Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
File:                     0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer (raw, json)
Hash identifier:          VmnkFAjX3TxEykfxOfVveZ25b1rHeHuWPl84adiAxcA=
Subject key identifier:   0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7E769
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Nov 2022 21:29:04 +0000
Certificate not after:    Sun 21 Apr 2024 17:49:47 +0000
Subordinate resources:    AS: 267912
                          IP: 45.179.72.0/22
                          IP: 2803:f660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14149481 (0xd7e769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 21:29:04 2022 GMT
            Not After : Apr 21 17:49:47 2024 GMT
        Subject: CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:fa:27:ce:1e:49:dd:54:02:cf:05:aa:45:
                    34:4f:69:c7:6b:c6:ba:43:41:3e:4a:78:f1:9d:d2:
                    87:3b:3f:2b:c1:67:eb:78:7a:53:d6:78:cc:50:02:
                    69:f9:1c:04:ed:af:20:d9:b0:9c:76:01:b2:58:30:
                    cb:e9:ad:05:ea:86:5e:70:9f:e0:35:d0:f0:92:f1:
                    38:42:21:b7:60:d7:aa:c4:a8:40:69:b2:3f:41:0e:
                    59:48:5d:7c:78:0d:59:1a:54:cc:6b:f0:c5:48:0f:
                    c1:6a:fe:72:ee:12:53:a9:89:3d:96:75:49:a4:2d:
                    e0:4f:87:69:cd:5a:5d:f6:dc:c4:99:3c:3a:4d:28:
                    f7:07:8a:e1:85:07:ec:07:a2:e8:a5:41:9c:2b:54:
                    7f:3d:97:75:17:49:55:d5:87:b0:b3:0d:b3:bc:9a:
                    30:e8:99:a4:96:cd:65:81:4e:e7:10:e7:f4:f2:a8:
                    d6:42:54:70:4f:fc:01:85:60:9a:98:67:8d:16:4a:
                    d2:89:0e:3b:34:0e:b1:72:b5:77:68:5c:7b:11:69:
                    a6:78:14:4d:84:92:64:27:b6:60:9b:c0:eb:d1:1a:
                    64:c3:ab:db:78:70:9b:2b:19:0a:83:80:ed:4f:db:
                    85:3a:e5:cb:16:7d:e8:2a:07:3d:4c:b8:c4:34:f9:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.72.0/22
                IPv6:
                  2803:f660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267912

    Signature Algorithm: sha256WithRSAEncryption
         19:62:2b:ec:79:fa:a6:33:cb:a5:79:ee:53:c0:c5:6d:8d:d5:
         05:2b:af:15:8e:e5:4f:43:80:97:17:54:ba:60:95:37:a5:26:
         55:b0:c5:1f:cf:18:24:e3:91:2f:0c:dd:8e:2b:cc:0e:f5:a1:
         89:02:05:bd:1d:7d:de:84:c2:3a:b5:34:ea:67:d9:92:b0:21:
         41:8e:ec:11:0c:dc:38:70:fd:b3:28:2a:3c:8f:6b:a9:11:a0:
         9a:47:90:12:80:58:85:ae:fc:9e:5f:aa:6c:27:25:9a:6a:9e:
         be:a1:7f:a0:99:b0:72:65:18:bc:4a:3f:7a:79:5d:d5:5e:e4:
         78:08:be:a9:95:3b:62:8f:33:0a:c1:10:5e:3f:de:0c:f1:0c:
         fa:0c:35:21:5f:22:55:fd:98:66:46:2f:17:e6:87:6a:87:34:
         0e:1f:86:9b:35:18:75:f0:e5:3a:cb:22:9a:c7:30:64:9a:e0:
         e4:20:60:5d:8d:9f:ca:42:0d:63:76:dd:8d:a9:01:1b:03:17:
         cd:1f:c9:6c:8d:97:0b:bc:b7:ff:16:16:82:cb:0a:93:69:00:
         d9:0c:36:05:63:f9:11:5b:14:52:df:2c:4b:55:17:90:26:42:
         77:fe:ce:c5:d6:66:6f:3e:c1:d7:f6:49:9f:36:c5:be:c0:fb:
         6a:6b:20:55
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANfnaTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMTEyMjIxMjkwNFoXDTI0MDQyMTE3NDk0
N1owMzExMC8GA1UEAxMoMGM5YWE3YTk3MGVhOTdlM2EyOGY4ZWI0YTk3YzhhZDYw
YjYyOWE3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJVI+ifOHknd
VALPBapFNE9px2vGukNBPkp48Z3Shzs/K8Fn63h6U9Z4zFACafkcBO2vINmwnHYB
slgwy+mtBeqGXnCf4DXQ8JLxOEIht2DXqsSoQGmyP0EOWUhdfHgNWRpUzGvwxUgP
wWr+cu4SU6mJPZZ1SaQt4E+Hac1aXfbcxJk8Ok0o9weK4YUH7Aei6KVBnCtUfz2X
dRdJVdWHsLMNs7yaMOiZpJbNZYFO5xDn9PKo1kJUcE/8AYVgmphnjRZK0okOOzQO
sXK1d2hcexFppngUTYSSZCe2YJvA69EaZMOr23hwmysZCoOA7U/bhTrlyxZ96CoH
PUy4xDT5hWUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQMo9J/ilmKyl5iwxoZ3vh0
9h4nuzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNjc5OWU1OC0wYjY1
LTRmZTgtOTQ0ZS03YmZkYTQzZDY0MGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDY3OTllNTgtMGI2NS00
ZmU4LTk0NGUtN2JmZGE0M2Q2NDBmLzBjOWFhN2E5NzBlYTk3ZTNhMjhmOGViNGE5
N2M4YWQ2MGI2MjlhNzcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2zSDANBAIAAjAHAwUAKAP2YDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFogwDQYJKoZIhvcNAQELBQADggEBABli
K+x5+qYzy6V57lPAxW2N1QUrrxWO5U9DgJcXVLpglTelJlWwxR/PGCTjkS8M3Y4r
zA71oYkCBb0dfd6Ewjq1NOpn2ZKwIUGO7BEM3Dhw/bMoKjyPa6kRoJpHkBKAWIWu
/J5fqmwnJZpqnr6hf6CZsHJlGLxKP3p5XdVe5HgIvqmVO2KPMwrBEF4/3gzxDPoM
NSFfIlX9mGZGLxfmh2qHNA4fhps1GHXw5TrLIprHMGSa4OQgYF2Nn8pCDWN23Y2p
ARsDF80fyWyNlwu8t/8WFoLLCpNpANkMNgVj+RFbFFLfLEtVF5AmQnf+zsXWZm8+
wdf2SZ82xb7A+2prIFU=
-----END CERTIFICATE-----