Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/325cea8e6072507cfceb67a04c253cbee6446cf3.cer
File:                     325cea8e6072507cfceb67a04c253cbee6446cf3.cer (raw, json)
Hash identifier:          Wg8TFqkn0FPg/se4V4QPm7Qz+Nt2Bcgnr0URJA7g4bM=
Subject key identifier:   DF:E4:13:C7:0E:88:35:CD:1F:B7:FB:89:81:98:BF:9D:05:42:5C:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103DB35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/325cea8e6072507cfceb67a04c253cbee6446cf3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Feb 2023 12:07:16 +0000
Certificate not after:    Mon 13 Jan 2025 18:04:00 +0000
Subordinate resources:    AS: 269970
                          IP: 24.152.57.0/24
                          IP: 2803:36e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17029941 (0x103db35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 12:07:16 2023 GMT
            Not After : Jan 13 18:04:00 2025 GMT
        Subject: CN=325cea8e6072507cfceb67a04c253cbee6446cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:16:9e:97:81:0e:c1:83:19:4f:39:7d:69:
                    1b:34:b8:ff:0d:d7:a7:ee:3f:16:67:a3:ac:34:ff:
                    34:ca:ae:48:02:fc:fb:05:30:16:24:77:72:06:9b:
                    94:0c:1e:28:7d:8e:33:85:7e:e4:9b:73:8c:34:85:
                    39:1a:aa:64:4f:f1:fb:7a:58:03:b7:a7:ce:99:f3:
                    23:94:60:5c:b1:02:a0:36:a7:d5:a1:c8:56:51:cf:
                    09:e3:a4:e8:14:28:90:bc:bd:b0:2c:29:00:cd:1a:
                    c7:74:67:12:d9:db:3f:87:d7:1d:fe:b8:75:9f:f9:
                    33:64:74:5d:f7:50:10:82:35:98:31:13:69:7c:fe:
                    23:81:e3:fd:3e:a4:51:7b:d0:6a:a8:a3:43:88:f2:
                    22:ec:8f:d2:f9:7c:3b:42:cc:68:e4:c6:10:88:9c:
                    03:08:db:06:c2:3d:94:b5:49:1d:eb:16:ae:3a:45:
                    0f:7f:97:df:9b:f1:a6:cc:86:79:9a:4d:89:00:b7:
                    05:fd:a5:10:35:4a:a2:38:1e:06:ed:0f:1d:85:bb:
                    5c:7c:69:df:32:f4:2c:f8:60:5f:a4:4f:97:d8:fe:
                    bc:18:b4:87:0c:5a:f1:49:98:88:ef:1a:bf:55:db:
                    ec:98:af:2c:b2:18:58:8a:66:db:d3:ed:9b:90:d6:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E4:13:C7:0E:88:35:CD:1F:B7:FB:89:81:98:BF:9D:05:42:5C:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/325cea8e6072507cfceb67a04c253cbee6446cf3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.57.0/24
                IPv6:
                  2803:36e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269970

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:ba:81:2c:fb:24:a6:a1:43:ab:fe:13:e5:e4:e8:2c:5a:
         ca:05:9c:14:fe:da:06:78:20:2a:11:93:af:e8:3a:e7:33:40:
         a8:b7:43:c5:e7:36:40:ac:57:c7:fd:be:4b:32:1f:6a:a8:1a:
         3b:9a:92:d2:d2:50:ec:39:dd:69:94:35:aa:38:72:05:c4:51:
         2a:55:55:d3:30:00:7d:80:28:94:b2:63:f1:54:54:31:fb:fd:
         4b:38:6a:ed:f6:ae:75:2b:30:66:1a:cf:01:55:a0:0e:8e:c6:
         cf:d3:8d:28:11:96:dc:a1:78:a5:c2:dd:0a:62:a5:fc:49:4f:
         8f:c0:6c:6d:79:10:85:0a:b1:bd:f6:69:1c:c3:20:22:95:92:
         47:02:6e:bc:f7:95:5e:1d:4c:b9:94:34:0f:90:3f:20:74:99:
         0d:5c:f2:06:85:3a:f0:ce:c0:6b:99:a3:b3:08:d7:d8:b0:a5:
         bd:f5:0e:2e:dc:7f:a4:d2:6d:95:f0:5a:2e:ce:02:b3:bd:11:
         3c:53:09:fa:61:42:d5:aa:35:06:7a:3b:2a:a9:dc:b0:94:b3:
         5a:15:dc:b1:f0:a8:91:66:aa:1f:b1:2b:54:61:53:1a:c0:b1:
         91:2a:4e:95:c8:43:ef:1f:6e:24:fd:52:4d:25:5e:c2:e3:e2:
         2e:02:b4:5f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQPbNTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDIxNDEyMDcxNloXDTI1MDExMzE4MDQw
MFowMzExMC8GA1UEAxMoMzI1Y2VhOGU2MDcyNTA3Y2ZjZWI2N2EwNGMyNTNjYmVl
NjQ0NmNmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpXFp6XgQ7B
gxlPOX1pGzS4/w3Xp+4/FmejrDT/NMquSAL8+wUwFiR3cgablAweKH2OM4V+5Jtz
jDSFORqqZE/x+3pYA7enzpnzI5RgXLECoDan1aHIVlHPCeOk6BQokLy9sCwpAM0a
x3RnEtnbP4fXHf64dZ/5M2R0XfdQEII1mDETaXz+I4Hj/T6kUXvQaqijQ4jyIuyP
0vl8O0LMaOTGEIicAwjbBsI9lLVJHesWrjpFD3+X35vxpsyGeZpNiQC3Bf2lEDVK
ojgeBu0PHYW7XHxp3zL0LPhgX6RPl9j+vBi0hwxa8UmYiO8av1Xb7JivLLIYWIpm
29Ptm5DW3NcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTf5BPHDog1zR+3+4mBmL+d
BUJcUTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YjdkZTllYS1jNmE0
LTRjYmQtOTZkMC0yMmQ5MzFlYzNkNDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGI3ZGU5ZWEtYzZhNC00
Y2JkLTk2ZDAtMjJkOTMxZWMzZDQ5LzMyNWNlYThlNjA3MjUwN2NmY2ViNjdhMDRj
MjUzY2JlZTY0NDZjZjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEABiYOTANBAIAAjAHAwUAKAM24DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHpIwDQYJKoZIhvcNAQELBQADggEBAB6z
uoEs+ySmoUOr/hPl5OgsWsoFnBT+2gZ4ICoRk6/oOuczQKi3Q8XnNkCsV8f9vksy
H2qoGjuaktLSUOw53WmUNao4cgXEUSpVVdMwAH2AKJSyY/FUVDH7/Us4au32rnUr
MGYazwFVoA6Oxs/TjSgRltyheKXC3QpipfxJT4/AbG15EIUKsb32aRzDICKVkkcC
brz3lV4dTLmUNA+QPyB0mQ1c8gaFOvDOwGuZo7MI19iwpb31Di7cf6TSbZXwWi7O
ArO9ETxTCfphQtWqNQZ6Oyqp3LCUs1oV3LHwqJFmqh+xK1RhUxrAsZEqTpXIQ+8f
biT9Uk0lXsLj4i4CtF8=
-----END CERTIFICATE-----