Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27aa68b4a20ea6b0a59396bcec67bfc6ff2f1add.cer
File:                     27aa68b4a20ea6b0a59396bcec67bfc6ff2f1add.cer (raw, json)
Hash identifier:          +zXnGVbY1juFsNnAQzdNqqhE2ZAWuWPTVfn3FDkX3FI=
Subject key identifier:   52:C9:73:1D:99:58:05:DA:1B:79:93:4F:A6:85:DC:A7:D9:34:64:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E43C18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5abf6aa0-90f4-4407-9114-e5c5c8022762/27aa68b4a20ea6b0a59396bcec67bfc6ff2f1add.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5abf6aa0-90f4-4407-9114-e5c5c8022762/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Apr 2023 21:33:40 +0000
Certificate not after:    Thu 18 Jul 2024 00:28:24 +0000
Subordinate resources:    AS: 269784
                          IP: 45.184.116.0/22
                          IP: 2801:18:4800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14957592 (0xe43c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  7 21:33:40 2023 GMT
            Not After : Jul 18 00:28:24 2024 GMT
        Subject: CN=27aa68b4a20ea6b0a59396bcec67bfc6ff2f1add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:83:8a:86:78:eb:f3:3c:3c:34:f8:e3:f9:
                    ea:8d:a0:02:c4:ff:d9:8e:ac:10:01:b1:a2:c4:51:
                    ff:35:15:a5:fa:06:99:48:59:b6:ee:dc:6a:30:c8:
                    e6:dc:c7:c9:ac:df:85:3c:78:92:3b:08:52:76:2e:
                    0b:63:b1:c1:53:8a:e0:e6:b9:0c:63:fb:81:ca:f9:
                    7e:d3:21:29:c4:07:1d:fe:e0:de:81:c9:74:f0:ff:
                    9a:f5:87:18:4d:3d:db:58:3f:ba:2e:e1:f6:b4:31:
                    13:19:17:7a:5a:ca:52:a9:9f:d3:b8:0d:bb:90:9d:
                    69:ba:f1:13:53:88:66:82:cf:a3:8c:27:ce:e5:1a:
                    b5:af:ae:6f:9a:ae:12:f6:77:60:eb:a0:d4:4c:6b:
                    5d:17:fe:23:7d:e3:ab:8f:b2:77:f9:d5:af:d8:d4:
                    21:cc:79:3f:4b:d2:c0:11:4e:79:a2:87:66:bb:75:
                    98:2d:8d:57:d0:11:3a:3a:52:f2:b0:9d:75:31:66:
                    04:55:50:38:00:6b:f6:d3:89:e5:be:6d:b0:97:52:
                    9a:9f:a5:46:42:85:67:ba:a0:89:81:69:ab:93:c8:
                    b9:9f:86:88:3b:e9:1e:31:15:09:5b:d7:00:a7:81:
                    0f:0b:5e:f6:26:83:4c:73:cb:50:f3:11:72:e9:42:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C9:73:1D:99:58:05:DA:1B:79:93:4F:A6:85:DC:A7:D9:34:64:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5abf6aa0-90f4-4407-9114-e5c5c8022762/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5abf6aa0-90f4-4407-9114-e5c5c8022762/27aa68b4a20ea6b0a59396bcec67bfc6ff2f1add.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.116.0/22
