Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06bf889c228e089ebb93a39e4f836a770fdb318d.cer
File:                     06bf889c228e089ebb93a39e4f836a770fdb318d.cer (raw, json)
Hash identifier:          Tcx+6VzZyPx/EDgHak1lQntir2IAM7FjKELuSpzu5KM=
Subject key identifier:   CF:A1:4D:A5:1F:B5:B8:31:61:8E:DA:89:1C:FC:D9:DE:AF:CF:CD:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01008B0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e98b53d5-26d9-4a4f-ad49-c1e5da1b7a94/06bf889c228e089ebb93a39e4f836a770fdb318d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e98b53d5-26d9-4a4f-ad49-c1e5da1b7a94/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:05:54 +0000
Certificate not after:    Sat 22 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 16685
                          AS: 18836
                          IP: 200.185.0.0 -- 200.185.191.255
                          IP: 200.188.192.0/20
                          IP: 2001:1280::/32
                          IP: 2804:3a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16812812 (0x1008b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:05:54 2023 GMT
            Not After : Mar 22 15:00:00 2025 GMT
        Subject: CN=06bf889c228e089ebb93a39e4f836a770fdb318d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:84:46:5c:8a:4f:76:3e:10:7e:c5:a1:6e:
                    d2:29:27:d3:b6:7c:d5:1c:8a:d0:5d:19:74:c6:c4:
                    d5:cc:96:e7:8b:69:76:d4:66:e5:70:d1:3c:9e:d9:
                    4a:6e:7a:00:93:50:35:cb:1f:cc:ce:c7:fe:21:11:
                    f2:77:a8:58:35:4a:3c:0c:36:af:5f:9c:ff:66:f3:
                    ca:97:3d:c7:9a:c2:1c:35:25:f6:0a:b1:3a:25:6d:
                    e6:70:81:dc:ea:65:ba:67:8f:98:26:04:36:79:76:
                    3c:ce:64:28:e9:ed:a7:d6:49:13:c9:d3:08:f8:b8:
                    00:5e:c4:57:c9:78:7e:e2:b8:57:5f:93:96:a3:1d:
                    63:41:5f:99:e0:2d:92:f8:83:42:fd:95:f3:53:a9:
                    b8:a2:bc:ce:d8:f8:50:6d:5e:51:a1:26:1c:0c:72:
                    13:d7:43:bf:48:05:5d:54:3f:8f:59:93:f9:9c:53:
                    fd:2f:71:67:62:cd:0f:89:c3:64:84:9d:ec:75:71:
                    8c:de:43:fa:07:d4:af:eb:25:20:64:1e:28:c1:62:
                    cc:5c:2b:7b:57:04:6b:78:e1:a7:58:8c:4a:eb:36:
                    7a:e6:80:66:ff:a9:02:3d:38:ed:a7:af:d4:8d:10:
                    d1:b1:2b:f3:2f:9c:52:79:62:f7:aa:f8:e1:90:10:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A1:4D:A5:1F:B5:B8:31:61:8E:DA:89:1C:FC:D9:DE:AF:CF:CD:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e98b53d5-26d9-4a4f-ad49-c1e5da1b7a94/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e98b53d5-26d9-4a4f-ad49-c1e5da1b7a94/06bf889c228e089ebb93a39e4f836a770fdb318d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.0.0-200.185.191.255
