Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27e1ab795ab87c1c136f878e5867e526f30254de.cer
File:                     27e1ab795ab87c1c136f878e5867e526f30254de.cer (raw, json)
Hash identifier:          ScgE9BznfB/yKduY89kYHYcnEcUTlRxLeiUb12KHoMQ=
Subject key identifier:   1A:BA:19:E7:12:DF:F0:C1:89:D8:5E:81:DE:70:CF:9D:31:89:42:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BFD251
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/27e1ab795ab87c1c136f878e5867e526f30254de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Feb 2022 14:42:44 +0000
Certificate not after:    Thu 07 Dec 2023 13:59:37 +0000
Subordinate resources:    AS: 272066
                          IP: 2803:5310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12571217 (0xbfd251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  9 14:42:44 2022 GMT
            Not After : Dec  7 13:59:37 2023 GMT
        Subject: CN=27e1ab795ab87c1c136f878e5867e526f30254de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:f0:63:29:e1:52:09:16:b0:0b:5d:e1:8f:
                    d9:1a:0d:b6:11:a2:bd:e0:c4:25:05:53:fb:a9:38:
                    62:70:b8:72:0c:f8:8b:cd:08:42:e3:be:1d:1b:43:
                    dd:10:bb:64:8b:d0:5b:79:6b:f7:c5:40:78:37:f8:
                    ee:da:65:20:87:d0:6b:ee:13:4e:b9:19:7c:19:0e:
                    00:3a:72:82:06:4d:a3:68:0e:5c:ad:99:ed:7d:eb:
                    27:8b:f2:da:a7:c3:06:0b:34:6b:7d:4a:4c:6d:2a:
                    ed:ac:a2:5c:d1:07:91:e8:12:d9:47:a3:52:05:a5:
                    99:ec:ca:2a:6f:de:eb:5e:a8:6f:75:a0:e5:99:26:
                    3d:97:7a:98:a3:3a:76:bb:44:76:6f:8b:2b:41:b5:
                    3a:ea:c1:c0:66:87:2e:a4:e0:be:01:35:2c:51:94:
                    12:a5:4e:ca:d5:ec:b7:94:ca:23:3b:d2:f1:ef:52:
                    ac:1b:c0:3e:f4:1e:4f:97:7f:e0:85:50:ce:91:92:
                    67:7d:9c:3d:34:b6:49:5a:8d:a9:2e:c5:96:f1:1d:
                    4f:c8:11:67:4b:b0:56:fd:99:35:9a:6f:fc:4b:6d:
                    82:86:b1:c2:77:a1:22:53:6d:91:32:01:29:2b:e9:
                    77:ce:59:e0:87:24:0b:af:98:cb:60:a1:d9:d5:38:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:19:E7:12:DF:F0:C1:89:D8:5E:81:DE:70:CF:9D:31:89:42:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/27e1ab795ab87c1c136f878e5867e526f30254de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272066

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:ce:27:df:85:cc:94:b1:f3:39:4e:f9:e4:5d:0c:8e:a4:
         97:bb:ed:0d:6a:66:f6:69:57:46:8b:22:99:b4:c1:5f:99:69:
         d4:54:49:8c:75:5c:39:0f:f3:92:c9:49:04:27:5f:a7:8d:18:
         58:05:08:c0:23:ab:59:88:fe:9f:52:b6:ea:d0:f7:8a:f8:cb:
         c1:02:d2:c2:62:ee:2f:92:ab:6a:10:d2:db:6e:61:8c:6e:bc:
         27:b5:d9:19:09:42:4d:27:93:63:b4:75:bc:27:8d:41:c9:5c:
         b4:11:14:23:7b:cf:bf:20:57:a7:f0:2c:69:0f:07:94:0e:e7:
         32:31:c2:26:96:ee:a3:7d:25:32:f8:f7:c6:14:5e:0f:8f:96:
         1d:69:54:3e:c0:fc:da:76:0c:a9:e7:0d:8c:e8:29:7d:6d:2c:
         1a:09:0e:21:5f:4d:bc:37:51:30:0f:4e:8c:02:74:10:1c:22:
         30:8f:1e:09:9a:58:5d:02:ec:db:97:0e:16:b0:ce:a3:ff:c0:
         a5:2d:f1:02:08:eb:c8:87:08:33:33:9a:56:04:e5:58:3e:bb:
         ad:32:80:f1:90:80:17:a6:38:88:71:a9:55:2d:a3:74:89:6a:
         87:9d:0c:dd:12:56:90:bc:af:82:1d:a9:ec:95:68:27:ab:6e:
         b7:e8:c1:49
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAL/SUTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDIwOTE0NDI0NFoXDTIzMTIwNzEzNTkz
N1owMzExMC8GA1UEAxMoMjdlMWFiNzk1YWI4N2MxYzEzNmY4NzhlNTg2N2U1MjZm
MzAyNTRkZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM+n8GMp4VIJ
FrALXeGP2RoNthGiveDEJQVT+6k4YnC4cgz4i80IQuO+HRtD3RC7ZIvQW3lr98VA
eDf47tplIIfQa+4TTrkZfBkOADpyggZNo2gOXK2Z7X3rJ4vy2qfDBgs0a31KTG0q
7ayiXNEHkegS2UejUgWlmezKKm/e616ob3Wg5ZkmPZd6mKM6drtEdm+LK0G1OurB
wGaHLqTgvgE1LFGUEqVOytXst5TKIzvS8e9SrBvAPvQeT5d/4IVQzpGSZ32cPTS2
SVqNqS7FlvEdT8gRZ0uwVv2ZNZpv/EttgoaxwnehIlNtkTIBKSvpd85Z4IckC6+Y
y2Ch2dU44lkCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQauhnnEt/wwYnYXoHecM+d
MYlC2jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mOTYxOTc5Ni1hYTNk
LTQ4OGMtODNhZS1lNTA4MmQwZjU2ODMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjk2MTk3OTYtYWEzZC00
ODhjLTgzYWUtZTUwODJkMGY1NjgzLzI3ZTFhYjc5NWFiODdjMWMxMzZmODc4ZTU4
NjdlNTI2ZjMwMjU0ZGUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUxAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCbCMA0GCSqGSIb3DQEBCwUAA4IBAQBYt84n34XMlLHzOU755F0M
jqSXu+0Namb2aVdGiyKZtMFfmWnUVEmMdVw5D/OSyUkEJ1+njRhYBQjAI6tZiP6f
Urbq0PeK+MvBAtLCYu4vkqtqENLbbmGMbrwntdkZCUJNJ5NjtHW8J41ByVy0ERQj
e8+/IFen8CxpDweUDucyMcImlu6jfSUy+PfGFF4Pj5YdaVQ+wPzadgyp5w2M6Cl9
bSwaCQ4hX028N1EwD06MAnQQHCIwjx4JmlhdAuzblw4WsM6j/8ClLfECCOvIhwgz
M5pWBOVYPrutMoDxkIAXpjiIcalVLaN0iWqHnQzdElaQvK+CHanslWgnq2636MFJ
-----END CERTIFICATE-----