Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c05ee0f14abee29023b45d56a9a330a20bccef.cer
File:                     32c05ee0f14abee29023b45d56a9a330a20bccef.cer (raw, json)
Hash identifier:          u7PpVyDbssnRaL7Xyqc8bJDg5bsFO/XMsjezkRCZG0A=
Subject key identifier:   F5:CE:EB:A2:7F:A6:9D:58:D7:F5:4D:A9:01:8B:2A:A7:8F:EA:A1:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F86DF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/32c05ee0f14abee29023b45d56a9a330a20bccef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16281073 (0xf86df1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=32c05ee0f14abee29023b45d56a9a330a20bccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:ae:21:fc:bf:82:76:d9:1f:46:8e:2f:73:
                    4c:b4:48:9e:7f:3d:d3:0e:58:4a:1c:66:2c:12:7e:
                    70:62:0c:06:97:69:48:b6:3c:54:83:e4:28:e8:2b:
                    02:a0:f9:12:b0:75:48:b2:d4:0f:ec:b9:15:1d:58:
                    35:04:46:c9:54:ba:db:5f:67:20:de:7f:2f:81:11:
                    b6:59:2d:1f:24:f0:a2:d1:b0:59:ec:cd:5e:91:71:
                    be:41:19:b1:6f:96:fe:92:e7:76:8f:3f:f6:d5:0d:
                    42:e0:7c:53:75:ac:8c:ce:b6:80:7e:ed:57:c4:0e:
                    0b:d9:42:14:f1:59:ab:9c:5b:37:0e:3b:20:5f:d4:
                    ab:81:94:f3:38:60:ca:e9:69:0c:64:0d:30:de:43:
                    a2:ba:61:7d:a2:46:99:09:a9:ea:c9:68:fb:42:2e:
                    05:3c:f7:b5:44:46:ec:98:9a:21:93:02:ce:52:e2:
                    be:89:c7:c2:5d:0f:e2:13:83:e8:d1:43:27:e3:90:
                    e2:19:00:a2:c7:46:35:1b:7c:94:bf:60:a5:c6:48:
                    7d:9b:b3:71:37:7c:79:60:65:9f:8c:6e:36:76:d7:
                    e3:3f:6e:a2:4b:57:d5:be:d2:b1:b7:6c:40:08:18:
                    d9:43:12:fa:fd:b2:42:4c:68:1e:a2:f5:bd:69:c7:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:EB:A2:7F:A6:9D:58:D7:F5:4D:A9:01:8B:2A:A7:8F:EA:A1:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/32c05ee0f14abee29023b45d56a9a330a20bccef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:e8:c5:3d:5b:70:e6:d3:aa:b1:35:29:26:18:0d:04:62:
         c8:aa:e6:a0:6a:90:bc:63:3a:b5:47:5d:fa:3c:26:6c:e9:b7:
         df:74:1c:ef:f5:5f:8e:3d:10:29:84:1e:31:36:59:7e:e8:f6:
         e6:44:68:35:f6:31:28:95:fa:c8:b3:bb:af:82:82:78:f1:78:
         cb:75:40:37:53:c8:5f:c2:58:03:9d:c2:da:8e:3d:f1:82:01:
         80:63:3c:b5:b3:ee:45:2a:71:6f:03:cb:3e:19:da:5a:88:cf:
         d6:b1:ac:1b:51:e0:39:b7:b7:5f:0d:12:45:ff:03:19:7f:db:
         57:4d:53:68:4e:46:af:4e:d4:91:25:1d:ba:b3:79:fc:6b:bf:
         ca:74:ef:4c:f7:15:38:a8:68:82:10:9b:33:b3:41:e8:c3:fb:
         f1:63:23:14:2a:86:53:3a:f9:b1:c0:59:f8:1c:fa:fd:13:a6:
         85:9a:fb:0c:c6:2b:6a:b6:cb:ab:60:d1:52:11:e8:33:ca:97:
         db:ca:60:07:29:1a:8e:e9:5a:83:05:f4:47:55:49:ab:d7:7c:
         3a:57:d3:f2:a8:99:e9:d3:94:fb:71:c5:22:be:ec:a3:0d:c5:
         16:d9:92:0a:0a:7f:36:dc:7b:7f:9e:9b:3b:0d:ab:5e:ef:b4:
         be:d0:9d:b3
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAPht8TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcyODE4MTA0OFoXDTI1MDUyNzE1MTYz
NVowMzExMC8GA1UEAxMoMzJjMDVlZTBmMTRhYmVlMjkwMjNiNDVkNTZhOWEzMzBh
MjBiY2NlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI8sriH8v4J2
2R9Gji9zTLRInn890w5YShxmLBJ+cGIMBpdpSLY8VIPkKOgrAqD5ErB1SLLUD+y5
FR1YNQRGyVS6219nIN5/L4ERtlktHyTwotGwWezNXpFxvkEZsW+W/pLndo8/9tUN
QuB8U3WsjM62gH7tV8QOC9lCFPFZq5xbNw47IF/Uq4GU8zhgyulpDGQNMN5Dorph
faJGmQmp6slo+0IuBTz3tURG7JiaIZMCzlLivonHwl0P4hOD6NFDJ+OQ4hkAosdG
NRt8lL9gpcZIfZuzcTd8eWBln4xuNnbX4z9uoktX1b7SsbdsQAgY2UMS+v2yQkxo
HqL1vWnHKrcCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBT1zuuif6adWNf1TakBiyqn
j+qhDjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYzc4YTY4Yi0yNjgy
LTQzMDgtYjc2ZS0wYTVjMzU2ZDAwMjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGM3OGE2OGItMjY4Mi00
MzA4LWI3NmUtMGE1YzM1NmQwMDI1LzMyYzA1ZWUwZjE0YWJlZTI5MDIzYjQ1ZDU2
YTlhMzMwYTIwYmNjZWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAWUAADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEKpcwDQYJKoZIhvcNAQELBQADggEBACtN6MU9W3Dm06qxNSkm
GA0EYsiq5qBqkLxjOrVHXfo8Jmzpt990HO/1X449ECmEHjE2WX7o9uZEaDX2MSiV
+sizu6+CgnjxeMt1QDdTyF/CWAOdwtqOPfGCAYBjPLWz7kUqcW8Dyz4Z2lqIz9ax
rBtR4Dm3t18NEkX/Axl/21dNU2hORq9O1JElHbqzefxrv8p070z3FTioaIIQmzOz
QejD+/FjIxQqhlM6+bHAWfgc+v0TpoWa+wzGK2q2y6tg0VIR6DPKl9vKYAcpGo7p
WoMF9EdVSavXfDpX0/KomenTlPtxxSK+7KMNxRbZkgoKfzbce3+emzsNq17vtL7Q
nbM=
-----END CERTIFICATE-----