Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/325cea8e6072507cfceb67a04c253cbee6446cf3.cer
File:                     325cea8e6072507cfceb67a04c253cbee6446cf3.cer (raw, json)
Hash identifier:          jv5jD5mcZR3x81HPx6C7NhXeHLLXkaJKiuey+K5yEPo=
Subject key identifier:   DF:E4:13:C7:0E:88:35:CD:1F:B7:FB:89:81:98:BF:9D:05:42:5C:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEDB22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/325cea8e6072507cfceb67a04c253cbee6446cf3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Feb 2023 12:07:16 +0000
Certificate not after:    Sat 13 Jan 2024 18:04:00 +0000
Subordinate resources:    AS: 269970
                          IP: 24.152.57.0/24
                          IP: 2803:36e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14605090 (0xdedb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 12:07:16 2023 GMT
            Not After : Jan 13 18:04:00 2024 GMT
        Subject: CN=325cea8e6072507cfceb67a04c253cbee6446cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:16:9e:97:81:0e:c1:83:19:4f:39:7d:69:
                    1b:34:b8:ff:0d:d7:a7:ee:3f:16:67:a3:ac:34:ff:
                    34:ca:ae:48:02:fc:fb:05:30:16:24:77:72:06:9b:
                    94:0c:1e:28:7d:8e:33:85:7e:e4:9b:73:8c:34:85:
                    39:1a:aa:64:4f:f1:fb:7a:58:03:b7:a7:ce:99:f3:
                    23:94:60:5c:b1:02:a0:36:a7:d5:a1:c8:56:51:cf:
                    09:e3:a4:e8:14:28:90:bc:bd:b0:2c:29:00:cd:1a:
                    c7:74:67:12:d9:db:3f:87:d7:1d:fe:b8:75:9f:f9:
                    33:64:74:5d:f7:50:10:82:35:98:31:13:69:7c:fe:
                    23:81:e3:fd:3e:a4:51:7b:d0:6a:a8:a3:43:88:f2:
                    22:ec:8f:d2:f9:7c:3b:42:cc:68:e4:c6:10:88:9c:
                    03:08:db:06:c2:3d:94:b5:49:1d:eb:16:ae:3a:45:
                    0f:7f:97:df:9b:f1:a6:cc:86:79:9a:4d:89:00:b7:
                    05:fd:a5:10:35:4a:a2:38:1e:06:ed:0f:1d:85:bb:
                    5c:7c:69:df:32:f4:2c:f8:60:5f:a4:4f:97:d8:fe:
                    bc:18:b4:87:0c:5a:f1:49:98:88:ef:1a:bf:55:db:
                    ec:98:af:2c:b2:18:58:8a:66:db:d3:ed:9b:90:d6:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E4:13:C7:0E:88:35:CD:1F:B7:FB:89:81:98:BF:9D:05:42:5C:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7de9ea-c6a4-4cbd-96d0-22d931ec3d49/325cea8e6072507cfceb67a04c253cbee6446cf3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.57.0/24
                IPv6:
                  2803:36e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269970

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:65:7d:fd:e8:de:29:13:9e:90:84:95:09:9d:33:61:7a:
         4a:fa:f7:d5:9e:0d:61:4e:9b:e6:d7:d8:f3:d8:01:ec:2e:b4:
         16:aa:c6:c0:08:bb:51:a9:43:00:54:7f:7c:e9:4d:54:91:4d:
         b1:71:9c:a4:92:9a:22:c7:dc:eb:5f:34:f9:cb:c6:de:7d:28:
         bf:85:b4:31:aa:6f:ae:68:a0:b9:b0:7c:55:68:71:a5:53:13:
         82:16:eb:50:46:04:28:95:53:39:cc:ae:d0:b7:b7:b0:58:44:
         7e:1b:92:20:04:55:96:66:71:53:2b:c6:b4:44:3c:c1:0f:eb:
         01:aa:41:66:e5:de:0e:fa:fd:a8:5b:45:dc:dc:fc:f3:eb:5f:
         93:fc:d8:1e:00:f9:f5:e8:26:df:6a:b8:af:d8:bd:27:4b:9d:
         11:02:4e:b7:39:f9:9b:97:c4:8a:67:d4:31:3c:27:2e:ff:aa:
         97:61:a2:61:de:df:f7:01:08:43:a9:3f:24:f1:ea:7e:f4:09:
         f2:21:51:09:59:77:70:f2:b6:55:3a:32:49:ef:c7:f1:01:a0:
         10:37:1e:2b:79:a0:15:22:a9:ca:07:d8:3f:ff:9b:40:e0:0d:
         14:fd:8e:1b:92:c7:89:3c:dd:e0:0c:d1:03:51:ea:69:0b:90:
         87:a4:cf:9e
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN7bIjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDIxNDEyMDcxNloXDTI0MDExMzE4MDQw
MFowMzExMC8GA1UEAxMoMzI1Y2VhOGU2MDcyNTA3Y2ZjZWI2N2EwNGMyNTNjYmVl
NjQ0NmNmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpXFp6XgQ7B
gxlPOX1pGzS4/w3Xp+4/FmejrDT/NMquSAL8+wUwFiR3cgablAweKH2OM4V+5Jtz
jDSFORqqZE/x+3pYA7enzpnzI5RgXLECoDan1aHIVlHPCeOk6BQokLy9sCwpAM0a
x3RnEtnbP4fXHf64dZ/5M2R0XfdQEII1mDETaXz+I4Hj/T6kUXvQaqijQ4jyIuyP
0vl8O0LMaOTGEIicAwjbBsI9lLVJHesWrjpFD3+X35vxpsyGeZpNiQC3Bf2lEDVK
ojgeBu0PHYW7XHxp3zL0LPhgX6RPl9j+vBi0hwxa8UmYiO8av1Xb7JivLLIYWIpm
29Ptm5DW3NcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTf5BPHDog1zR+3+4mBmL+d
BUJcUTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YjdkZTllYS1jNmE0
LTRjYmQtOTZkMC0yMmQ5MzFlYzNkNDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGI3ZGU5ZWEtYzZhNC00
Y2JkLTk2ZDAtMjJkOTMxZWMzZDQ5LzMyNWNlYThlNjA3MjUwN2NmY2ViNjdhMDRj
MjUzY2JlZTY0NDZjZjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEABiYOTANBAIAAjAHAwUAKAM24DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHpIwDQYJKoZIhvcNAQELBQADggEBAKUH
ZX396N4pE56QhJUJnTNhekr699WeDWFOm+bX2PPYAewutBaqxsAIu1GpQwBUf3zp
TVSRTbFxnKSSmiLH3OtfNPnLxt59KL+FtDGqb65ooLmwfFVocaVTE4IW61BGBCiV
UznMrtC3t7BYRH4bkiAEVZZmcVMrxrREPMEP6wGqQWbl3g76/ahbRdzc/PPrX5P8
2B4A+fXoJt9quK/YvSdLnRECTrc5+ZuXxIpn1DE8Jy7/qpdhomHe3/cBCEOpPyTx
6n70CfIhUQlZd3DytlU6Mknvx/EBoBA3Hit5oBUiqcoH2D//m0DgDRT9jhuSx4k8
3eAM0QNR6mkLkIekz54=
-----END CERTIFICATE-----