Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/272ad17c4da2caaa4a28b937edc67ea850fed5d7.cer
File:                     272ad17c4da2caaa4a28b937edc67ea850fed5d7.cer (raw, json)
Hash identifier:          V2kIbv7UtXkXx7RqF6o/7cyH0+bOs6LWyFsyN2tXB3c=
Subject key identifier:   F1:4B:A0:DE:98:17:35:19:2B:60:13:0E:27:78:3D:47:8A:79:C5:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC5616
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed8d8633-be1d-4c23-8676-27654bd69064/272ad17c4da2caaa4a28b937edc67ea850fed5d7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed8d8633-be1d-4c23-8676-27654bd69064/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 22:29:02 +0000
Certificate not after:    Wed 26 Mar 2025 19:21:47 +0000
Subordinate resources:    AS: 28420
                          IP: 45.7.28.0/22
                          IP: 2806:2e3::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16537110 (0xfc5616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 22:29:02 2023 GMT
            Not After : Mar 26 19:21:47 2025 GMT
        Subject: CN=272ad17c4da2caaa4a28b937edc67ea850fed5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:27:a3:35:ff:5f:12:07:19:72:77:43:87:
                    97:1c:98:57:6f:ad:39:46:a7:ab:70:6c:dd:51:34:
                    64:59:f0:3b:a2:df:e6:f6:48:f2:4d:f3:6b:af:3b:
                    31:71:67:5c:eb:ee:d0:16:00:8a:31:ee:ec:9e:10:
                    50:54:4f:80:c7:1f:ec:7d:e9:ce:e6:2e:25:73:ec:
                    05:8f:64:91:da:d2:f7:1b:3f:23:22:e2:2e:f2:6d:
                    90:6b:bb:d2:1b:d8:19:72:72:be:6f:eb:0e:7e:57:
                    14:6b:11:39:d2:c1:ff:fd:3b:83:81:eb:6f:bd:cb:
                    f1:14:11:d2:25:9b:ea:aa:95:a1:d7:4f:c6:c2:02:
                    f7:5c:50:2a:48:25:80:7d:8a:1c:e0:83:ee:22:d4:
                    f3:8f:a0:22:e8:ec:93:8f:fa:c7:33:d8:be:40:4d:
                    1e:63:8c:85:4c:6d:8c:5e:55:9c:d9:78:51:42:1b:
                    dc:ae:15:95:76:0f:a9:7d:2a:5a:c3:53:fe:ef:b4:
                    fd:66:19:30:73:4b:25:df:33:95:7a:a5:99:e1:c3:
                    83:cc:e9:51:12:40:61:7b:1d:8f:7c:93:dd:c2:85:
                    06:4f:84:d3:04:2d:38:2a:86:b7:4c:a8:fb:03:10:
                    54:f6:39:94:e7:24:5c:49:52:54:37:73:dd:4f:85:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:A0:DE:98:17:35:19:2B:60:13:0E:27:78:3D:47:8A:79:C5:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed8d8633-be1d-4c23-8676-27654bd69064/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed8d8633-be1d-4c23-8676-27654bd69064/272ad17c4da2caaa4a28b937edc67ea850fed5d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.28.0/22
                IPv6:
                  2806:2e3::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28420

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:8e:51:5e:28:76:1c:f3:a8:14:22:c4:c1:ab:9f:42:e0:
         d3:9e:de:22:42:7d:4a:f0:6d:24:6c:cd:d4:8c:23:2e:90:f3:
         36:94:c3:a9:da:c4:01:57:6b:48:89:fa:9b:47:44:f1:b2:3d:
         5a:67:1f:cd:e4:3e:ea:20:09:bb:96:1e:17:38:fd:c4:2e:5a:
         fd:c1:9f:06:bf:38:99:29:14:75:3a:5f:86:5d:3e:1a:02:f0:
         87:96:31:05:f2:e5:1d:ed:1a:89:b8:79:c6:20:fd:14:57:81:
         fc:fe:e2:ea:ba:d6:d8:e1:fd:7c:0c:49:61:9a:a4:c2:66:82:
         da:25:2d:1b:f6:c1:ba:fc:1f:4d:f5:5d:7b:53:b7:4d:46:31:
         6f:5f:55:cd:ab:74:f8:00:c9:d8:31:83:63:8d:2a:5e:c9:cd:
         7f:e3:0f:92:5a:e2:58:e3:4d:d8:bc:3e:35:d3:84:41:9a:d9:
         fa:9f:4b:87:c0:bd:3c:fb:44:73:dc:87:52:21:30:91:dc:dd:
         96:9c:01:94:7d:cb:e5:06:a3:4b:4b:90:3d:57:9b:79:db:79:
         8c:04:4b:74:ee:15:48:06:7b:91:7c:36:fd:1d:e8:be:09:1e:
         65:7a:c7:87:ae:4a:8e:5a:09:1a:fc:0d:9f:8e:85:0c:bb:7f:
         f1:70:86:ac
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAPxWFjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAwOTIyMjkwMloXDTI1MDMyNjE5MjE0
N1owMzExMC8GA1UEAxMoMjcyYWQxN2M0ZGEyY2FhYTRhMjhiOTM3ZWRjNjdlYTg1
MGZlZDVkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJSfJ6M1/18S
Bxlyd0OHlxyYV2+tOUanq3Bs3VE0ZFnwO6Lf5vZI8k3za687MXFnXOvu0BYAijHu
7J4QUFRPgMcf7H3pzuYuJXPsBY9kkdrS9xs/IyLiLvJtkGu70hvYGXJyvm/rDn5X
FGsROdLB//07g4Hrb73L8RQR0iWb6qqVoddPxsIC91xQKkglgH2KHOCD7iLU84+g
Iujsk4/6xzPYvkBNHmOMhUxtjF5VnNl4UUIb3K4VlXYPqX0qWsNT/u+0/WYZMHNL
Jd8zlXqlmeHDg8zpURJAYXsdj3yT3cKFBk+E0wQtOCqGt0yo+wMQVPY5lOckXElS
VDdz3U+FxWkCAwEAAaOCAwgwggMEMB0GA1UdDgQWBBTxS6DemBc1GStgEw4neD1H
innFKDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZDhkODYzMy1iZTFk
LTRjMjMtODY3Ni0yNzY1NGJkNjkwNjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWQ4ZDg2MzMtYmUxZC00
YzIzLTg2NzYtMjc2NTRiZDY5MDY0LzI3MmFkMTdjNGRhMmNhYWE0YTI4YjkzN2Vk
YzY3ZWE4NTBmZWQ1ZDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0HHDANBAIAAjAHAwUAKAYC4zAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJvBDANBgkqhkiG9w0BAQsFAAOCAQEATHCO
UV4odhzzqBQixMGrn0Lg057eIkJ9SvBtJGzN1IwjLpDzNpTDqdrEAVdrSIn6m0dE
8bI9WmcfzeQ+6iAJu5YeFzj9xC5a/cGfBr84mSkUdTpfhl0+GgLwh5YxBfLlHe0a
ibh5xiD9FFeB/P7i6rrW2OH9fAxJYZqkwmaC2iUtG/bBuvwfTfVde1O3TUYxb19V
zat0+ADJ2DGDY40qXsnNf+MPklriWONN2Lw+NdOEQZrZ+p9Lh8C9PPtEc9yHUiEw
kdzdlpwBlH3L5QajS0uQPVebedt5jARLdO4VSAZ7kXw2/R3ovgkeZXrHh65KjloJ
GvwNn46FDLt/8XCGrA==
-----END CERTIFICATE-----