtzF7FMmVzbvYiMBmHwMRVweRCSoXPbEi4
e1zyJMEmn2KJqy+3Hd+0oUDKuMTVgHbCCODyEVQ+p7DJbSOX49S9fOLKxCS3YN9m
W4gMW6DmxJjuYDIcOqiIMHn7ooBZUgOhiPMs7s1C5qv467X//2vdSzFH5J0NHWra
Ws5hAPIW/U5vvlu9MJCoryY6uU69DDtKcR7Th+zcVEs2i8vGurS18CnDvEacDKid
EEAPecQ4+SSFDkXu9ekgUlW7ybIi0MYa8WlItkyxXDNk1HvjRgmRsncdXqkL+oDN
aoEt8QtyVjnFkXWwzG823fKV
-----END CERTIFICATE-----