Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37687cc0713ed8125a96e5d9f3488832690e9011.cer
File:                     37687cc0713ed8125a96e5d9f3488832690e9011.cer (raw, json)
Hash identifier:          XQ60lMBueQdRKpSz0J+6Lq11upO/foqOFj50XR47e6E=
Subject key identifier:   86:52:0D:5E:04:18:B4:FE:C4:12:80:9F:99:82:FE:E8:B5:9D:9F:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAF246
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eea7b552-f702-4bdf-a87e-8d7d6d1055ad/37687cc0713ed8125a96e5d9f3488832690e9011.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eea7b552-f702-4bdf-a87e-8d7d6d1055ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 17:44:31 +0000
Certificate not after:    Fri 25 Jul 2025 15:14:38 +0000
Subordinate resources:    AS: 273089

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16446022 (0xfaf246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 27 17:44:31 2023 GMT
            Not After : Jul 25 15:14:38 2025 GMT
        Subject: CN=37687cc0713ed8125a96e5d9f3488832690e9011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:0f:ea:a4:65:f5:6e:41:7f:c2:12:70:02:
                    78:db:2d:12:7e:b9:9b:5e:7e:6f:bf:11:f7:14:0d:
                    11:33:fc:f1:08:bc:b1:a9:ff:b3:ea:59:72:25:8f:
                    6a:40:e5:ef:62:be:63:f5:1e:79:0d:e4:26:fc:79:
                    12:db:15:cd:0c:8a:bb:3f:15:c0:74:89:9b:bb:16:
                    5d:b0:96:e3:2a:31:d6:68:36:c0:fd:ec:af:8b:4c:
                    32:0c:56:a3:b0:80:3b:5b:01:51:71:63:f3:d0:fa:
                    f6:5d:52:c7:05:a4:43:eb:ff:04:06:95:db:3f:ba:
                    94:85:f8:db:da:e3:a5:59:34:1b:c0:57:87:05:e7:
                    86:c6:3b:63:a8:d5:7f:73:b3:a6:35:4f:9c:a9:58:
                    0a:9e:9d:43:4d:19:e2:a9:1e:63:96:b7:5d:ce:1c:
                    d3:c8:76:91:bf:54:14:aa:77:c7:10:53:de:aa:d2:
                    70:fc:5e:bc:64:b1:ad:5b:29:59:44:8c:9c:3c:91:
                    c1:8e:b7:2b:e0:c2:5f:2b:62:a8:23:0e:53:28:e2:
                    57:ef:b3:8e:47:cb:37:04:6d:89:87:f3:4a:de:3b:
                    99:5b:ac:fa:82:27:53:72:f9:3f:78:a4:c7:02:9f:
                    31:a4:06:21:8b:ad:aa:0c:94:35:e7:c9:c7:d5:82:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:0D:5E:04:18:B4:FE:C4:12:80:9F:99:82:FE:E8:B5:9D:9F:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eea7b552-f702-4bdf-a87e-8d7d6d1055ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eea7b552-f702-4bdf-a87e-8d7d6d1055ad/37687cc0713ed8125a96e5d9f3488832690e9011.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273089

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:85:ee:be:91:9f:46:6d:2f:5c:e2:5a:bc:9f:9e:2b:74:
         69:65:01:4d:4c:cb:20:a8:59:94:16:20:c6:a6:30:04:d8:65:
         3e:ac:c9:c0:ea:df:20:0e:ef:a0:1c:62:3f:fc:ac:bb:c5:89:
         1a:3c:c0:21:a0:32:e0:0c:d4:5b:e8:65:fa:63:d6:79:bd:13:
         76:d9:6d:d4:5d:20:95:37:b6:f3:39:1f:b2:35:90:a1:1a:a5:
         d2:44:2c:15:c0:4a:b3:59:3d:45:ff:aa:47:ef:17:43:20:2e:
         f3:ee:de:af:b9:b5:c9:c6:07:d2:84:61:93:a2:a6:f9:a8:bb:
         97:0d:31:ac:db:9d:af:16:22:89:f6:7c:bf:22:96:f1:a7:6a:
         9e:d3:62:d3:10:e3:2d:28:a6:7e:d6:c6:73:13:0f:14:a5:af:
         2d:f2:64:51:03:a5:65:ea:dc:3d:88:8e:37:fa:a6:30:51:6c:
         fb:a5:22:77:cd:78:99:c8:3d:0f:41:a2:f3:7a:4a:1e:bb:e1:
         dd:2f:27:91:06:5e:e1:f0:1f:6c:bd:e9:2e:46:48:e0:20:db:
         e4:0b:86:c4:e8:9f:a1:d6:34:61:ba:6d:1c:bc:6d:97:37:d6:
         07:9c:8c:20:b0:25:ce:8a:76:d8:e2:3e:77:fe:a0:4b:2f:5f:
         f8:03:5d:64
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIEAPryRjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkyNzE3NDQzMVoXDTI1MDcyNTE1MTQz
OFowMzExMC8GA1UEAxMoMzc2ODdjYzA3MTNlZDgxMjVhOTZlNWQ5ZjM0ODg4MzI2
OTBlOTAxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIDbD+qkZfVu
QX/CEnACeNstEn65m15+b78R9xQNETP88Qi8san/s+pZciWPakDl72K+Y/UeeQ3k
Jvx5EtsVzQyKuz8VwHSJm7sWXbCW4yox1mg2wP3sr4tMMgxWo7CAO1sBUXFj89D6
9l1SxwWkQ+v/BAaV2z+6lIX429rjpVk0G8BXhwXnhsY7Y6jVf3OzpjVPnKlYCp6d
Q00Z4qkeY5a3Xc4c08h2kb9UFKp3xxBT3qrScPxevGSxrVspWUSMnDyRwY63K+DC
XytiqCMOUyjiV++zjkfLNwRtiYfzSt47mVus+oInU3L5P3ikxwKfMaQGIYutqgyU
NefJx9WCM2sCAwEAAaOCAtkwggLVMB0GA1UdDgQWBBSGUg1eBBi0/sQSgJ+Zgv7o
tZ2f3DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZWE3YjU1Mi1mNzAy
LTRiZGYtYTg3ZS04ZDdkNmQxMDU1YWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWVhN2I1NTItZjcwMi00
YmRmLWE4N2UtOGQ3ZDZkMTA1NWFkLzM3Njg3Y2MwNzEzZWQ4MTI1YTk2ZTVkOWYz
NDg4ODMyNjkwZTkwMTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKsEwDQYJKoZIhvcNAQELBQADggEBAJ4C
he6+kZ9GbS9c4lq8n54rdGllAU1MyyCoWZQWIMamMATYZT6sycDq3yAO76AcYj/8
rLvFiRo8wCGgMuAM1FvoZfpj1nm9E3bZbdRdIJU3tvM5H7I1kKEapdJELBXASrNZ
PUX/qkfvF0MgLvPu3q+5tcnGB9KEYZOipvmou5cNMazbna8WIon2fL8ilvGnap7T
YtMQ4y0opn7WxnMTDxSlry3yZFEDpWXq3D2Ijjf6pjBRbPulInfNeJnIPQ9BovN6
Sh674d0vJ5EGXuHwH2y96S5GSOAg2+QLhsTon6HWNGG6bRy8bZc31gecjCCwJc6K
dtjiPnf+oEsvX/gDXWQ=
-----END CERTIFICATE-----