Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e1f3de46e154a6f423da28644b2f041eea11dd3.cer
File:                     1e1f3de46e154a6f423da28644b2f041eea11dd3.cer (raw, json)
Hash identifier:          Mz5T2rPgP1MQizNavCXzJCU7tXgiMXQJBK4z3NnWtqY=
Subject key identifier:   C3:BF:77:D4:40:16:BC:88:F0:B4:F5:C6:FA:F7:98:B9:46:D0:05:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01030432
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a073bc90-8f4b-4c99-b879-5ded9abae7bc/1e1f3de46e154a6f423da28644b2f041eea11dd3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a073bc90-8f4b-4c99-b879-5ded9abae7bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 19:34:13 +0000
Certificate not after:    Tue 22 Oct 2024 15:56:51 +0000
Subordinate resources:    AS: 61517
                          IP: 168.0.56.0/22
                          IP: 2801:13:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16974898 (0x1030432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  6 19:34:13 2023 GMT
            Not After : Oct 22 15:56:51 2024 GMT
        Subject: CN=1e1f3de46e154a6f423da28644b2f041eea11dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:35:50:c8:0d:51:54:30:46:ac:7f:c7:3d:
                    11:e3:ff:cd:93:c0:27:4e:e7:49:a7:66:ad:7a:fb:
                    36:5f:17:5e:be:4c:12:0a:95:c5:1c:c8:1e:73:03:
                    51:36:8f:8e:77:e2:d8:44:c2:44:23:d4:c5:7c:cd:
                    20:ca:41:5c:0a:9c:33:90:f2:0a:01:94:44:7e:52:
                    06:9f:04:3d:24:1f:8e:61:08:97:45:56:da:8e:13:
                    57:15:0d:a8:49:16:52:58:b2:a8:6f:35:26:8a:57:
                    cc:a3:e6:73:76:00:3d:9c:f3:fe:16:cf:1a:46:d3:
                    2d:9c:c7:72:d5:af:ad:9f:90:bc:08:fe:5c:3d:62:
                    6e:25:e9:ec:95:24:c1:cb:38:f5:8c:ea:18:14:14:
                    62:fa:bc:8d:05:8f:6b:5e:5f:6e:92:2c:51:7e:76:
                    b5:0d:91:8d:ed:4f:5a:a9:27:6b:6a:1e:f7:54:f8:
                    fa:b2:14:0b:41:75:71:65:d4:02:49:1c:73:c9:cc:
                    99:f7:f7:f2:1c:f3:e6:d0:a2:35:71:b6:2a:f0:02:
                    77:22:86:0a:66:43:8e:22:69:f7:78:19:62:d6:51:
                    2c:c4:2d:58:46:c7:e5:88:c4:53:d4:ec:6b:82:85:
                    5f:40:9d:a8:b2:20:bd:e6:1f:7b:a9:7b:9d:fc:4e:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:77:D4:40:16:BC:88:F0:B4:F5:C6:FA:F7:98:B9:46:D0:05:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a073bc90-8f4b-4c99-b879-5ded9abae7bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a073bc90-8f4b-4c99-b879-5ded9abae7bc/1e1f3de46e154a6f423da28644b2f041eea11dd3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.56.0/22
                IPv6:
                  2801:13:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61517

    Signature Algorithm: sha256WithRSAEncryption
         ab:c5:68:cf:26:31:58:07:3e:79:0b:c0:a7:b6:ef:e5:f8:9c:
         0a:a3:ba:ac:03:39:99:84:ef:48:b8:0e:bc:02:e8:8a:8a:b1:
         bc:ca:43:06:c4:41:27:e2:a2:ad:71:ed:22:29:33:b4:d0:40:
         61:86:91:c2:cf:2c:11:95:bb:b3:22:7d:2b:85:9d:6a:33:b1:
         c3:b0:9f:ed:f1:2c:9b:55:00:53:45:7d:64:28:11:9b:95:09:
         45:a2:22:95:23:a2:e8:70:a7:bc:2e:33:a4:5c:bf:32:80:f3:
         1a:92:fa:27:05:67:34:6d:13:c7:28:7c:cc:6f:7c:a8:b3:fe:
         53:e3:82:53:ad:8e:e2:6e:9a:49:f0:13:31:b0:04:d4:02:fb:
         28:a6:e5:01:fe:9f:93:a7:62:8d:bc:17:8e:3f:9a:33:be:ea:
         5b:25:da:c4:84:2a:42:a5:30:79:47:78:0f:e7:0c:8d:82:94:
         2b:78:89:5b:db:e6:1a:43:d1:2a:56:eb:2e:bf:ca:c5:91:43:
         04:0a:34:a2:ec:c2:bd:47:77:97:b9:06:9d:3d:74:87:5e:75:
         42:64:7d:c9:b2:8e:6a:66:25:df:e2:54:ac:8d:16:69:b6:00:
         19:6f:cc:8d:14:2c:b8:f1:50:77:45:9e:41:c9:6d:58:9a:3b:
         2c:8f:48:ab
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAQMEMjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIwNjE5MzQxM1oXDTI0MTAyMjE1NTY1
MVowMzExMC8GA1UEAxMoMWUxZjNkZTQ2ZTE1NGE2ZjQyM2RhMjg2NDRiMmYwNDFl
ZWExMWRkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK59NVDIDVFU
MEasf8c9EeP/zZPAJ07nSadmrXr7Nl8XXr5MEgqVxRzIHnMDUTaPjnfi2ETCRCPU
xXzNIMpBXAqcM5DyCgGURH5SBp8EPSQfjmEIl0VW2o4TVxUNqEkWUliyqG81JopX
zKPmc3YAPZzz/hbPGkbTLZzHctWvrZ+QvAj+XD1ibiXp7JUkwcs49YzqGBQUYvq8
jQWPa15fbpIsUX52tQ2Rje1PWqkna2oe91T4+rIUC0F1cWXUAkkcc8nMmff38hzz
5tCiNXG2KvACdyKGCmZDjiJp93gZYtZRLMQtWEbH5YjEU9Tsa4KFX0CdqLIgveYf
e6l7nfxOsmECAwEAAaOCAwswggMHMB0GA1UdDgQWBBTDv3fUQBa8iPC09cb695i5
RtAFETAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMDczYmM5MC04ZjRi
LTRjOTktYjg3OS01ZGVkOWFiYWU3YmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTA3M2JjOTAtOGY0Yi00
Yzk5LWI4NzktNWRlZDlhYmFlN2JjLzFlMWYzZGU0NmUxNTRhNmY0MjNkYTI4NjQ0
YjJmMDQxZWVhMTFkZDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAqgAODAPBAIAAjAJAwcAKAEAExAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwTTANBgkqhkiG9w0BAQsFAAOCAQEA
q8VozyYxWAc+eQvAp7bv5ficCqO6rAM5mYTvSLgOvALoioqxvMpDBsRBJ+KirXHt
IikztNBAYYaRws8sEZW7syJ9K4WdajOxw7Cf7fEsm1UAU0V9ZCgRm5UJRaIilSOi
6HCnvC4zpFy/MoDzGpL6JwVnNG0Txyh8zG98qLP+U+OCU62O4m6aSfATMbAE1AL7
KKblAf6fk6dijbwXjj+aM77qWyXaxIQqQqUweUd4D+cMjYKUK3iJW9vmGkPRKlbr
Lr/KxZFDBAo0ouzCvUd3l7kGnT10h151QmR9ybKOamYl3+JUrI0WabYAGW/MjRQs
uPFQd0WeQcltWJo7LI9Iqw==
-----END CERTIFICATE-----