Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0238f240432faab6aaeb0fd73ab8860c07974b27.cer
File:                     0238f240432faab6aaeb0fd73ab8860c07974b27.cer (raw, json)
Hash identifier:          /MbmuR/VKa3fOqqk2KcsD8+vBQTbuvQc3L522nHqPdg=
Subject key identifier:   30:6F:2E:78:AC:71:E0:99:3A:BF:95:82:3A:D4:B1:AC:BD:98:36:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100AA99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e532a94-fad2-4791-bcb5-a255b4ac56c8/0238f240432faab6aaeb0fd73ab8860c07974b27.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e532a94-fad2-4791-bcb5-a255b4ac56c8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Aug 2023 19:53:07 +0000
Certificate not after:    Tue 25 Mar 2025 15:46:48 +0000
Subordinate resources:    AS: 273012
                          IP: 69.164.98.0/24
                          IP: 2803:4390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16820889 (0x100aa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  7 19:53:07 2023 GMT
            Not After : Mar 25 15:46:48 2025 GMT
        Subject: CN=0238f240432faab6aaeb0fd73ab8860c07974b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:61:12:0e:46:3b:5f:49:3d:45:f9:ed:b9:
                    23:2a:7c:18:4a:b3:17:c5:9e:64:31:53:91:45:23:
                    4e:19:29:a1:ae:a4:63:81:54:62:0a:e1:b2:8d:a5:
                    3a:ab:2d:e3:db:81:8f:48:c7:75:8c:25:f4:64:db:
                    57:6f:98:7c:a2:72:7e:c0:51:0d:5d:38:db:5c:43:
                    83:92:08:19:aa:d1:47:57:11:e6:8b:34:a2:7a:4e:
                    21:b8:5f:95:41:da:b6:c2:af:3b:44:f9:b8:7e:87:
                    48:28:b2:83:c6:c5:26:52:ff:a4:1e:72:88:b7:f9:
                    43:58:a6:f1:f5:51:94:38:3a:8b:06:34:d1:ce:22:
                    30:0b:5a:45:84:8b:30:c5:cd:99:59:e2:e8:b5:06:
                    7c:86:2c:45:23:cd:84:2b:a7:11:86:e8:df:6a:ec:
                    55:32:06:0c:46:ab:0a:83:86:3d:f9:2f:5d:a0:dd:
                    5e:97:fc:bd:31:a8:ae:35:94:f1:d2:f3:14:32:4a:
                    ec:48:51:56:21:45:d9:2f:b1:61:c5:7c:14:61:ce:
                    6c:d2:3d:ae:d0:ad:cc:c8:9a:be:f9:7c:99:f7:47:
                    c9:1d:da:4a:c3:a3:9e:1c:c6:e8:0f:63:43:83:ba:
                    6a:78:5c:77:c0:d1:21:e8:8a:09:02:b4:d2:1b:69:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:2E:78:AC:71:E0:99:3A:BF:95:82:3A:D4:B1:AC:BD:98:36:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e532a94-fad2-4791-bcb5-a255b4ac56c8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e532a94-fad2-4791-bcb5-a255b4ac56c8/0238f240432faab6aaeb0fd73ab8860c07974b27.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.98.0/24
                IPv6:
                  2803:4390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273012

    Signature Algorithm: sha256WithRSAEncryption
         97:76:d2:80:ef:66:25:71:30:50:d9:f6:40:b5:3c:20:dd:f0:
         a7:bc:af:0b:83:b0:c0:b1:88:d0:85:84:65:30:38:bc:9d:3a:
         56:76:99:60:12:72:9d:c9:69:5d:4a:09:b6:c1:ef:9e:22:a5:
         a6:fa:18:22:15:a7:16:c4:55:a7:86:09:5c:69:77:9a:b8:ad:
         ad:79:6c:cf:22:9e:f9:62:10:e2:5a:8a:25:11:48:dc:31:82:
         97:5e:1f:b0:ce:a1:b7:85:3c:4c:b5:d5:ec:76:18:f8:ae:12:
         71:76:b2:48:a6:9c:83:0d:5b:29:34:a6:75:35:72:f0:13:53:
         e4:50:e0:31:2c:1b:aa:ca:78:03:67:9c:fb:04:6e:cd:cf:fa:
         c2:7b:57:e7:13:bd:de:36:45:1a:09:db:ba:3f:6d:4b:77:72:
         d5:02:9a:43:16:ed:b3:08:22:7e:fe:da:96:6d:59:7e:22:dc:
         e1:50:27:1f:6c:7f:4b:f3:40:08:06:86:92:f5:00:13:42:44:
         30:e6:e3:99:c7:2d:45:cf:8c:17:3c:25:de:e5:18:d6:1b:38:
         0c:62:34:31:a0:05:34:09:68:97:16:0e:b8:12:9c:60:83:95:
         ec:08:7c:02:33:b4:b1:23:0b:1c:27:4f:da:ae:bc:ee:d7:8e:
         01:2c:03:a4
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQCqmTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgwNzE5NTMwN1oXDTI1MDMyNTE1NDY0
OFowMzExMC8GA1UEAxMoMDIzOGYyNDA0MzJmYWFiNmFhZWIwZmQ3M2FiODg2MGMw
Nzk3NGIyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbdYRIORjtf
ST1F+e25Iyp8GEqzF8WeZDFTkUUjThkpoa6kY4FUYgrhso2lOqst49uBj0jHdYwl
9GTbV2+YfKJyfsBRDV0421xDg5IIGarRR1cR5os0onpOIbhflUHatsKvO0T5uH6H
SCiyg8bFJlL/pB5yiLf5Q1im8fVRlDg6iwY00c4iMAtaRYSLMMXNmVni6LUGfIYs
RSPNhCunEYbo32rsVTIGDEarCoOGPfkvXaDdXpf8vTGorjWU8dLzFDJK7EhRViFF
2S+xYcV8FGHObNI9rtCtzMiavvl8mfdHyR3aSsOjnhzG6A9jQ4O6anhcd8DRIeiK
CQK00htp/K0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQwby54rHHgmTq/lYI61LGs
vZg2pDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yZTUzMmE5NC1mYWQy
LTQ3OTEtYmNiNS1hMjU1YjRhYzU2YzgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmU1MzJhOTQtZmFkMi00
NzkxLWJjYjUtYTI1NWI0YWM1NmM4LzAyMzhmMjQwNDMyZmFhYjZhYWViMGZkNzNh
Yjg4NjBjMDc5NzRiMjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAEWkYjANBAIAAjAHAwUAKANDkDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKnQwDQYJKoZIhvcNAQELBQADggEBAJd2
0oDvZiVxMFDZ9kC1PCDd8Ke8rwuDsMCxiNCFhGUwOLydOlZ2mWAScp3JaV1KCbbB
754ipab6GCIVpxbEVaeGCVxpd5q4ra15bM8invliEOJaiiURSNwxgpdeH7DOobeF
PEy11ex2GPiuEnF2skimnIMNWyk0pnU1cvATU+RQ4DEsG6rKeANnnPsEbs3P+sJ7
V+cTvd42RRoJ27o/bUt3ctUCmkMW7bMIIn7+2pZtWX4i3OFQJx9sf0vzQAgGhpL1
ABNCRDDm45nHLUXPjBc8Jd7lGNYbOAxiNDGgBTQJaJcWDrgSnGCDlewIfAIztLEj
CxwnT9quvO7XjgEsA6Q=
-----END CERTIFICATE-----