Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0c35b144a34b9bfe5fa962c1c303947a3a629e.cer
File:                     2f0c35b144a34b9bfe5fa962c1c303947a3a629e.cer (raw, json)
Hash identifier:          akOZ3gJDL9hhaXaFj02hta8O12Kk58ln9t9gQPBiayU=
Subject key identifier:   F0:A5:61:C7:08:37:98:23:EB:7C:DB:0C:8A:44:EA:21:B2:11:A7:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD7858
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/2f0c35b144a34b9bfe5fa962c1c303947a3a629e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 21:19:19 +0000
Certificate not after:    Mon 28 Jul 2025 16:05:08 +0000
Subordinate resources:    AS: 272880
                          IP: 2803:ea90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16611416 (0xfd7858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 19 21:19:19 2023 GMT
            Not After : Jul 28 16:05:08 2025 GMT
        Subject: CN=2f0c35b144a34b9bfe5fa962c1c303947a3a629e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:48:5e:48:cd:09:0c:d2:13:79:2e:c9:23:
                    b7:93:81:9a:98:99:f9:e5:58:b0:9e:58:32:6f:ee:
                    65:89:fa:3e:d2:be:9e:de:6a:3e:55:06:50:ec:e6:
                    3f:64:0f:74:52:a5:8e:45:1f:c3:3b:bc:80:0c:ed:
                    43:ff:c4:51:98:25:dc:84:55:13:0e:0e:81:1b:48:
                    52:08:04:f5:05:88:7b:9f:05:91:a3:7c:80:15:e1:
                    92:da:f9:ae:ec:41:26:5a:88:51:32:9c:d2:2e:9c:
                    68:70:6b:f8:e9:8b:b9:46:2e:da:54:dc:5c:c6:ea:
                    39:21:cf:f7:47:a7:1a:6d:26:1f:1e:0e:0e:50:3a:
                    f7:09:7f:42:cc:96:80:04:ed:11:e8:bc:0f:e0:04:
                    8f:4e:6d:e3:db:08:bf:c4:b3:ea:63:3c:fe:53:b3:
                    0e:57:f5:3f:90:a7:55:74:c9:71:2e:9c:e5:aa:bc:
                    04:8a:a1:de:fb:81:a5:5a:94:29:44:db:29:2e:da:
                    07:2d:15:ce:6d:13:8f:60:d5:9e:12:fc:ec:10:d4:
                    24:66:34:11:c9:fd:22:d1:1d:d5:d4:3d:69:02:ef:
                    c0:5d:36:83:18:16:81:ff:36:a3:96:23:25:7e:1d:
                    57:b6:77:c8:8c:e2:0b:2e:ed:c8:0f:a5:cf:75:d4:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:61:C7:08:37:98:23:EB:7C:DB:0C:8A:44:EA:21:B2:11:A7:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/2f0c35b144a34b9bfe5fa962c1c303947a3a629e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272880

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:55:cf:37:6f:c7:6a:31:24:9d:4f:6b:38:4d:77:47:00:
         29:b2:56:4f:b7:ab:44:54:4d:9a:7b:fb:ae:94:e7:fc:2b:14:
         88:49:51:58:d7:54:ce:73:6f:b4:5a:cd:16:70:1d:02:81:2d:
         1f:e8:e7:27:cb:0b:aa:78:f6:90:d0:6d:9c:42:1c:55:41:7e:
         67:0b:6d:37:f8:54:dd:ea:8a:78:27:94:01:ab:43:2e:02:7d:
         a7:00:87:29:89:7c:f1:87:61:cf:3f:f9:db:b2:02:98:96:bf:
         b6:0d:e6:a5:ba:c3:20:c2:2d:cb:c2:c4:02:06:a1:3c:4a:48:
         91:dd:71:b5:7e:44:94:9a:f7:74:da:f0:2d:9b:fb:69:78:eb:
         27:c0:51:3f:04:a5:60:03:74:f9:b9:98:e8:48:6b:be:71:b8:
         15:89:f8:2a:60:91:0d:81:1e:8e:54:7f:75:8a:03:61:11:1b:
         4e:4b:f0:5c:53:5f:60:f9:43:b4:01:f4:ed:2f:60:41:fe:d3:
         b3:3e:cf:26:42:cd:5f:d2:b5:ec:3e:50:98:92:a7:92:54:38:
         13:92:bc:c6:81:d7:d2:5b:4a:d6:af:03:d4:dd:e7:7f:30:63:
         80:ad:53:5e:f8:58:b6:ae:97:d9:9a:d3:ec:4d:03:5c:bf:92:
         e9:78:b5:59
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAP14WDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAxOTIxMTkxOVoXDTI1MDcyODE2MDUw
OFowMzExMC8GA1UEAxMoMmYwYzM1YjE0NGEzNGI5YmZlNWZhOTYyYzFjMzAzOTQ3
YTNhNjI5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALFGSF5IzQkM
0hN5Lskjt5OBmpiZ+eVYsJ5YMm/uZYn6PtK+nt5qPlUGUOzmP2QPdFKljkUfwzu8
gAztQ//EUZgl3IRVEw4OgRtIUggE9QWIe58FkaN8gBXhktr5ruxBJlqIUTKc0i6c
aHBr+OmLuUYu2lTcXMbqOSHP90enGm0mHx4ODlA69wl/QsyWgATtEei8D+AEj05t
49sIv8Sz6mM8/lOzDlf1P5CnVXTJcS6c5aq8BIqh3vuBpVqUKUTbKS7aBy0Vzm0T
j2DVnhL87BDUJGY0Ecn9ItEd1dQ9aQLvwF02gxgWgf82o5YjJX4dV7Z3yIziCy7t
yA+lz3XUcZsCAwEAAaOCAvswggL3MB0GA1UdDgQWBBTwpWHHCDeYI+t82wyKROoh
shGn7TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zM2E5ZWQ1ZS05NTkz
LTQ3ODctYjI2MC1lOWNhYzkzZjQ1ZjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzNhOWVkNWUtOTU5My00
Nzg3LWIyNjAtZTljYWM5M2Y0NWYyLzJmMGMzNWIxNDRhMzRiOWJmZTVmYTk2MmMx
YzMwMzk0N2EzYTYyOWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD6pAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCnwMA0GCSqGSIb3DQEBCwUAA4IBAQBddFXPN2/HajEknU9rOE13
RwApslZPt6tEVE2ae/uulOf8KxSISVFY11TOc2+0Ws0WcB0CgS0f6OcnywuqePaQ
0G2cQhxVQX5nC203+FTd6op4J5QBq0MuAn2nAIcpiXzxh2HPP/nbsgKYlr+2Deal
usMgwi3LwsQCBqE8SkiR3XG1fkSUmvd02vAtm/tpeOsnwFE/BKVgA3T5uZjoSGu+
cbgVifgqYJENgR6OVH91igNhERtOS/BcU19g+UO0AfTtL2BB/tOzPs8mQs1f0rXs
PlCYkqeSVDgTkrzGgdfSW0rWrwPU3ed/MGOArVNe+Fi2rpfZmtPsTQNcv5LpeLVZ
-----END CERTIFICATE-----