Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3734aa6e69a5f0abdcc1946c40e67e81fc4656b1.cer
File:                     3734aa6e69a5f0abdcc1946c40e67e81fc4656b1.cer (raw, json)
Hash identifier:          v7khRUuE0QYhp1h19xOy4A3ccscpEMj8bwHCOq8TDX4=
Subject key identifier:   22:8A:AF:35:BE:5D:C5:2E:E6:A7:13:82:42:96:5C:0B:48:DA:5B:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5CE40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/664777cb-24a3-4a9f-a8b1-9960d479a735/3734aa6e69a5f0abdcc1946c40e67e81fc4656b1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/664777cb-24a3-4a9f-a8b1-9960d479a735/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 01:05:03 +0000
Certificate not after:    Sat 14 Dec 2024 16:48:00 +0000
Subordinate resources:    AS: 273052
                          IP: 2803:a990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16109120 (0xf5ce40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 01:05:03 2023 GMT
            Not After : Dec 14 16:48:00 2024 GMT
        Subject: CN=3734aa6e69a5f0abdcc1946c40e67e81fc4656b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:e8:78:f8:e4:c7:eb:3a:bd:4c:bc:9c:d6:
                    44:97:87:60:ac:00:35:5b:db:fa:53:b4:3a:56:e2:
                    e5:de:42:6a:39:e7:ef:3b:f3:40:e0:2d:a6:ae:31:
                    47:49:6e:30:07:ff:a8:26:37:ae:d4:59:ee:6e:e8:
                    48:55:77:55:6a:64:f8:2f:bf:29:8f:00:59:53:51:
                    2d:fb:da:6d:8c:e3:ea:df:8e:6f:f8:ca:87:ee:88:
                    0b:e3:cf:56:58:1b:ed:c8:68:42:4b:71:b3:98:e5:
                    9e:15:cc:57:7d:97:1b:f3:af:d0:85:26:04:69:b1:
                    13:4d:af:ab:03:4d:c6:22:ec:35:d4:a8:52:03:67:
                    7b:2f:13:3a:e8:12:fd:e6:9c:fb:5b:e8:20:a3:c2:
                    92:39:2d:d1:77:be:16:54:6b:db:68:b0:2b:dc:c0:
                    9b:db:1d:0b:4e:f0:ea:24:4e:00:e5:c6:f3:ae:fb:
                    3b:40:b1:07:12:ae:8e:64:b1:0f:b7:8e:63:e7:f4:
                    42:33:87:0b:35:e1:4f:09:93:3e:77:57:9d:73:a7:
                    76:61:be:5d:40:6f:9f:d2:b9:2d:1f:90:d0:bc:50:
                    5f:19:d1:f8:67:34:3f:26:3d:79:eb:04:00:08:63:
                    8d:55:c6:55:42:01:de:c6:f8:2c:a9:14:2a:41:fe:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:AF:35:BE:5D:C5:2E:E6:A7:13:82:42:96:5C:0B:48:DA:5B:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/664777cb-24a3-4a9f-a8b1-9960d479a735/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/664777cb-24a3-4a9f-a8b1-9960d479a735/3734aa6e69a5f0abdcc1946c40e67e81fc4656b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273052

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:bd:9c:28:20:bf:fb:97:52:cf:b4:66:ec:88:74:bc:de:
         48:a2:32:0a:01:54:ad:35:11:eb:5a:cb:91:0c:2f:f5:c1:ad:
         6f:95:2a:b7:6e:d4:bc:2b:e4:80:44:4d:2a:2e:2c:1b:44:ff:
         ea:b9:c1:ec:49:76:1c:6d:72:84:f2:de:3c:60:b8:ed:d4:dc:
         c0:82:4e:c4:d3:85:ac:9f:41:52:44:9d:05:c3:a6:9a:4b:7e:
         24:be:ba:12:fc:1e:a1:17:33:33:8d:5e:08:a7:28:03:c3:c1:
         6c:ca:b5:0a:40:b6:b3:8a:4e:a8:c6:69:8d:54:d6:87:30:d6:
         1b:0a:d6:54:1c:b2:01:f5:f2:86:04:6f:71:e6:5a:c2:0b:fe:
         c5:b8:fb:01:3c:86:ca:13:18:c4:32:06:47:98:14:b6:dc:1c:
         9c:10:67:b4:ab:8c:ef:82:7d:bd:3a:c1:ae:1b:9d:31:13:17:
         88:07:27:cc:4d:f1:b0:cd:07:ac:17:7b:c1:48:82:09:0d:84:
         cb:5b:6e:47:10:f8:bf:44:96:ad:f5:07:e4:ae:d9:95:ff:57:
         7c:72:0d:a2:0a:b0:59:cc:5f:3d:c6:86:1a:23:84:27:4a:93:
         c8:ff:b5:1e:e4:9c:51:a8:11:d0:83:8d:dc:65:a6:84:8e:58:
         97:c1:a4:d2
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPXOQDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwODAxMDUwM1oXDTI0MTIxNDE2NDgw
MFowMzExMC8GA1UEAxMoMzczNGFhNmU2OWE1ZjBhYmRjYzE5NDZjNDBlNjdlODFm
YzQ2NTZiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJwS6Hj45Mfr
Or1MvJzWRJeHYKwANVvb+lO0Olbi5d5Cajnn7zvzQOAtpq4xR0luMAf/qCY3rtRZ
7m7oSFV3VWpk+C+/KY8AWVNRLfvabYzj6t+Ob/jKh+6IC+PPVlgb7choQktxs5jl
nhXMV32XG/Ov0IUmBGmxE02vqwNNxiLsNdSoUgNney8TOugS/eac+1voIKPCkjkt
0Xe+FlRr22iwK9zAm9sdC07w6iROAOXG8677O0CxBxKujmSxD7eOY+f0QjOHCzXh
TwmTPndXnXOndmG+XUBvn9K5LR+Q0LxQXxnR+Gc0PyY9eesEAAhjjVXGVUIB3sb4
LKkUKkH+TQUCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQiiq81vl3FLuanE4JCllwL
SNpboDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NjQ3NzdjYi0yNGEz
LTRhOWYtYThiMS05OTYwZDQ3OWE3MzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjY0Nzc3Y2ItMjRhMy00
YTlmLWE4YjEtOTk2MGQ0NzlhNzM1LzM3MzRhYTZlNjlhNWYwYWJkY2MxOTQ2YzQw
ZTY3ZTgxZmM0NjU2YjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDqZAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCqcMA0GCSqGSIb3DQEBCwUAA4IBAQA9bb2cKCC/+5dSz7Rm7Ih0
vN5IojIKAVStNRHrWsuRDC/1wa1vlSq3btS8K+SARE0qLiwbRP/qucHsSXYcbXKE
8t48YLjt1NzAgk7E04Wsn0FSRJ0Fw6aaS34kvroS/B6hFzMzjV4IpygDw8FsyrUK
QLazik6oxmmNVNaHMNYbCtZUHLIB9fKGBG9x5lrCC/7FuPsBPIbKExjEMgZHmBS2
3BycEGe0q4zvgn29OsGuG50xExeIByfMTfGwzQesF3vBSIIJDYTLW25HEPi/RJat
9QfkrtmV/1d8cg2iCrBZzF89xoYaI4QnSpPI/7Ue5JxRqBHQg43cZaaEjliXwaTS
-----END CERTIFICATE-----