Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/152e4d11dfc63c0ab21d87d3a342ab3bf27f55d8.cer
File:                     152e4d11dfc63c0ab21d87d3a342ab3bf27f55d8.cer (raw, json)
Hash identifier:          h5RheBGMvMWfUp66mEvQQX3nHq0IQAqdfTccCasXONc=
Subject key identifier:   E3:D5:74:C5:26:1D:B5:0A:DA:D3:C4:44:5B:67:45:21:1D:25:9D:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100E831
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0bfeda6-4aaf-442e-a50c-b2286e2aac0f/152e4d11dfc63c0ab21d87d3a342ab3bf27f55d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0bfeda6-4aaf-442e-a50c-b2286e2aac0f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 13:48:22 +0000
Certificate not after:    Mon 11 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 52492
                          IP: 181.118.128.0/20
                          IP: 2803:6880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16836657 (0x100e831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 13:48:22 2023 GMT
            Not After : Aug 11 06:00:00 2025 GMT
        Subject: CN=152e4d11dfc63c0ab21d87d3a342ab3bf27f55d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:43:16:3a:d6:6f:71:44:93:22:72:58:02:
                    3e:00:72:24:87:5e:47:67:4a:7e:48:cb:65:86:7e:
                    8c:b9:1c:56:b4:31:da:b4:45:97:fa:79:65:10:d0:
                    84:06:3b:06:fd:da:d6:7a:88:5e:2a:38:38:03:60:
                    c7:2a:40:cb:4c:a9:13:54:7c:a8:8a:26:f9:16:6b:
                    fc:5a:4b:df:3e:60:26:94:74:5b:19:7d:86:00:a9:
                    af:c7:04:77:c4:54:8b:26:fc:73:50:f5:06:56:b6:
                    4e:82:6b:c0:8f:aa:8d:cf:d0:b8:24:7a:fa:69:b9:
                    d9:7f:c5:63:af:67:76:5f:69:f6:9d:ce:a8:db:df:
                    36:08:34:73:71:a7:d4:7c:6d:d8:38:e8:45:10:b8:
                    63:a7:4a:96:3b:ba:03:7e:aa:c6:2e:77:29:ff:22:
                    10:8e:09:bb:c7:b7:4c:62:fc:ec:d3:34:07:c1:76:
                    43:db:47:2d:9d:65:a6:5d:f5:7f:5d:82:8f:42:d0:
                    9a:60:69:bb:9a:95:ae:0c:4f:ec:ba:58:0b:30:19:
                    e1:31:31:12:d6:72:0c:04:a1:bd:04:77:a9:4a:86:
                    e1:18:56:3b:a6:fb:f6:1e:af:61:d0:a7:a3:88:aa:
                    09:e2:c7:27:c1:f2:fb:65:86:fe:05:38:79:89:ba:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:74:C5:26:1D:B5:0A:DA:D3:C4:44:5B:67:45:21:1D:25:9D:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0bfeda6-4aaf-442e-a50c-b2286e2aac0f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0bfeda6-4aaf-442e-a50c-b2286e2aac0f/152e4d11dfc63c0ab21d87d3a342ab3bf27f55d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.128.0/20
                IPv6:
                  2803:6880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52492

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:a1:1b:70:d2:3b:93:ee:f6:57:f6:9e:a4:69:e5:8a:c8:
         b5:4f:ca:c0:86:7f:16:ba:62:1e:e8:4b:47:6c:97:d6:0d:04:
         02:65:51:49:f8:d4:87:c1:73:3c:40:31:fd:22:ab:7b:f2:f4:
         e8:48:14:90:99:42:93:4d:be:13:a5:3b:e6:2c:48:e1:5e:66:
         ec:57:67:41:22:83:a5:7a:ed:35:c7:7b:c7:77:04:64:b0:e7:
         d0:b5:7d:43:66:4a:7c:75:d9:3c:a1:08:ae:95:63:1e:4d:10:
         30:d7:33:ea:2d:73:c3:09:75:78:1b:33:fc:7d:bd:16:3a:ce:
         c6:94:fe:0b:cf:5f:37:4e:be:dc:1b:fe:d4:13:c6:61:84:65:
         39:e9:34:43:d6:93:1c:36:5f:c5:11:bb:7f:81:68:94:2a:0b:
         2a:29:22:89:e0:95:8b:bd:ee:d8:30:67:e1:7e:7a:6b:5a:89:
         e0:69:38:c6:40:65:d9:79:7a:78:06:66:ec:66:a5:51:00:ab:
         f0:31:31:6b:4b:7a:18:26:fa:5c:b0:f1:50:64:2f:7a:71:07:
         c0:02:56:24:cf:c9:f9:85:93:be:99:e0:aa:af:3a:2c:9a:b5:
         89:78:e9:40:b4:68:a3:e2:bb:37:d6:f2:65:1b:fd:8e:9a:a7:
         d9:88:c8:34
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQDoMTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTExMDEzNDgyMloXDTI1MDgxMTA2MDAw
MFowMzExMC8GA1UEAxMoMTUyZTRkMTFkZmM2M2MwYWIyMWQ4N2QzYTM0MmFiM2Jm
MjdmNTVkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGqQxY61m9x
RJMiclgCPgByJIdeR2dKfkjLZYZ+jLkcVrQx2rRFl/p5ZRDQhAY7Bv3a1nqIXio4
OANgxypAy0ypE1R8qIom+RZr/FpL3z5gJpR0Wxl9hgCpr8cEd8RUiyb8c1D1Bla2
ToJrwI+qjc/QuCR6+mm52X/FY69ndl9p9p3OqNvfNgg0c3Gn1Hxt2DjoRRC4Y6dK
lju6A36qxi53Kf8iEI4Ju8e3TGL87NM0B8F2Q9tHLZ1lpl31f12Cj0LQmmBpu5qV
rgxP7LpYCzAZ4TExEtZyDAShvQR3qUqG4RhWO6b79h6vYdCno4iqCeLHJ8Hy+2WG
/gU4eYm6nG0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTj1XTFJh21CtrTxERbZ0Uh
HSWdsjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMGJmZWRhNi00YWFm
LTQ0MmUtYTUwYy1iMjI4NmUyYWFjMGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjBiZmVkYTYtNGFhZi00
NDJlLWE1MGMtYjIyODZlMmFhYzBmLzE1MmU0ZDExZGZjNjNjMGFiMjFkODdkM2Ez
NDJhYjNiZjI3ZjU1ZDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLV2gDANBAIAAjAHAwUAKANogDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzQwwDQYJKoZIhvcNAQELBQADggEBABEq
oRtw0juT7vZX9p6kaeWKyLVPysCGfxa6Yh7oS0dsl9YNBAJlUUn41IfBczxAMf0i
q3vy9OhIFJCZQpNNvhOlO+YsSOFeZuxXZ0Eig6V67TXHe8d3BGSw59C1fUNmSnx1
2TyhCK6VYx5NEDDXM+otc8MJdXgbM/x9vRY6zsaU/gvPXzdOvtwb/tQTxmGEZTnp
NEPWkxw2X8URu3+BaJQqCyopIonglYu97tgwZ+F+emtaieBpOMZAZdl5engGZuxm
pVEAq/AxMWtLehgm+lyw8VBkL3pxB8ACViTPyfmFk76Z4KqvOiyatYl46UC0aKPi
uzfW8mUb/Y6ap9mIyDQ=
-----END CERTIFICATE-----