                  200.188.192.0/20
                IPv6:
                  2001:1280::/32
                  2804:3a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16685
                  18836

    Signature Algorithm: sha256WithRSAEncryption
         62:49:14:86:3f:68:5c:4d:ba:a2:5e:cb:cf:75:bc:f4:31:a4:
         9b:a0:be:ef:de:97:c9:e7:84:9f:03:7a:f4:af:b7:31:a9:c5:
         97:56:9f:23:3f:81:77:8c:b8:ca:e1:8d:07:e0:d5:29:c7:08:
         03:ea:37:4a:39:31:d1:2d:5e:f4:21:36:31:19:63:8f:2a:06:
         ba:a5:20:d1:16:27:5b:15:27:c8:4f:7e:70:2b:7c:94:41:26:
         8e:47:fb:11:c9:cb:be:e4:8e:86:1d:bd:7d:38:fa:47:1d:3b:
         1e:66:e0:c1:d8:14:58:7d:ef:16:02:c0:ba:2f:77:c2:ac:cf:
         ef:2e:ca:0f:48:05:ce:27:03:e5:be:44:19:f5:8b:07:8d:5d:
         9f:70:8f:a3:d9:dc:c9:ce:97:41:db:4d:ec:7d:72:f8:68:9e:
         6b:dd:ee:e4:ea:bc:e8:19:d6:3f:c5:1c:cc:b7:be:1a:dc:36:
         8a:50:98:4a:dc:93:58:56:a8:e8:51:db:71:4c:96:ca:80:aa:
         b8:0c:94:16:b4:0f:c6:4c:7d:08:b8:90:4f:6d:b5:87:02:18:
         14:cf:df:18:cf:bc:fe:e8:b5:b8:7a:7d:4b:0c:c4:5d:7a:da:
         42:9a:42:83:00:0e:4a:8a:7b:5c:41:d4:e7:b8:54:27:61:3e:
         01:1e:dc:f5
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIEAQCLDDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTEwNzE5MDU1NFoXDTI1MDMyMjE1MDAw
MFowMzExMC8GA1UEAxMoMDZiZjg4OWMyMjhlMDg5ZWJiOTNhMzllNGY4MzZhNzcw
ZmRiMzE4ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJaKhEZcik92
PhB+xaFu0ikn07Z81RyK0F0ZdMbE1cyW54tpdtRm5XDRPJ7ZSm56AJNQNcsfzM7H
/iER8neoWDVKPAw2r1+c/2bzypc9x5rCHDUl9gqxOiVt5nCB3OplumePmCYENnl2
PM5kKOntp9ZJE8nTCPi4AF7EV8l4fuK4V1+TlqMdY0FfmeAtkviDQv2V81OpuKK8
ztj4UG1eUaEmHAxyE9dDv0gFXVQ/j1mT+ZxT/S9xZ2LND4nDZISd7HVxjN5D+gfU
r+slIGQeKMFizFwre1cEa3jhp1iMSus2euaAZv+pAj047aev1I0Q0bEr8y+cUnli
96r44ZAQLUkCAwEAAaOCAyAwggMcMB0GA1UdDgQWBBTPoU2lH7W4MWGO2okc/Nne
r8/NfTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lOThiNTNkNS0yNmQ5
LTRhNGYtYWQ0OS1jMWU1ZGExYjdhOTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTk4YjUzZDUtMjZkOS00
YTRmLWFkNDktYzFlNWRhMWI3YTk0LzA2YmY4ODljMjI4ZTA4OWViYjkzYTM5ZTRm
ODM2YTc3MGZkYjMxOGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwGQQCAAEwEzALAwMAyLkDBAbIuYADBATIvMAwFAQC
AAIwDgMFACABEoADBQAoBDoQMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAkEtAgJJ
lDANBgkqhkiG9w0BAQsFAAOCAQEAYkkUhj9oXE26ol7Lz3W89DGkm6C+796XyeeE
nwN69K+3ManFl1afIz+Bd4y4yuGNB+DVKccIA+o3Sjkx0S1e9CE2MRljjyoGuqUg
0RYnWxUnyE9+cCt8lEEmjkf7EcnLvuSOhh29fTj6Rx07HmbgwdgUWH3vFgLAui93
wqzP7y7KD0gFzicD5b5EGfWLB41dn3CPo9ncyc6XQdtN7H1y+Giea93u5Oq86BnW
P8UczLe+Gtw2ilCYStyTWFao6FHbcUyWyoCquAyUFrQPxkx9CLiQT221hwIYFM/f
GM+8/ui1uHp9SwzEXXraQppCgwAOSop7XEHU57hUJ2E+AR7c9Q==
-----END CERTIFICATE-----