Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
File:                     1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer (raw, json)
Hash identifier:          pjZXmTNGyfWNWATEuRlRnIKtDr3B/o1Bo011SLIasCE=
Subject key identifier:   45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBBAE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Feb 2022 18:20:36 +0000
Certificate not after:    Sat 29 Jun 2024 21:49:25 +0000
Subordinate resources:    AS: 264761
                          IP: 168.195.184.0/22
                          IP: 2803:a0c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15448804 (0xebbae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 18:20:36 2022 GMT
            Not After : Jun 29 21:49:25 2024 GMT
        Subject: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:c8:c3:ff:2e:23:3e:2b:8e:29:52:1e:e7:
                    75:4d:63:8b:b4:3e:f3:af:95:b5:ca:e1:0d:00:f3:
                    fe:9a:31:07:21:a3:df:ef:c4:2a:7b:5e:05:15:97:
                    b7:64:c6:60:f1:76:e5:b4:3a:d1:c2:e6:ed:fc:d7:
                    70:ba:1d:a4:d1:19:d8:3e:e7:2a:4e:0c:5b:a6:32:
                    26:bd:52:4c:01:bf:bc:69:6f:7b:fb:2d:b9:63:f1:
                    18:e0:bc:f4:09:56:1b:c8:41:b9:b4:fd:10:9b:dc:
                    1b:b0:9f:41:82:a7:11:89:b7:be:02:ab:5b:b7:f0:
                    4d:ed:b8:15:c4:29:a4:cb:a1:44:19:d7:ad:71:ce:
                    a2:71:1e:32:fa:fc:ec:08:e5:5b:ad:6c:d7:67:a5:
                    bc:a8:b5:d2:91:54:ce:db:17:4c:f4:55:fc:8f:17:
                    d3:f7:0b:1e:38:1b:c8:c5:ef:1e:94:3d:4c:89:d4:
                    65:62:58:4c:65:4a:be:a1:af:72:82:d4:56:0b:12:
                    f2:c3:71:d8:66:80:b0:6d:3a:e2:f4:d2:3c:25:46:
                    5e:34:aa:01:a8:6e:fd:05:e0:14:13:f3:fb:3a:50:
                    4d:d9:0b:c3:b0:26:09:fe:67:41:98:33:70:07:43:
                    76:aa:dc:68:80:56:f4:8c:be:59:00:ca:87:7e:97:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.184.0/22
                IPv6:
                  2803:a0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264761

    Signature Algorithm: sha256WithRSAEncryption
         08:05:14:3f:d2:a0:fd:14:d0:fc:84:d4:f5:e7:db:ee:01:48:
         67:d4:ff:51:ad:f8:c0:46:c3:36:19:eb:b5:fc:9a:26:c5:c4:
         9e:cf:e9:53:6d:70:e8:f7:f7:69:a6:44:d9:7a:9d:52:d8:18:
         90:ef:55:85:62:5f:38:64:c4:10:51:9f:ad:14:f0:be:50:4d:
         ae:d5:cd:e9:b0:d1:8e:85:59:ba:c0:84:2b:cb:e7:f3:fe:84:
         16:17:5f:95:82:d2:5e:d5:7f:3d:27:e2:4f:e2:73:95:88:99:
         34:d8:99:db:60:f6:6c:c8:06:c6:48:dd:66:63:7b:ec:f6:c0:
         46:b8:22:fc:54:98:10:72:9d:3e:60:79:df:3e:63:ec:b6:88:
         0c:f0:49:ce:bd:ec:11:f5:c8:36:ca:8d:b4:a0:14:8d:81:93:
         66:fe:32:56:29:44:4f:ff:a6:a0:c8:88:d3:1e:f7:aa:58:61:
         cb:63:73:8c:75:43:57:92:5a:09:d9:2b:ec:1c:ce:0c:de:00:
         ea:5a:40:3a:3b:16:79:66:5d:1d:d1:d6:fb:9d:a5:2e:89:fb:
         62:0b:07:26:0b:78:49:6f:bc:10:e5:36:c6:77:99:ec:3e:39:
         58:e5:44:61:22:ea:39:6e:3f:32:9c:cc:d6:7f:c8:29:cb:62:
         ee:0a:7a:a2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOu65DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDIwMTE4MjAzNloXDTI0MDYyOTIxNDky
NVowMzExMC8GA1UEAxMoMWFiNGNmYjA4Y2RkYzFjNDk1NWE0NDc1M2I4MjQxNDFm
YTA1NGJmMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJOyMP/LiM+
K44pUh7ndU1ji7Q+86+VtcrhDQDz/poxByGj3+/EKnteBRWXt2TGYPF25bQ60cLm
7fzXcLodpNEZ2D7nKk4MW6YyJr1STAG/vGlve/stuWPxGOC89AlWG8hBubT9EJvc
G7CfQYKnEYm3vgKrW7fwTe24FcQppMuhRBnXrXHOonEeMvr87AjlW61s12elvKi1
0pFUztsXTPRV/I8X0/cLHjgbyMXvHpQ9TInUZWJYTGVKvqGvcoLUVgsS8sNx2GaA
sG064vTSPCVGXjSqAahu/QXgFBPz+zpQTdkLw7AmCf5nQZgzcAdDdqrcaIBW9Iy+
WQDKh36X45cCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRFjHbIVTQITolKeN94Z4E+
rvdwdzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMWI0YmIxNS0zMzhm
LTQ1NDMtODUzMS05NTQ4NDFhYzdiMGIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzFiNGJiMTUtMzM4Zi00
NTQzLTg1MzEtOTU0ODQxYWM3YjBiLzFhYjRjZmIwOGNkZGMxYzQ5NTVhNDQ3NTNi
ODI0MTQxZmEwNTRiZjAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjDuDANBAIAAjAHAwUAKAOgwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECjkwDQYJKoZIhvcNAQELBQADggEBAAgF
FD/SoP0U0PyE1PXn2+4BSGfU/1Gt+MBGwzYZ67X8mibFxJ7P6VNtcOj392mmRNl6
nVLYGJDvVYViXzhkxBBRn60U8L5QTa7Vzemw0Y6FWbrAhCvL5/P+hBYXX5WC0l7V
fz0n4k/ic5WImTTYmdtg9mzIBsZI3WZje+z2wEa4IvxUmBBynT5ged8+Y+y2iAzw
Sc697BH1yDbKjbSgFI2Bk2b+MlYpRE//pqDIiNMe96pYYctjc4x1Q1eSWgnZK+wc
zgzeAOpaQDo7FnlmXR3R1vudpS6J+2ILByYLeElvvBDlNsZ3mew+OVjlRGEi6jlu
PzKczNZ/yCnLYu4KeqI=
-----END CERTIFICATE-----