Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer
File:                     064899b606f78a681c0fd0649043cb728d259f11.cer (raw, json)
Hash identifier:          T/ywQhv2+heSZOzoymxu7fcuVndL1AAt9jSVmO2w+WE=
Subject key identifier:   CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D79448
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Apr 2021 04:08:12 +0000
Certificate not after:    Tue 19 Dec 2023 16:38:55 +0000
Subordinate resources:    AS: 267904
                          IP: 45.230.248.0/22
                          IP: 2803:f320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14128200 (0xd79448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 04:08:12 2021 GMT
            Not After : Dec 19 16:38:55 2023 GMT
        Subject: CN=064899b606f78a681c0fd0649043cb728d259f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:60:39:41:25:ea:b3:a4:9e:49:05:d2:c9:
                    a2:96:68:96:92:e8:9b:c1:04:25:fd:03:65:13:07:
                    6f:37:c0:0d:32:58:6d:c1:38:a5:52:16:45:38:9b:
                    a1:a2:58:e5:f3:42:a3:35:92:6c:ed:1b:1d:36:b5:
                    90:fb:1a:1f:a1:f6:16:c1:28:cd:20:b5:a5:20:72:
                    81:1e:43:3f:ed:52:c4:10:3d:ba:62:d5:79:bb:c1:
                    da:f8:8b:09:1c:f6:cb:8c:1d:18:e7:32:ed:72:91:
                    33:d6:dc:28:db:c0:cd:af:bc:29:af:4b:37:aa:82:
                    14:bc:09:3f:ee:62:8a:c3:30:f6:56:af:66:ab:04:
                    dd:95:9e:b8:72:fd:c7:27:0c:17:8b:35:31:b5:d6:
                    d4:c7:00:5f:7c:bd:9c:94:09:9b:84:fb:49:98:d2:
                    89:29:62:c8:b8:c4:95:14:33:ec:c8:0d:79:62:2b:
                    f3:cf:43:2a:ac:3e:fe:eb:12:88:12:3e:88:07:10:
                    57:ae:80:10:75:0b:94:2c:43:3f:01:d1:09:7c:7f:
                    ba:fe:90:2f:79:03:64:7a:df:26:ed:49:e3:81:41:
                    10:d6:e6:27:d3:8d:cb:e5:2c:9a:e7:fc:06:04:b9:
                    4a:bf:1a:9a:da:bb:f8:24:5d:cb:89:c0:e9:f4:34:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.248.0/22
                IPv6:
                  2803:f320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267904

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:90:1c:0f:2c:04:da:ab:a2:56:8d:67:59:d6:c9:a8:61:
         cc:e2:eb:e9:3b:a6:80:43:78:95:51:cb:a3:8b:c8:55:d2:bb:
         39:21:0d:01:84:e3:31:3d:3e:9f:3e:a4:fb:62:4f:9c:38:c7:
         3c:35:1b:d9:e2:11:3e:2f:fe:66:05:0f:8e:0f:59:9a:41:c8:
         04:e7:23:5c:b7:5c:09:8a:52:0a:ea:0b:4e:43:61:73:69:8c:
         a3:e2:83:e8:55:65:ec:e7:0f:33:a5:63:38:99:82:71:f3:eb:
         5a:e0:3f:29:bc:d5:b6:25:b1:88:1b:b6:06:2d:f4:6d:37:b4:
         4f:e9:c7:22:49:10:92:8e:19:fd:23:e2:8e:29:e4:80:a4:40:
         49:dd:59:a0:ee:1b:de:0d:65:01:d0:98:2a:21:9b:43:f5:62:
         73:ad:fb:64:e5:3b:3d:96:ee:bc:c1:14:88:9e:81:05:71:63:
         75:1c:f6:05:82:fb:c9:33:8d:d6:fa:ac:23:34:92:b8:f7:d0:
         5b:fe:dc:46:fa:6e:bc:69:d6:31:3b:18:6f:d0:5e:ba:57:0f:
         4a:fe:84:6f:ac:3b:43:a7:d3:f6:5c:fe:45:ba:04:4d:36:fe:
         c5:69:32:e3:9b:5d:eb:b2:17:50:c3:7e:71:a1:16:af:4c:6e:
         6b:da:46:63
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANeUSDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQxOTA0MDgxMloXDTIzMTIxOTE2Mzg1
NVowMzExMC8GA1UEAxMoMDY0ODk5YjYwNmY3OGE2ODFjMGZkMDY0OTA0M2NiNzI4
ZDI1OWYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUFYDlBJeqz
pJ5JBdLJopZolpLom8EEJf0DZRMHbzfADTJYbcE4pVIWRTiboaJY5fNCozWSbO0b
HTa1kPsaH6H2FsEozSC1pSBygR5DP+1SxBA9umLVebvB2viLCRz2y4wdGOcy7XKR
M9bcKNvAza+8Ka9LN6qCFLwJP+5iisMw9lavZqsE3ZWeuHL9xycMF4s1MbXW1McA
X3y9nJQJm4T7SZjSiSliyLjElRQz7MgNeWIr889DKqw+/usSiBI+iAcQV66AEHUL
lCxDPwHRCXx/uv6QL3kDZHrfJu1J44FBENbmJ9ONy+Usmuf8BgS5Sr8amtq7+CRd
y4nA6fQ0aX0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTOW9XJsyqmteL5khf3DVIZ
d/4L2DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jZDc5OTA3ZC1hOWNj
LTRhOTMtYTc5My0wMzQ2M2JiNzFmOTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2Q3OTkwN2QtYTljYy00
YTkzLWE3OTMtMDM0NjNiYjcxZjk2LzA2NDg5OWI2MDZmNzhhNjgxYzBmZDA2NDkw
NDNjYjcyOGQyNTlmMTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3m+DANBAIAAjAHAwUAKAPzIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFoAwDQYJKoZIhvcNAQELBQADggEBAHvN
kBwPLATaq6JWjWdZ1smoYczi6+k7poBDeJVRy6OLyFXSuzkhDQGE4zE9Pp8+pPti
T5w4xzw1G9niET4v/mYFD44PWZpByATnI1y3XAmKUgrqC05DYXNpjKPig+hVZezn
DzOlYziZgnHz61rgPym81bYlsYgbtgYt9G03tE/pxyJJEJKOGf0j4o4p5ICkQEnd
WaDuG94NZQHQmCohm0P1YnOt+2TlOz2W7rzBFIiegQVxY3Uc9gWC+8kzjdb6rCM0
krj30Fv+3Eb6brxp1jE7GG/QXrpXD0r+hG+sO0On0/Zc/kW6BE02/sVpMuObXeuy
F1DDfnGhFq9MbmvaRmM=
-----END CERTIFICATE-----