Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3965b19503d063b42e01f80c7ca4882949804183.cer
File:                     3965b19503d063b42e01f80c7ca4882949804183.cer (raw, json)
Hash identifier:          n8S5SyI0wSwIXqw/ORsZ7laIqRHUHoat3vLlcxq6HrA=
Subject key identifier:   FF:9F:F8:B8:B3:CC:C7:B7:E7:E7:AD:DA:A2:74:81:6D:1A:3B:87:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECF0E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/3965b19503d063b42e01f80c7ca4882949804183.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 12:32:47 +0000
Certificate not after:    Sat 29 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 13424
                          IP: 190.13.64.0/20
                          IP: 2803:e800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15528166 (0xecf0e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 12:32:47 2023 GMT
            Not After : Jun 29 15:00:00 2024 GMT
        Subject: CN=3965b19503d063b42e01f80c7ca4882949804183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:85:fe:42:cb:7c:e3:15:85:49:3f:30:de:
                    56:22:2c:e1:95:18:c5:f5:1d:8e:fd:9a:59:6e:48:
                    a2:16:3f:d1:29:7d:65:5c:1c:20:68:78:4c:26:cd:
                    9e:29:7f:c1:81:77:aa:26:1f:d6:cc:f8:48:af:14:
                    86:7e:8a:6e:77:fc:78:27:8f:d2:f2:7f:da:40:e9:
                    bf:07:40:57:5e:49:b0:10:05:7c:ff:de:69:1c:96:
                    e6:74:31:6b:b9:e5:6a:02:d3:0f:ac:f1:9f:34:a5:
                    9b:59:aa:31:4b:c8:83:92:e4:cd:2d:79:d2:c0:16:
                    d5:57:fc:d8:77:62:09:5a:bb:a3:27:5d:d8:c1:64:
                    92:d3:62:da:f7:9b:ff:99:f6:6b:aa:49:0d:ae:ca:
                    8f:a0:da:29:c9:ea:16:2c:c3:b2:a8:ba:a8:09:5d:
                    4b:38:8b:90:8d:3a:f2:fa:60:59:08:7a:b7:d7:c3:
                    34:bd:d1:74:9f:c9:cc:f7:76:27:2e:c7:0a:b4:e9:
                    55:0e:35:af:6d:72:28:48:a0:3c:8c:76:ab:90:e9:
                    d5:3c:e0:3c:6c:77:7f:73:d8:20:cf:20:62:2e:71:
                    9d:cd:1c:39:49:1d:64:1a:a8:17:ca:bb:92:0c:06:
                    ca:1d:69:a0:2b:65:a4:ac:46:d2:a7:34:a3:f8:8e:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9F:F8:B8:B3:CC:C7:B7:E7:E7:AD:DA:A2:74:81:6D:1A:3B:87:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/3965b19503d063b42e01f80c7ca4882949804183.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.64.0/20
                IPv6:
                  2803:e800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13424

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:16:d2:34:4e:e8:7a:c1:a7:68:14:ae:f0:66:80:73:ca:
         e1:68:0f:2b:87:08:21:83:cb:cc:61:f6:51:8f:0e:c8:2f:9b:
         bc:76:6d:86:74:75:2d:61:6d:32:28:ad:6f:1a:1b:d1:f9:07:
         f3:ed:1e:55:22:b3:4b:61:c3:44:25:a1:17:2b:05:eb:7e:5a:
         f7:cf:18:37:62:ff:06:bb:e6:2d:ed:31:7b:36:ec:cf:b6:d0:
         4a:cd:12:3b:13:0b:73:77:f6:be:ae:7c:92:0d:65:ca:63:45:
         b6:d8:74:55:17:34:a0:c0:7c:79:08:64:18:6e:b2:f1:77:48:
         17:f0:62:b5:e9:1c:3e:46:25:e9:16:60:05:34:e5:e3:aa:29:
         43:15:a6:fb:47:35:29:e4:39:b7:97:23:2b:fa:01:3f:4a:67:
         15:e5:1e:97:22:a1:1f:f1:8c:43:45:b1:29:6f:fe:4e:92:e7:
         b4:69:a4:cc:81:f2:01:c9:7d:73:b7:9a:3b:56:af:be:66:9b:
         7e:d5:8e:c3:e1:30:51:03:bf:e0:e4:15:36:6a:d0:73:e9:26:
         33:10:16:b9:a9:a0:50:be:51:20:b5:ef:86:95:84:e7:32:ba:
         dc:f5:7b:ec:b7:b4:a9:a8:3c:ad:26:94:4e:83:d5:14:d3:c1:
         1a:25:5d:57
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAOzw5jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDIyODEyMzI0N1oXDTI0MDYyOTE1MDAw
MFowMzExMC8GA1UEAxMoMzk2NWIxOTUwM2QwNjNiNDJlMDFmODBjN2NhNDg4Mjk0
OTgwNDE4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKPXhf5Cy3zj
FYVJPzDeViIs4ZUYxfUdjv2aWW5IohY/0Sl9ZVwcIGh4TCbNnil/wYF3qiYf1sz4
SK8Uhn6Kbnf8eCeP0vJ/2kDpvwdAV15JsBAFfP/eaRyW5nQxa7nlagLTD6zxnzSl
m1mqMUvIg5LkzS150sAW1Vf82HdiCVq7oydd2MFkktNi2veb/5n2a6pJDa7Kj6Da
KcnqFizDsqi6qAldSziLkI068vpgWQh6t9fDNL3RdJ/JzPd2Jy7HCrTpVQ41r21y
KEigPIx2q5Dp1TzgPGx3f3PYIM8gYi5xnc0cOUkdZBqoF8q7kgwGyh1poCtlpKxG
0qc0o/iOjmkCAwEAAaOCAwgwggMEMB0GA1UdDgQWBBT/n/i4s8zHt+fnrdqidIFt
GjuH+TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNWI5YjRkNS1lZDgy
LTRkMGItOWExOS02Y2E4Y2NlZjIzZTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjViOWI0ZDUtZWQ4Mi00
ZDBiLTlhMTktNmNhOGNjZWYyM2UwLzM5NjViMTk1MDNkMDYzYjQyZTAxZjgwYzdj
YTQ4ODI5NDk4MDQxODMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL4NQDANBAIAAjAHAwUAKAPoADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgI0cDANBgkqhkiG9w0BAQsFAAOCAQEACfkW
0jRO6HrBp2gUrvBmgHPK4WgPK4cIIYPLzGH2UY8OyC+bvHZthnR1LWFtMiitbxob
0fkH8+0eVSKzS2HDRCWhFysF635a988YN2L/BrvmLe0xezbsz7bQSs0SOxMLc3f2
vq58kg1lymNFtth0VRc0oMB8eQhkGG6y8XdIF/BitekcPkYl6RZgBTTl46opQxWm
+0c1KeQ5t5cjK/oBP0pnFeUelyKhH/GMQ0WxKW/+TpLntGmkzIHyAcl9c7eaO1av
vmabftWOw+EwUQO/4OQVNmrQc+kmMxAWuamgUL5RILXvhpWE5zK63PV77Le0qag8
rSaUToPVFNPBGiVdVw==
-----END CERTIFICATE-----