Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36072b855f7e9189d482c9dffb460c38f8ed5c72.cer
File:                     36072b855f7e9189d482c9dffb460c38f8ed5c72.cer (raw, json)
Hash identifier:          fziGoYNCmVsBPhK6X9BhyyqM9qyhFz9MMSy8C3gA4fc=
Subject key identifier:   63:8A:DE:0A:C0:C0:CF:EF:23:81:1F:36:40:7A:35:49:09:E4:21:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010072C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/584f51a4-1d9f-4349-a774-54117c9c65bc/36072b855f7e9189d482c9dffb460c38f8ed5c72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/584f51a4-1d9f-4349-a774-54117c9c65bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:01:26 +0000
Certificate not after:    Sat 05 Apr 2025 15:00:00 +0000
Subordinate resources:    AS: 28646
                          IP: 201.77.80.0/20
                          IP: 2801:80::/48
                          IP: 2801:80:2000::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16806599 (0x10072c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:01:26 2023 GMT
            Not After : Apr  5 15:00:00 2025 GMT
        Subject: CN=36072b855f7e9189d482c9dffb460c38f8ed5c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8c:05:0e:16:f0:3b:8c:5d:5f:b7:37:d3:51:
                    22:30:92:84:74:a7:d3:e0:1c:2f:eb:1f:1f:a0:7f:
                    91:6a:0d:fc:67:da:c9:e4:4d:a8:f1:d8:72:db:46:
                    5d:da:94:97:4a:f2:02:69:c0:42:e9:ed:4a:cf:23:
                    bf:4b:f8:20:76:30:0f:dc:85:d7:24:dd:b6:63:fe:
                    39:1c:e1:a4:a3:62:e1:88:44:3f:8b:5f:8f:0f:f0:
                    35:c7:9c:a0:16:f5:31:03:14:47:63:68:50:8a:e7:
                    3e:0c:4b:ba:7c:dc:5f:45:79:2c:4c:33:88:d4:26:
                    d8:cd:d0:af:b9:b3:38:1a:f0:8d:c2:8f:1d:30:4c:
                    fc:ea:30:18:09:e6:ab:a6:5f:ea:ae:ac:d5:5c:b5:
                    76:eb:16:f8:20:5a:d2:a4:0e:6d:c9:3b:67:b6:d1:
                    7d:9e:48:1b:9f:3d:f2:a9:b1:aa:6b:6c:bc:18:8a:
                    94:f1:f3:c0:7b:8a:ec:55:e5:dd:b5:e4:b1:36:58:
                    0f:73:e4:9a:23:78:d1:89:e1:e6:52:b1:8b:a4:5c:
                    aa:62:b6:87:7c:ba:87:25:e4:82:e1:5c:50:f5:9a:
                    8b:11:0e:b3:6a:e4:2e:b5:c6:1d:e9:10:b4:e0:db:
                    df:7d:13:b7:c4:fe:9f:cc:d7:13:b1:75:90:67:01:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:DE:0A:C0:C0:CF:EF:23:81:1F:36:40:7A:35:49:09:E4:21:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/584f51a4-1d9f-4349-a774-54117c9c65bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/584f51a4-1d9f-4349-a774-54117c9c65bc/36072b855f7e9189d482c9dffb460c38f8ed5c72.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.80.0/20
