Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2720067855da1dde44452a46b35bc76801d37f.cer
File:                     1d2720067855da1dde44452a46b35bc76801d37f.cer (raw, json)
Hash identifier:          pWmAkCjuV4oBJjHtsEtOQ7dC7P+/SIMG32M3DmCiSSA=
Subject key identifier:   62:42:34:17:54:7B:41:24:2C:FE:DD:5A:47:FA:F4:F2:0F:53:11:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C1421
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f99ce344-22d6-48da-83f1-eddb12933cdb/1d2720067855da1dde44452a46b35bc76801d37f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f99ce344-22d6-48da-83f1-eddb12933cdb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:08:48 +0000
Certificate not after:    Wed 21 May 2025 15:00:00 +0000
Subordinate resources:    AS: 27778

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17568801 (0x10c1421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:08:48 2024 GMT
            Not After : May 21 15:00:00 2025 GMT
        Subject: CN=1d2720067855da1dde44452a46b35bc76801d37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:15:09:a5:55:4a:64:12:a4:5e:05:40:29:e5:
                    d3:ff:1b:48:ad:5d:77:d3:db:33:55:e3:47:d8:73:
                    25:61:71:69:72:63:88:1f:ea:ed:12:c6:b3:75:dc:
                    25:9a:1e:78:dd:cb:8f:3d:98:3a:e7:f5:48:8f:a2:
                    2a:b5:dd:b6:ed:86:6e:96:7b:97:6b:b2:71:d5:c0:
                    b4:35:3e:d3:99:99:b7:ee:56:4d:7f:a1:17:c8:40:
                    f7:12:bb:4e:6c:55:18:a7:d7:1b:d5:9f:bb:f9:3c:
                    2b:4b:6f:16:54:44:f8:72:d6:08:89:5f:8e:87:f8:
                    a7:06:43:07:fa:28:86:a7:eb:cc:ec:a3:52:22:3b:
                    fe:d2:81:90:ad:b7:92:b0:fe:0b:76:53:65:8e:1b:
                    26:9d:69:22:0d:40:cf:4e:d6:24:c5:d1:ba:2f:25:
                    fd:f8:d5:1b:64:15:94:2a:01:fd:7b:f6:fa:3f:ef:
                    53:1b:80:9f:a0:63:05:69:dd:07:67:58:4e:f1:8c:
                    e6:d4:76:54:71:ec:6a:f9:ed:0e:57:3b:d8:e3:d3:
                    63:8d:66:7c:0b:a3:0f:9b:1d:7b:64:04:71:9c:ed:
                    9f:d1:ae:f8:af:0c:1e:5a:77:0d:05:bc:e3:dd:a7:
                    eb:34:f8:1a:a5:1a:eb:f6:fb:4a:d9:6c:44:d3:40:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:42:34:17:54:7B:41:24:2C:FE:DD:5A:47:FA:F4:F2:0F:53:11:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f99ce344-22d6-48da-83f1-eddb12933cdb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f99ce344-22d6-48da-83f1-eddb12933cdb/1d2720067855da1dde44452a46b35bc76801d37f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27778

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:be:60:7c:4f:13:2e:b2:66:5c:50:b4:10:d2:0b:b7:64:
         d5:b2:7d:66:a5:10:d0:db:f4:c4:6d:aa:2b:a9:5d:d2:a9:3a:
         4a:3e:d5:be:04:e7:b9:b4:90:1b:f9:ef:2a:8b:d6:14:93:21:
         23:b0:d5:4f:cb:3a:5d:13:a7:98:b8:7a:42:01:3c:e3:85:8d:
         9b:8a:87:27:74:30:65:12:2d:5a:c8:e0:4b:b8:6e:34:07:83:
         cc:fc:0b:3e:3e:cb:65:f7:e6:ed:ef:05:46:92:07:3f:21:b4:
         8f:0e:6f:c7:f6:ff:7e:c2:8b:11:54:4d:20:de:ab:b2:1c:27:
         1c:2c:95:1b:f9:0c:89:5c:d0:86:18:23:ac:76:71:99:d8:73:
         96:71:56:f7:eb:7b:50:c3:d0:4d:e6:55:25:20:e3:ed:01:0f:
         8a:80:ef:21:aa:65:85:68:3f:54:5b:50:39:aa:65:99:a7:cc:
         47:c6:38:0e:5f:58:e1:b7:22:a1:8f:10:2c:f2:f8:58:46:5d:
         28:ce:fb:7c:4a:78:ee:36:fd:b6:9b:d4:0f:35:9e:6b:6c:81:
         73:c3:b0:47:6a:69:1b:58:32:da:0c:cc:43:4a:fb:6b:30:df:
         9b:cd:6a:78:6a:7d:5d:d2:68:f7:59:6e:cd:71:15:8f:fa:2c:
         89:54:0a:22
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIEAQwUITANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyNzIyMDg0OFoXDTI1MDUyMTE1MDAw
MFowMzExMC8GA1UEAxMoMWQyNzIwMDY3ODU1ZGExZGRlNDQ0NTJhNDZiMzViYzc2
ODAxZDM3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQVCaVVSmQS
pF4FQCnl0/8bSK1dd9PbM1XjR9hzJWFxaXJjiB/q7RLGs3XcJZoeeN3Ljz2YOuf1
SI+iKrXdtu2GbpZ7l2uycdXAtDU+05mZt+5WTX+hF8hA9xK7TmxVGKfXG9Wfu/k8
K0tvFlRE+HLWCIlfjof4pwZDB/oohqfrzOyjUiI7/tKBkK23krD+C3ZTZY4bJp1p
Ig1Az07WJMXRui8l/fjVG2QVlCoB/Xv2+j/vUxuAn6BjBWndB2dYTvGM5tR2VHHs
avntDlc72OPTY41mfAujD5sde2QEcZztn9Gu+K8MHlp3DQW8492n6zT4GqUa6/b7
StlsRNNAWCUCAwEAAaOCAtgwggLUMB0GA1UdDgQWBBRiQjQXVHtBJCz+3VpH+vTy
D1MRyTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mOTljZTM0NC0yMmQ2
LTQ4ZGEtODNmMS1lZGRiMTI5MzNjZGIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjk5Y2UzNDQtMjJkNi00
OGRhLTgzZjEtZWRkYjEyOTMzY2RiLzFkMjcyMDA2Nzg1NWRhMWRkZTQ0NDUyYTQ2
YjM1YmM3NjgwMWQzN2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJsgjANBgkqhkiG9w0BAQsFAAOCAQEAEG2+
YHxPEy6yZlxQtBDSC7dk1bJ9ZqUQ0Nv0xG2qK6ld0qk6Sj7VvgTnubSQG/nvKovW
FJMhI7DVT8s6XROnmLh6QgE844WNm4qHJ3QwZRItWsjgS7huNAeDzPwLPj7LZffm
7e8FRpIHPyG0jw5vx/b/fsKLEVRNIN6rshwnHCyVG/kMiVzQhhgjrHZxmdhzlnFW
9+t7UMPQTeZVJSDj7QEPioDvIaplhWg/VFtQOaplmafMR8Y4Dl9Y4bcioY8QLPL4
WEZdKM77fEp47jb9tpvUDzWea2yBc8OwR2ppG1gy2gzMQ0r7azDfm81qeGp9XdJo
91luzXEVj/osiVQKIg==
-----END CERTIFICATE-----