Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer
File:                     1a88658a27071695cf06a4d90d6df905871a233a.cer (raw, json)
Hash identifier:          4LKJTN2eYI7fhQcx22qNK+BFKlD3UjgdKYtv8SmLLIE=
Subject key identifier:   1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED1658
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/1a88658a27071695cf06a4d90d6df905871a233a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Aug 2021 14:41:58 +0000
Certificate not after:    Mon 08 Jul 2024 18:42:25 +0000
Subordinate resources:    AS: 265501
                          AS: 270156
                          IP: 138.255.116.0/22
                          IP: 2806:209::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15537752 (0xed1658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 14:41:58 2021 GMT
            Not After : Jul  8 18:42:25 2024 GMT
        Subject: CN=1a88658a27071695cf06a4d90d6df905871a233a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:c1:99:a4:5d:f5:17:86:f2:89:cd:ec:87:
                    65:12:0a:36:24:99:8c:a3:88:a7:a4:30:cd:fa:54:
                    c8:2e:b7:5a:bc:5b:12:99:80:ad:18:7f:ff:fe:00:
                    41:54:46:60:c9:19:39:68:d6:38:13:96:c9:2a:10:
                    bd:66:45:51:87:34:10:cd:eb:e7:40:38:44:53:a6:
                    d9:30:e0:64:55:cf:ea:26:fc:c3:b6:dc:3f:a0:17:
                    a3:a9:74:99:5a:88:ec:92:10:4d:2b:92:95:8e:df:
                    2a:04:46:05:65:bd:4a:1a:58:4f:ca:1d:e6:81:8e:
                    a6:7a:2d:6c:05:90:f4:46:83:11:4d:e9:b6:6d:f8:
                    da:0e:e7:0f:bc:f7:56:41:82:ef:c0:bd:bf:7c:1b:
                    7f:ed:2e:d9:1c:f3:ad:55:d9:0f:bc:9a:36:87:a6:
                    01:8f:5d:dd:79:d2:69:f5:b4:35:89:38:e3:6d:d0:
                    8b:e1:34:19:4e:a1:9d:5f:04:7f:4f:78:fb:0d:78:
                    24:97:65:f8:6a:ce:95:8b:38:e8:0a:70:9f:ea:08:
                    22:f3:c6:82:ee:1d:39:63:f7:67:ad:42:77:6b:8f:
                    91:f6:fc:8f:96:77:a3:5b:17:f9:b8:d0:eb:ad:46:
                    d6:b8:b3:4e:21:ae:07:a2:e2:be:be:cc:d6:ee:f9:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/1a88658a27071695cf06a4d90d6df905871a233a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.116.0/22
                IPv6:
                  2806:209::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265501
                  270156

    Signature Algorithm: sha256WithRSAEncryption
         c6:b3:b4:a4:4e:f7:e7:c1:86:73:e2:29:85:23:80:30:da:a4:
         50:8f:ba:87:bb:d4:24:86:1f:2a:17:a7:89:9a:33:f8:0f:32:
         e4:12:45:1e:a1:53:11:e6:ac:79:26:6f:a4:a2:6b:a1:2e:19:
         2a:23:cc:5b:e6:f1:c0:28:ce:b8:0d:ce:3c:7f:46:18:28:78:
         1c:b1:e4:12:32:52:b9:4e:70:23:f1:9e:d1:49:5e:5b:a8:78:
         de:47:02:5e:d8:6f:91:a9:42:4a:91:1f:a7:41:cc:47:fb:ce:
         bb:51:b7:83:8c:1b:e4:ac:bc:41:03:2c:e8:f5:de:7d:6b:63:
         ff:a1:3c:e9:33:8e:fc:17:ef:77:20:ea:87:03:9d:a4:73:cc:
         0c:05:2f:1a:9b:20:37:02:86:c7:35:4f:64:a8:fd:81:a4:4c:
         c4:81:55:19:18:6e:59:f0:22:d8:dd:5f:9d:f0:ad:b3:2e:b1:
         9f:fa:3b:7e:7d:fb:60:b5:0d:5d:bc:5a:ce:e8:bb:1b:4d:1e:
         9d:c1:51:a7:15:87:ca:3f:65:34:78:0b:94:81:74:25:74:7d:
         30:c8:9a:b3:88:0d:9b:7b:03:e0:ef:06:26:8c:01:b1:12:0b:
         97:e5:0f:a2:dc:a2:73:52:8d:4b:e3:23:df:6a:5b:d2:53:df:
         6c:35:f5:10
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAO0WWDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgxOTE0NDE1OFoXDTI0MDcwODE4NDIy
NVowMzExMC8GA1UEAxMoMWE4ODY1OGEyNzA3MTY5NWNmMDZhNGQ5MGQ2ZGY5MDU4
NzFhMjMzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJhcwZmkXfUX
hvKJzeyHZRIKNiSZjKOIp6QwzfpUyC63WrxbEpmArRh///4AQVRGYMkZOWjWOBOW
ySoQvWZFUYc0EM3r50A4RFOm2TDgZFXP6ib8w7bcP6AXo6l0mVqI7JIQTSuSlY7f
KgRGBWW9ShpYT8od5oGOpnotbAWQ9EaDEU3ptm342g7nD7z3VkGC78C9v3wbf+0u
2RzzrVXZD7yaNoemAY9d3XnSafW0NYk4423Qi+E0GU6hnV8Ef094+w14JJdl+GrO
lYs46Apwn+oIIvPGgu4dOWP3Z61Cd2uPkfb8j5Z3o1sX+bjQ661G1rizTiGuB6Li
vr7M1u75heUCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBQa2OP+MhPHUVX75PinTnlq
yKbYOTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYWJmOWE5Zi0zNDJi
LTRiNzMtODdkMi0zYzc2N2FlMjEwMWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2FiZjlhOWYtMzQyYi00
YjczLTg3ZDItM2M3NjdhZTIxMDFkLzFhODg2NThhMjcwNzE2OTVjZjA2YTRkOTBk
NmRmOTA1ODcxYTIzM2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAor/dDANBAIAAjAHAwUAKAYCCTAf
BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEDR0CAwQfTDANBgkqhkiG9w0BAQsFAAOC
AQEAxrO0pE7358GGc+IphSOAMNqkUI+6h7vUJIYfKheniZoz+A8y5BJFHqFTEeas
eSZvpKJroS4ZKiPMW+bxwCjOuA3OPH9GGCh4HLHkEjJSuU5wI/Ge0UleW6h43kcC
XthvkalCSpEfp0HMR/vOu1G3g4wb5Ky8QQMs6PXefWtj/6E86TOO/BfvdyDqhwOd
pHPMDAUvGpsgNwKGxzVPZKj9gaRMxIFVGRhuWfAi2N1fnfCtsy6xn/o7fn37YLUN
Xbxazui7G00encFRpxWHyj9lNHgLlIF0JXR9MMias4gNm3sD4O8GJowBsRILl+UP
otyic1KNS+Mj32pb0lPfbDX1EA==
-----END CERTIFICATE-----