Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4159bc7c0cf55029b6007d904744a076911792a3.cer
File:                     4159bc7c0cf55029b6007d904744a076911792a3.cer (raw, json)
Hash identifier:          UJcwpYlv38DaEGEixPnzK7HgFljDRSLKdZaDxJl/u8c=
Subject key identifier:   0A:2B:6E:C7:5D:57:7C:0E:C9:9C:2C:ED:91:4B:D1:2A:49:11:FF:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6476F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/59845272-5a12-4c56-8b67-df264e340567/4159bc7c0cf55029b6007d904744a076911792a3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/59845272-5a12-4c56-8b67-df264e340567/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Apr 2023 19:53:33 +0000
Certificate not after:    Wed 19 Jun 2024 17:44:36 +0000
Subordinate resources:    AS: 272956
                          IP: 2803:fc90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15091567 (0xe6476f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 19:53:33 2023 GMT
            Not After : Jun 19 17:44:36 2024 GMT
        Subject: CN=4159bc7c0cf55029b6007d904744a076911792a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:1e:7f:ac:49:3f:81:c0:79:38:f6:50:f7:
                    64:7e:ae:be:83:c3:22:b0:7c:03:55:8a:28:a3:89:
                    1f:de:36:b9:aa:05:63:98:3a:02:c6:6c:01:e0:2d:
                    25:54:c2:5a:0a:19:f8:67:9f:ae:1b:6b:e4:45:1d:
                    83:ce:75:25:05:9b:5d:d0:63:06:00:00:73:b4:f9:
                    7a:3d:44:4a:dd:4e:d6:8e:4f:61:0c:d0:33:6f:07:
                    85:40:cb:e3:12:de:04:28:1a:97:90:09:c1:bd:b2:
                    cf:05:86:da:1c:70:ad:22:76:c0:98:a7:1c:00:25:
                    40:d1:d4:ae:91:2e:b4:d3:2c:b8:5a:51:92:6f:ca:
                    d5:b9:8d:a7:01:ed:aa:f4:b1:0b:db:6e:f9:32:82:
                    96:39:b1:2b:26:dc:da:dd:b6:43:35:7f:da:3f:3c:
                    71:ab:8b:b4:99:f7:84:b1:8b:41:4a:0f:53:f4:8f:
                    14:a4:38:37:8d:d3:12:2f:de:a8:b6:c3:98:66:6d:
                    eb:ff:77:f6:e6:fe:8d:f3:fb:fb:6f:b5:84:ca:5a:
                    bd:46:78:67:65:35:d0:ee:fd:3f:03:3d:d6:3c:5b:
                    73:6d:19:0d:0e:a3:9a:6b:47:6f:cb:d7:28:6e:ab:
                    50:5e:2c:6a:39:e6:a2:46:2f:39:f0:92:37:d1:ef:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:6E:C7:5D:57:7C:0E:C9:9C:2C:ED:91:4B:D1:2A:49:11:FF:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/59845272-5a12-4c56-8b67-df264e340567/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/59845272-5a12-4c56-8b67-df264e340567/4159bc7c0cf55029b6007d904744a076911792a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272956

    Signature Algorithm: sha256WithRSAEncryption
         be:65:d3:43:f6:4e:3d:2d:88:80:44:42:b0:34:01:2b:8e:10:
         96:3c:dd:b1:68:ef:9a:c3:d6:91:7c:4d:2c:9e:74:ff:00:77:
         2e:60:6f:75:4c:15:22:0b:0e:5c:2e:c9:eb:f6:73:6a:7c:ba:
         63:ce:c6:0b:c3:b2:2e:47:74:c4:3d:c7:b2:49:74:01:43:0e:
         64:25:20:1f:61:07:85:b0:c7:8d:0c:ea:b1:b9:24:bd:f9:4a:
         40:91:dc:5d:6d:ed:4b:3a:39:0b:91:2c:16:0a:63:1a:f6:01:
         fc:a0:a9:c4:71:b1:b4:44:88:e7:bb:26:f4:9c:16:ea:f1:e1:
         b6:74:4f:25:dd:85:aa:18:ab:f9:68:0a:0d:08:9f:25:b4:94:
         7c:7e:f2:f0:e5:89:af:e0:19:fa:40:03:4b:dc:dd:0e:f4:c5:
         05:28:9a:82:8c:2e:43:42:37:a7:cb:0d:2c:60:a7:1f:be:a8:
         39:eb:06:d3:55:40:c9:51:0c:e4:10:ab:44:6d:1f:22:bb:8b:
         53:eb:56:00:57:03:a1:cc:a2:b1:34:30:3b:16:f2:02:30:f7:
         8d:28:f8:73:63:e9:7c:c7:9c:ba:cb:14:c4:97:f7:8f:04:25:
         4e:f1:6c:39:de:e6:99:23:2c:78:2c:e6:e2:a8:35:d4:83:7a:
         c3:6a:1c:63
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOZHbzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxOTE5NTMzM1oXDTI0MDYxOTE3NDQz
NlowMzExMC8GA1UEAxMoNDE1OWJjN2MwY2Y1NTAyOWI2MDA3ZDkwNDc0NGEwNzY5
MTE3OTJhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIk1Hn+sST+B
wHk49lD3ZH6uvoPDIrB8A1WKKKOJH942uaoFY5g6AsZsAeAtJVTCWgoZ+Gefrhtr
5EUdg851JQWbXdBjBgAAc7T5ej1ESt1O1o5PYQzQM28HhUDL4xLeBCgal5AJwb2y
zwWG2hxwrSJ2wJinHAAlQNHUrpEutNMsuFpRkm/K1bmNpwHtqvSxC9tu+TKCljmx
Kybc2t22QzV/2j88cauLtJn3hLGLQUoPU/SPFKQ4N43TEi/eqLbDmGZt6/939ub+
jfP7+2+1hMpavUZ4Z2U10O79PwM91jxbc20ZDQ6jmmtHb8vXKG6rUF4sajnmokYv
OfCSN9Hvww0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQKK27HXVd8DsmcLO2RS9Eq
SRH/fDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81OTg0NTI3Mi01YTEy
LTRjNTYtOGI2Ny1kZjI2NGUzNDA1NjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTk4NDUyNzItNWExMi00
YzU2LThiNjctZGYyNjRlMzQwNTY3LzQxNTliYzdjMGNmNTUwMjliNjAwN2Q5MDQ3
NDRhMDc2OTExNzkyYTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/JAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCo8MA0GCSqGSIb3DQEBCwUAA4IBAQC+ZdND9k49LYiAREKwNAEr
jhCWPN2xaO+aw9aRfE0snnT/AHcuYG91TBUiCw5cLsnr9nNqfLpjzsYLw7IuR3TE
PceySXQBQw5kJSAfYQeFsMeNDOqxuSS9+UpAkdxdbe1LOjkLkSwWCmMa9gH8oKnE
cbG0RIjnuyb0nBbq8eG2dE8l3YWqGKv5aAoNCJ8ltJR8fvLw5Ymv4Bn6QANL3N0O
9MUFKJqCjC5DQjenyw0sYKcfvqg56wbTVUDJUQzkEKtEbR8iu4tT61YAVwOhzKKx
NDA7FvICMPeNKPhzY+l8x5y6yxTEl/ePBCVO8Ww53uaZIyx4LObiqDXUg3rDahxj
-----END CERTIFICATE-----