Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/218700cdd5f36bb03c7d4433358874edbd7148aa.cer
File:                     218700cdd5f36bb03c7d4433358874edbd7148aa.cer (raw, json)
Hash identifier:          3HYAytIPQ1yhdKL8q0VnZQ2dwKSucfmsdkaMeyEK/FM=
Subject key identifier:   EF:1D:15:61:97:66:04:26:5D:93:22:A1:9E:5D:67:B9:B7:D3:F9:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F00D59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/07bcc18e-918a-4d16-9942-9c771b5f8dac/218700cdd5f36bb03c7d4433358874edbd7148aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/07bcc18e-918a-4d16-9942-9c771b5f8dac/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 17:47:00 +0000
Certificate not after:    Wed 17 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 263176
                          IP: 179.0.28.0/24
                          IP: 2801:1d:4000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15732057 (0xf00d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 29 17:47:00 2023 GMT
            Not After : Jul 17 06:00:00 2024 GMT
        Subject: CN=218700cdd5f36bb03c7d4433358874edbd7148aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:a5:b8:37:d6:b0:d7:be:3a:70:c3:b5:05:
                    54:05:08:f2:db:39:1f:ad:53:0c:6c:51:9f:4a:24:
                    84:e0:33:6b:02:f4:dd:96:34:16:2f:f7:b5:0d:2a:
                    2e:c8:1b:d8:78:b8:f5:bc:d1:c1:06:e7:ca:e8:3d:
                    2c:49:b7:1b:52:f9:a1:2f:5a:ee:a4:96:97:b0:a8:
                    72:a8:69:75:e0:2a:42:ac:11:6e:22:85:16:b4:2e:
                    ed:61:2f:49:5f:3c:40:20:72:b3:02:f7:2e:1b:8d:
                    76:38:c1:c2:50:0a:a7:d1:50:48:6d:27:a5:71:5c:
                    78:d2:f1:bf:8d:3b:52:61:a2:9c:15:8e:ea:81:aa:
                    63:2d:19:91:d1:d3:5f:24:a2:e3:f4:90:e0:e3:44:
                    0b:97:80:45:35:4f:f3:92:f5:8e:e0:96:12:0b:5e:
                    9d:d9:95:d9:8b:91:ef:df:01:b1:10:68:ee:8e:6c:
                    f7:8c:41:9c:79:a2:b7:cc:03:b3:42:77:86:ae:81:
                    c4:3d:45:70:f5:0c:52:13:f7:f6:57:dd:fe:ea:8c:
                    89:2f:db:f8:29:ec:e3:63:8c:df:b0:a0:27:64:16:
                    fc:0d:2b:ff:33:d8:ce:37:c7:21:55:32:ca:2a:ae:
                    bd:63:7f:41:bf:52:51:5a:77:8e:12:19:9b:77:07:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:15:61:97:66:04:26:5D:93:22:A1:9E:5D:67:B9:B7:D3:F9:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07bcc18e-918a-4d16-9942-9c771b5f8dac/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07bcc18e-918a-4d16-9942-9c771b5f8dac/218700cdd5f36bb03c7d4433358874edbd7148aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.28.0/24
                IPv6:
                  2801:1d:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263176

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:68:71:5f:95:8a:34:bb:4b:c9:d2:72:1d:8b:64:7e:16:
         87:24:e9:e6:7c:a4:61:90:43:26:82:c5:43:f9:e6:1f:87:d0:
         0b:9a:98:57:7f:90:3e:ec:bb:12:27:88:64:4e:ac:ee:81:ba:
         3a:6d:64:c3:88:b7:2a:1b:4f:dd:b7:aa:f0:9b:90:dc:b1:c0:
         e1:0a:44:29:44:76:54:26:b7:ec:97:88:c6:7f:0d:62:c9:52:
         bc:2c:d5:91:10:0e:47:66:3f:be:f4:b4:c9:88:d8:47:d7:01:
         f8:ec:52:ce:f9:0b:e8:4e:fe:fa:04:5f:59:93:6f:86:1a:81:
         94:c4:9b:0c:b5:ff:d3:cd:94:9f:55:3b:30:1f:68:18:62:a1:
         18:b5:5b:b0:8a:ad:80:cb:c9:99:80:fa:fa:95:da:a5:6b:31:
         5b:6c:57:81:e3:44:d3:0f:3d:08:cf:71:b9:8a:23:d2:66:7e:
         a6:13:7c:8f:cc:14:43:10:2e:cd:f2:47:81:b0:83:89:d0:ed:
         82:ee:ea:3c:fd:68:cc:b4:1d:09:b7:7b:88:98:69:fc:87:4e:
         c4:f0:21:68:c2:00:50:0e:32:b0:aa:a4:33:3c:fd:b4:be:92:
         6e:bc:41:65:b2:c3:04:19:a7:cb:61:bc:c7:bb:4a:fb:82:a9:
         76:01:1e:dc
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAPANWTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyOTE3NDcwMFoXDTI0MDcxNzA2MDAw
MFowMzExMC8GA1UEAxMoMjE4NzAwY2RkNWYzNmJiMDNjN2Q0NDMzMzU4ODc0ZWRi
ZDcxNDhhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAINfpbg31rDX
vjpww7UFVAUI8ts5H61TDGxRn0okhOAzawL03ZY0Fi/3tQ0qLsgb2Hi49bzRwQbn
yug9LEm3G1L5oS9a7qSWl7CocqhpdeAqQqwRbiKFFrQu7WEvSV88QCByswL3LhuN
djjBwlAKp9FQSG0npXFceNLxv407UmGinBWO6oGqYy0ZkdHTXySi4/SQ4ONEC5eA
RTVP85L1juCWEgtendmV2YuR798BsRBo7o5s94xBnHmit8wDs0J3hq6BxD1FcPUM
UhP39lfd/uqMiS/b+Cns42OM37CgJ2QW/A0r/zPYzjfHIVUyyiquvWN/Qb9SUVp3
jhIZm3cHfu8CAwEAAaOCAwswggMHMB0GA1UdDgQWBBTvHRVhl2YEJl2TIqGeXWe5
t9P5HTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wN2JjYzE4ZS05MThh
LTRkMTYtOTk0Mi05Yzc3MWI1ZjhkYWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdiY2MxOGUtOTE4YS00
ZDE2LTk5NDItOWM3NzFiNWY4ZGFjLzIxODcwMGNkZDVmMzZiYjAzYzdkNDQzMzM1
ODg3NGVkYmQ3MTQ4YWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALMAHDAPBAIAAjAJAwcAKAEAHUAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQECDANBgkqhkiG9w0BAQsFAAOCAQEA
KedocV+VijS7S8nSch2LZH4WhyTp5nykYZBDJoLFQ/nmH4fQC5qYV3+QPuy7EieI
ZE6s7oG6Om1kw4i3KhtP3beq8JuQ3LHA4QpEKUR2VCa37JeIxn8NYslSvCzVkRAO
R2Y/vvS0yYjYR9cB+OxSzvkL6E7++gRfWZNvhhqBlMSbDLX/082Un1U7MB9oGGKh
GLVbsIqtgMvJmYD6+pXapWsxW2xXgeNE0w89CM9xuYoj0mZ+phN8j8wUQxAuzfJH
gbCDidDtgu7qPP1ozLQdCbd7iJhp/IdOxPAhaMIAUA4ysKqkMzz9tL6SbrxBZbLD
BBmny2G8x7tK+4KpdgEe3A==
-----END CERTIFICATE-----