                IPv6:
                  2801:80::/48
                  2801:80:2000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28646

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:cf:99:22:2b:18:5e:3b:0e:ca:7f:17:05:e8:bd:94:13:
         a4:95:ca:4a:f0:75:83:6e:43:bf:5d:f7:5a:a1:f4:70:57:d6:
         61:5a:a1:29:67:b5:dc:60:7a:ec:a2:e6:8b:78:1f:f5:c1:fb:
         63:d9:12:56:50:36:2c:1b:73:31:78:ce:7b:80:df:49:6f:7e:
         b8:b0:bb:ad:9b:a8:a8:e2:c5:f6:78:7c:d6:3f:72:8a:1b:78:
         62:23:38:69:02:b5:90:9e:a3:63:b2:de:a1:b8:6b:dc:64:b2:
         cd:96:e2:3e:c2:38:46:5f:41:cb:2d:d6:f1:53:22:0e:56:d6:
         bc:81:33:06:df:df:7a:eb:f1:bf:9e:a9:f2:65:b2:73:40:49:
         69:0b:80:b0:0c:e1:d4:f6:e5:6d:d1:a6:16:18:df:88:5e:e5:
         be:28:79:53:4c:2f:32:5b:b1:8c:41:4e:49:ad:64:5e:5a:fd:
         29:a3:9c:f0:d0:53:8a:d1:29:4b:e2:38:2f:e5:8c:fd:cb:7f:
         17:15:7e:5d:81:04:f5:8f:46:26:f6:92:8a:1e:41:f7:5e:a2:
         c8:76:69:7c:26:fb:60:f7:16:17:fb:76:f7:e4:20:ee:91:c0:
         03:f0:7b:ac:d8:32:94:59:e5:70:36:90:bd:8a:73:c8:d5:88:
         4e:de:bd:ad
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgIEAQByxzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTEwNzE5MDEyNloXDTI1MDQwNTE1MDAw
MFowMzExMC8GA1UEAxMoMzYwNzJiODU1ZjdlOTE4OWQ0ODJjOWRmZmI0NjBjMzhm
OGVkNWM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOyMBQ4W8DuM
XV+3N9NRIjCShHSn0+AcL+sfH6B/kWoN/GfayeRNqPHYcttGXdqUl0ryAmnAQunt
Ss8jv0v4IHYwD9yF1yTdtmP+ORzhpKNi4YhEP4tfjw/wNcecoBb1MQMUR2NoUIrn
PgxLunzcX0V5LEwziNQm2M3Qr7mzOBrwjcKPHTBM/OowGAnmq6Zf6q6s1Vy1dusW
+CBa0qQObck7Z7bRfZ5IG5898qmxqmtsvBiKlPHzwHuK7FXl3bXksTZYD3PkmiN4
0Ynh5lKxi6RcqmK2h3y6hyXkguFcUPWaixEOs2rkLrXGHekQtODb330Tt8T+n8zX
E7F1kGcBkd8CAwEAAaOCAxIwggMOMB0GA1UdDgQWBBRjit4KwMDP7yOBHzZAejVJ
CeQhsTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81ODRmNTFhNC0xZDlm
LTQzNDktYTc3NC01NDExN2M5YzY1YmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTg0ZjUxYTQtMWQ5Zi00
MzQ5LWE3NzQtNTQxMTdjOWM2NWJjLzM2MDcyYjg1NWY3ZTkxODlkNDgyYzlkZmZi
NDYwYzM4ZjhlZDVjNzIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwDAQCAAEwBgMEBMlNUDAXBAIAAjARAwcAKAEAgAAA
AwYAKAEAgCAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb+YwDQYJKoZIhvcNAQEL
BQADggEBAB5Cz5kiKxheOw7KfxcF6L2UE6SVykrwdYNuQ79d91qh9HBX1mFaoSln
tdxgeuyi5ot4H/XB+2PZElZQNiwbczF4znuA30lvfriwu62bqKjixfZ4fNY/coob
eGIjOGkCtZCeo2Oy3qG4a9xkss2W4j7COEZfQcst1vFTIg5W1ryBMwbf33rr8b+e
qfJlsnNASWkLgLAM4dT25W3RphYY34he5b4oeVNMLzJbsYxBTkmtZF5a/SmjnPDQ
U4rRKUviOC/ljP3LfxcVfl2BBPWPRib2kooeQfdeosh2aXwm+2D3Fhf7dvfkIO6R
wAPwe6zYMpRZ5XA2kL2Kc8jViE7eva0=
-----END CERTIFICATE-----