Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4125f58c9182a6dcaf8ecc156c1a3f4469405e.cer
File:                     1a4125f58c9182a6dcaf8ecc156c1a3f4469405e.cer (raw, json)
Hash identifier:          w7UXBoyCmPw2PXUQHHYtJmvVX+F1eN5A8y5xZ+16fpE=
Subject key identifier:   94:71:EF:35:49:5B:04:83:3F:59:DB:03:65:E4:42:B7:6C:69:A7:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108B14C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1f53f22-8131-4650-90df-90885dad2be2/1a4125f58c9182a6dcaf8ecc156c1a3f4469405e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1f53f22-8131-4650-90df-90885dad2be2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 15:36:50 +0000
Certificate not after:    Thu 22 May 2025 20:50:55 +0000
Subordinate resources:    AS: 270064
                          IP: 190.124.48.0/22
                          IP: 2803:43e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17346892 (0x108b14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 15:36:50 2024 GMT
            Not After : May 22 20:50:55 2025 GMT
        Subject: CN=1a4125f58c9182a6dcaf8ecc156c1a3f4469405e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:e0:5e:6b:28:83:f9:65:23:3f:55:6a:8d:
                    06:f2:a0:61:60:37:a6:69:6a:7e:5e:4a:a3:68:8b:
                    5e:5f:42:f7:e8:e9:2d:62:5e:ac:31:8e:bf:6b:9a:
                    3f:fc:0c:ca:e3:11:90:8f:d9:0e:55:74:3e:fd:2b:
                    a7:de:04:23:23:1c:17:b8:01:10:c5:bb:dd:56:b6:
                    cf:d7:80:18:ff:e6:c6:23:87:1d:be:09:d7:87:d7:
                    e6:80:61:0a:4a:c5:35:5e:3f:56:fb:3f:7a:bd:74:
                    c6:f1:bc:53:f8:1e:a9:12:5d:2b:b6:f9:ef:3b:60:
                    3c:ee:ba:21:1b:8c:99:55:3b:e7:ae:a8:af:64:6e:
                    c1:6c:2d:c0:16:26:f2:83:71:73:cd:d5:12:da:6e:
                    dd:78:87:31:6f:08:4c:b4:d1:a9:59:de:50:44:fd:
                    1d:7a:35:63:a8:5a:b6:f8:a6:00:9b:04:3b:a6:cb:
                    ba:78:4b:a7:d5:03:24:b4:49:ab:2d:43:e0:75:fb:
                    e5:1f:7d:d9:56:cf:8b:66:a7:4f:6d:f2:a2:5c:28:
                    07:7d:35:cb:d0:2f:9e:e1:3b:8a:42:ea:f9:8e:2a:
                    ef:76:bb:31:14:ec:0d:42:e0:be:1f:37:9e:98:16:
                    3f:69:19:ae:b8:24:d6:ff:c0:46:29:ad:87:57:94:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:EF:35:49:5B:04:83:3F:59:DB:03:65:E4:42:B7:6C:69:A7:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1f53f22-8131-4650-90df-90885dad2be2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1f53f22-8131-4650-90df-90885dad2be2/1a4125f58c9182a6dcaf8ecc156c1a3f4469405e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.48.0/22
                IPv6:
                  2803:43e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270064

    Signature Algorithm: sha256WithRSAEncryption
         22:31:80:0c:59:3d:ff:4d:3e:34:8d:aa:f0:e6:cf:d9:8d:6e:
         64:1a:d8:77:6a:9c:ce:a6:1e:f7:5c:b0:41:17:7c:80:0f:87:
         5d:08:68:b0:ee:82:00:68:35:b1:2f:08:4c:a4:7a:93:bc:6f:
         bc:45:c4:de:d1:b7:8d:a8:c7:d6:18:29:f5:7d:b5:d8:59:77:
         a1:0b:8e:ff:72:55:ff:38:87:2b:b3:8f:47:ec:09:88:d1:8a:
         02:6d:bd:0f:b8:76:48:b0:f6:fe:8b:78:ec:41:b4:8a:20:33:
         9c:8a:51:f7:8b:6d:c6:34:c8:24:7f:eb:cd:b1:3a:51:6c:7f:
         a1:b8:c9:1f:f7:87:3d:a3:66:7c:07:97:2c:6d:d3:52:ea:10:
         ae:6e:97:2e:60:09:67:dd:a0:25:16:54:83:70:05:32:44:d9:
         43:63:5f:43:eb:5e:2a:4f:7a:f6:98:a7:28:54:f3:32:bc:c2:
         cc:3d:87:64:7c:6b:4c:72:3d:e1:64:8d:70:48:b2:64:44:0a:
         63:c9:47:61:09:ef:b9:73:19:0d:f8:84:7e:82:85:bd:ae:73:
         80:c6:fc:7f:74:ac:5d:e8:78:d4:37:b0:c1:4f:08:7f:2a:6d:
         42:4b:69:51:d2:d2:3f:fe:7f:08:76:86:8e:53:05:e5:c8:76:
         87:03:55:00
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQixTDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEyOTE1MzY1MFoXDTI1MDUyMjIwNTA1
NVowMzExMC8GA1UEAxMoMWE0MTI1ZjU4YzkxODJhNmRjYWY4ZWNjMTU2YzFhM2Y0
NDY5NDA1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIrY4F5rKIP5
ZSM/VWqNBvKgYWA3pmlqfl5Ko2iLXl9C9+jpLWJerDGOv2uaP/wMyuMRkI/ZDlV0
Pv0rp94EIyMcF7gBEMW73Va2z9eAGP/mxiOHHb4J14fX5oBhCkrFNV4/Vvs/er10
xvG8U/geqRJdK7b57ztgPO66IRuMmVU7566or2RuwWwtwBYm8oNxc83VEtpu3XiH
MW8ITLTRqVneUET9HXo1Y6hatvimAJsEO6bLunhLp9UDJLRJqy1D4HX75R992VbP
i2anT23yolwoB301y9AvnuE7ikLq+Y4q73a7MRTsDULgvh83npgWP2kZrrgk1v/A
Rimth1eU4hMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSUce81SVsEgz9Z2wNl5EK3
bGmnPjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMWY1M2YyMi04MTMx
LTQ2NTAtOTBkZi05MDg4NWRhZDJiZTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzFmNTNmMjItODEzMS00
NjUwLTkwZGYtOTA4ODVkYWQyYmUyLzFhNDEyNWY1OGM5MTgyYTZkY2FmOGVjYzE1
NmMxYTNmNDQ2OTQwNWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr58MDANBAIAAjAHAwUAKAND4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHvAwDQYJKoZIhvcNAQELBQADggEBACIx
gAxZPf9NPjSNqvDmz9mNbmQa2HdqnM6mHvdcsEEXfIAPh10IaLDuggBoNbEvCEyk
epO8b7xFxN7Rt42ox9YYKfV9tdhZd6ELjv9yVf84hyuzj0fsCYjRigJtvQ+4dkiw
9v6LeOxBtIogM5yKUfeLbcY0yCR/682xOlFsf6G4yR/3hz2jZnwHlyxt01LqEK5u
ly5gCWfdoCUWVINwBTJE2UNjX0PrXipPevaYpyhU8zK8wsw9h2R8a0xyPeFkjXBI
smRECmPJR2EJ77lzGQ34hH6Chb2uc4DG/H90rF3oeNQ3sMFPCH8qbUJLaVHS0j/+
fwh2ho5TBeXIdocDVQA=
-----END CERTIFICATE-----