                IPv6:
                  2801:18:4800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269784

    Signature Algorithm: sha256WithRSAEncryption
         c3:e4:51:c0:0f:84:49:ea:08:df:18:f8:d3:b4:06:bb:1d:cc:
         1e:6c:c4:d0:40:fb:9a:34:e7:08:02:02:2c:2e:93:8c:b8:40:
         56:48:de:c8:f0:a6:df:77:7e:dd:4b:b1:a8:ef:14:d0:9e:c9:
         a8:9d:4a:10:74:57:c3:2a:b5:0d:d7:a8:bb:eb:cc:87:5f:6c:
         12:08:35:87:37:e8:dd:2b:9b:6e:bf:c9:fd:f8:a2:6d:6f:ec:
         c7:73:46:66:f0:81:51:d4:c1:d4:b6:9a:9f:7e:7b:d4:7e:3b:
         c0:ce:8c:50:cf:fc:21:37:e4:b3:40:18:ea:02:c5:e8:bb:f8:
         52:45:44:f6:32:5f:5f:18:12:09:fd:f6:27:b6:61:55:54:02:
         ef:83:45:31:f4:fb:c7:c6:0e:bd:a2:0f:a4:85:ee:ec:4f:68:
         40:be:a2:65:24:be:33:b0:1b:7d:eb:78:d3:4a:96:dc:b3:c0:
         41:5f:bf:f9:dc:ea:4f:82:c5:dc:b1:6a:9a:54:7e:c8:19:d5:
         f5:b9:3a:02:95:06:1e:71:02:a2:9d:61:d8:c8:ed:cf:d4:15:
         03:51:1b:4e:68:bb:49:02:f1:30:0f:83:c4:cb:64:b7:1e:5e:
         78:7b:01:70:84:e4:4c:42:e3:0b:f0:d5:65:92:17:8d:65:38:
         6d:30:4b:2f
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOQ8GDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwNzIxMzM0MFoXDTI0MDcxODAwMjgy
NFowMzExMC8GA1UEAxMoMjdhYTY4YjRhMjBlYTZiMGE1OTM5NmJjZWM2N2JmYzZm
ZjJmMWFkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKd5g4qGeOvz
PDw0+OP56o2gAsT/2Y6sEAGxosRR/zUVpfoGmUhZtu7cajDI5tzHyazfhTx4kjsI
UnYuC2OxwVOK4Oa5DGP7gcr5ftMhKcQHHf7g3oHJdPD/mvWHGE0921g/ui7h9rQx
ExkXelrKUqmf07gNu5CdabrxE1OIZoLPo4wnzuUata+ub5quEvZ3YOug1ExrXRf+
I33jq4+yd/nVr9jUIcx5P0vSwBFOeaKHZrt1mC2NV9AROjpS8rCddTFmBFVQOABr
9tOJ5b5tsJdSmp+lRkKFZ7qgiYFpq5PIuZ+GiDvpHjEVCVvXAKeBDwte9iaDTHPL
UPMRculCwhMCAwEAAaOCAwswggMHMB0GA1UdDgQWBBRSyXMdmVgF2ht5k0+mhdyn
2TRkGjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YWJmNmFhMC05MGY0
LTQ0MDctOTExNC1lNWM1YzgwMjI3NjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWFiZjZhYTAtOTBmNC00
NDA3LTkxMTQtZTVjNWM4MDIyNzYyLzI3YWE2OGI0YTIwZWE2YjBhNTkzOTZiY2Vj
NjdiZmM2ZmYyZjFhZGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAi24dDAPBAIAAjAJAwcAKAEAGEgA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd2DANBgkqhkiG9w0BAQsFAAOCAQEA
w+RRwA+ESeoI3xj407QGux3MHmzE0ED7mjTnCAICLC6TjLhAVkjeyPCm33d+3Uux
qO8U0J7JqJ1KEHRXwyq1Ddeou+vMh19sEgg1hzfo3Subbr/J/fiibW/sx3NGZvCB
UdTB1Laan3571H47wM6MUM/8ITfks0AY6gLF6Lv4UkVE9jJfXxgSCf32J7ZhVVQC
74NFMfT7x8YOvaIPpIXu7E9oQL6iZSS+M7Abfet400qW3LPAQV+/+dzqT4LF3LFq
mlR+yBnV9bk6ApUGHnECop1h2Mjtz9QVA1EbTmi7SQLxMA+DxMtktx5eeHsBcITk
TELjC/DVZZIXjWU4bTBLLw==
-----END CERTIFICATE-----