Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110ffe8bd3f7bccba5757ca761cd3de7c664f23a.cer
File:                     110ffe8bd3f7bccba5757ca761cd3de7c664f23a.cer (raw, json)
Hash identifier:          x5MKDo7oswwpPYz7VXd2bUdeufreKZSMKc74Jg7w7eM=
Subject key identifier:   E7:EB:E8:6F:B0:6C:56:64:07:FF:8C:21:FE:B2:09:66:99:12:9D:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA3A1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/110ffe8bd3f7bccba5757ca761cd3de7c664f23a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Jun 2021 05:02:26 +0000
Certificate not after:    Thu 08 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 267841
                          IP: 45.163.28.0 -- 45.163.30.255
                          IP: 168.232.32.0/22
                          IP: 170.239.154.0/23
                          IP: 2803:31a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16398875 (0xfa3a1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 25 05:02:26 2021 GMT
            Not After : Aug  8 06:00:00 2024 GMT
        Subject: CN=110ffe8bd3f7bccba5757ca761cd3de7c664f23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:fb:81:77:cf:d2:ed:dc:c1:15:8b:11:0f:
                    1e:c8:27:e6:60:61:89:b4:0b:76:38:25:67:a6:ca:
                    39:15:9e:c4:98:07:52:3a:8a:60:8c:c5:b9:f8:97:
                    94:18:6c:6d:83:dc:aa:63:15:10:b5:49:e1:89:74:
                    ca:ad:9d:37:45:c1:82:e0:e9:5c:f1:45:91:3f:06:
                    9e:eb:f3:70:fc:21:cb:d4:6b:13:14:6d:07:5f:7c:
                    da:34:50:02:73:a1:83:a1:4c:b1:ae:1d:6f:da:53:
                    73:ad:a0:fd:70:f6:1d:2b:3e:d9:4f:b1:e4:a6:10:
                    c8:0b:d1:24:9e:ea:0d:2c:2f:b5:54:d1:08:a4:18:
                    1e:56:82:7f:0b:c3:9c:c5:d0:4f:ba:85:41:c1:5c:
                    97:9a:8d:e5:04:40:82:1e:73:ff:6f:1b:06:22:7b:
                    de:c3:3b:0a:4e:fe:b1:22:7f:fd:55:26:68:2e:30:
                    86:af:6f:3a:9c:7e:34:39:32:d0:38:51:0e:d7:b3:
                    cb:6a:a1:c6:88:00:35:5c:c5:9e:42:cc:11:1d:fb:
                    6c:cc:2c:5a:f6:63:a3:6d:f3:28:7b:e4:c2:ba:e0:
                    36:a3:87:b7:92:ee:4f:c5:9f:2d:b7:41:d3:40:bc:
                    65:99:79:e8:0d:4f:37:20:08:f1:29:0c:6b:fb:21:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EB:E8:6F:B0:6C:56:64:07:FF:8C:21:FE:B2:09:66:99:12:9D:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/110ffe8bd3f7bccba5757ca761cd3de7c664f23a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.28.0-45.163.30.255
                  168.232.32.0/22
                  170.239.154.0/23
                IPv6:
                  2803:31a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267841

    Signature Algorithm: sha256WithRSAEncryption
         9b:24:92:3c:8c:70:ad:fb:4f:a5:f9:54:58:11:e6:f2:77:29:
         09:ad:56:cd:5c:20:85:db:1b:f4:4a:61:a6:30:42:b3:3a:03:
         92:a8:5f:26:0b:9b:86:4b:c9:83:b5:82:59:cf:88:72:6e:34:
         67:f2:74:e7:48:b1:8b:0d:cd:2c:43:40:bc:51:89:21:96:41:
         03:b6:f2:b4:64:db:f3:9b:20:f3:0c:9e:9e:b2:35:27:c3:f2:
         19:28:02:bb:3d:41:80:69:b9:36:70:f1:05:b9:fa:e1:87:74:
         1d:97:47:5d:f9:84:65:78:75:ea:d1:6a:ca:42:2c:75:e5:7c:
         ab:7c:36:91:8f:a3:be:f6:f6:50:b1:d8:c5:38:71:d7:04:67:
         93:a7:83:68:b1:23:1a:3c:80:f6:17:24:93:97:7a:e7:10:6c:
         2f:9a:fd:28:54:42:ae:23:2e:7b:ef:6e:9d:73:c4:d4:4d:8f:
         49:f0:44:85:10:fb:d0:e0:17:95:48:18:41:fc:d8:13:9f:fc:
         eb:77:6c:86:85:2a:8b:d3:1c:17:aa:cc:d9:19:a5:ac:97:69:
         09:00:9c:13:37:fe:4f:d7:84:2d:93:11:28:26:49:dd:f8:f6:
         b8:c7:40:6a:0a:95:28:77:d1:f7:f7:3f:f7:e5:0b:c7:21:73:
         45:76:72:86
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIEAPo6GzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDYyNTA1MDIyNloXDTI0MDgwODA2MDAw
MFowMzExMC8GA1UEAxMoMTEwZmZlOGJkM2Y3YmNjYmE1NzU3Y2E3NjFjZDNkZTdj
NjY0ZjIzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4k+4F3z9Lt
3MEVixEPHsgn5mBhibQLdjglZ6bKORWexJgHUjqKYIzFufiXlBhsbYPcqmMVELVJ
4Yl0yq2dN0XBguDpXPFFkT8GnuvzcPwhy9RrExRtB1982jRQAnOhg6FMsa4db9pT
c62g/XD2HSs+2U+x5KYQyAvRJJ7qDSwvtVTRCKQYHlaCfwvDnMXQT7qFQcFcl5qN
5QRAgh5z/28bBiJ73sM7Ck7+sSJ//VUmaC4whq9vOpx+NDky0DhRDtezy2qhxogA
NVzFnkLMER37bMwsWvZjo23zKHvkwrrgNqOHt5LuT8WfLbdB00C8ZZl56A1PNyAI
8SkMa/shbScCAwEAAaOCAx0wggMZMB0GA1UdDgQWBBTn6+hvsGxWZAf/jCH+sglm
mRKdDjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYmU1ZmM5Zi00NTg3
LTQyZjAtODM0Ny1iZjBkYjQwZWZiZWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWJlNWZjOWYtNDU4Ny00
MmYwLTgzNDctYmYwZGI0MGVmYmViLzExMGZmZThiZDNmN2JjY2JhNTc1N2NhNzYx
Y2QzZGU3YzY2NGYyM2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwIAQCAAEwGjAMAwQCLaMcAwQALaMeAwQCqOggAwQB
qu+aMA0EAgACMAcDBQAoAzGgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWQTAN
BgkqhkiG9w0BAQsFAAOCAQEAmySSPIxwrftPpflUWBHm8ncpCa1WzVwghdsb9Eph
pjBCszoDkqhfJgubhkvJg7WCWc+Icm40Z/J050ixiw3NLENAvFGJIZZBA7bytGTb
85sg8wyenrI1J8PyGSgCuz1BgGm5NnDxBbn64Yd0HZdHXfmEZXh16tFqykIsdeV8
q3w2kY+jvvb2ULHYxThx1wRnk6eDaLEjGjyA9hckk5d65xBsL5r9KFRCriMue+9u
nXPE1E2PSfBEhRD70OAXlUgYQfzYE5/863dshoUqi9McF6rM2RmlrJdpCQCcEzf+
T9eELZMRKCZJ3fj2uMdAagqVKHfR9/c/9+ULxyFzRXZyhg==
-----END CERTIFICATE-----