Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44b95de4d5c04c2b1657ee1e43e5fe68f04c1574.cer
File:                     44b95de4d5c04c2b1657ee1e43e5fe68f04c1574.cer (raw, json)
Hash identifier:          Ctby04U+QGd6otmePdzlHB7/ibLQEdlWDS8I7lUBM1I=
Subject key identifier:   BB:A6:DD:A6:D0:B2:0D:F0:A3:36:29:BB:3B:28:A7:1B:E0:7F:67:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C4079
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc8312a2-58f5-4aa5-96e4-964805e6bf80/44b95de4d5c04c2b1657ee1e43e5fe68f04c1574.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc8312a2-58f5-4aa5-96e4-964805e6bf80/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 19:11:19 +0000
Certificate not after:    Fri 26 Dec 2025 14:52:03 +0000
Subordinate resources:    AS: 273188
                          IP: 200.150.248.0/22
                          IP: 2803:ba50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17580153 (0x10c4079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 19:11:19 2024 GMT
            Not After : Dec 26 14:52:03 2025 GMT
        Subject: CN=44b95de4d5c04c2b1657ee1e43e5fe68f04c1574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:e4:d0:5b:f6:80:4b:21:7d:f0:e5:44:51:
                    28:6a:cb:16:7c:f7:3a:53:d8:26:47:e8:bc:42:37:
                    eb:12:7e:cb:e6:c9:88:44:b0:92:15:da:17:89:73:
                    ab:df:a9:82:64:77:c3:a9:69:ad:49:88:a6:3b:b4:
                    e3:49:f3:2c:cf:f3:a3:c4:ec:a7:25:c4:0a:0f:c0:
                    89:66:53:ad:39:90:f9:cf:47:50:bd:58:95:52:e6:
                    3e:8a:38:07:79:b8:a1:9c:af:38:78:5e:24:7b:84:
                    94:ba:ad:70:7f:dd:29:ea:cc:c4:82:0c:4d:8c:83:
                    8a:e2:e0:c0:a0:a0:d6:ff:0e:2d:df:0d:02:86:22:
                    b5:44:0b:d0:98:6e:b0:32:6c:98:74:be:a7:7c:80:
                    f8:68:cf:18:3b:5f:3a:89:ce:13:e2:aa:1a:98:d9:
                    f0:11:9f:dc:ce:3e:7e:aa:d5:61:5a:bb:f5:09:38:
                    ee:2c:48:60:01:e7:b6:51:e1:d1:c2:11:27:b0:5e:
                    7e:5b:ca:de:77:7a:bd:0e:41:bd:6d:bb:57:99:6f:
                    e0:05:b3:1a:c2:7c:cd:bd:ad:85:ae:cb:0c:79:d7:
                    4d:cc:1f:0e:d8:6e:5f:df:85:32:6b:87:af:a4:47:
                    b8:06:b5:88:26:ec:07:da:d8:2d:04:7e:f7:a6:5f:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A6:DD:A6:D0:B2:0D:F0:A3:36:29:BB:3B:28:A7:1B:E0:7F:67:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc8312a2-58f5-4aa5-96e4-964805e6bf80/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc8312a2-58f5-4aa5-96e4-964805e6bf80/44b95de4d5c04c2b1657ee1e43e5fe68f04c1574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.248.0/22
                IPv6:
                  2803:ba50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273188

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:69:9c:f5:c5:53:6f:33:d6:4a:32:6f:9d:f4:b6:fb:6c:
         16:d6:67:73:96:c8:b6:52:ca:34:62:7f:d5:0c:c7:fb:48:d9:
         78:09:4f:46:94:58:82:92:6c:7a:97:9d:fe:ef:d5:9a:4e:7a:
         5d:fd:02:57:fd:59:73:29:c9:f9:05:01:60:6c:af:90:42:13:
         b3:26:27:5d:ed:d6:6a:af:8c:15:8c:58:79:8c:3a:dd:ce:31:
         0f:71:f1:9d:1c:7b:67:de:ad:77:f9:ad:86:0d:64:2e:02:56:
         63:c1:4e:fe:94:61:cb:b5:1b:c7:c0:0d:07:14:3f:72:48:68:
         fe:a1:c8:9d:a2:f3:c9:48:43:95:ab:af:ee:ca:cb:86:b9:80:
         9b:08:dd:9e:21:03:f2:59:50:59:44:d1:ab:44:29:c2:cd:4d:
         d7:c4:e9:f3:d3:1b:e7:bc:57:7b:00:98:ed:aa:76:85:89:38:
         95:9d:d2:55:77:59:c2:fd:df:22:e8:2e:33:8b:00:e8:42:a5:
         f3:d4:63:c7:d5:49:cd:d4:2a:da:51:4a:57:fc:88:4e:1e:05:
         87:56:99:38:68:41:1c:81:a4:65:67:1e:96:50:83:0b:b3:c7:
         c8:bd:99:7a:06:e9:bd:bb:0e:d5:d3:f1:f2:df:85:de:88:c3:
         bb:13:da:4f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQxAeTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyODE5MTExOVoXDTI1MTIyNjE0NTIw
M1owMzExMC8GA1UEAxMoNDRiOTVkZTRkNWMwNGMyYjE2NTdlZTFlNDNlNWZlNjhm
MDRjMTU3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMzq5NBb9oBL
IX3w5URRKGrLFnz3OlPYJkfovEI36xJ+y+bJiESwkhXaF4lzq9+pgmR3w6lprUmI
pju040nzLM/zo8TspyXECg/AiWZTrTmQ+c9HUL1YlVLmPoo4B3m4oZyvOHheJHuE
lLqtcH/dKerMxIIMTYyDiuLgwKCg1v8OLd8NAoYitUQL0JhusDJsmHS+p3yA+GjP
GDtfOonOE+KqGpjZ8BGf3M4+fqrVYVq79Qk47ixIYAHntlHh0cIRJ7BeflvK3nd6
vQ5BvW27V5lv4AWzGsJ8zb2tha7LDHnXTcwfDthuX9+FMmuHr6RHuAa1iCbsB9rY
LQR+96ZfB00CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS7pt2m0LIN8KM2Kbs7KKcb
4H9nETAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYzgzMTJhMi01OGY1
LTRhYTUtOTZlNC05NjQ4MDVlNmJmODAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2M4MzEyYTItNThmNS00
YWE1LTk2ZTQtOTY0ODA1ZTZiZjgwLzQ0Yjk1ZGU0ZDVjMDRjMmIxNjU3ZWUxZTQz
ZTVmZTY4ZjA0YzE1NzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsiW+DANBAIAAjAHAwUAKAO6UDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKyQwDQYJKoZIhvcNAQELBQADggEBAJcK
aZz1xVNvM9ZKMm+d9Lb7bBbWZ3OWyLZSyjRif9UMx/tI2XgJT0aUWIKSbHqXnf7v
1ZpOel39Alf9WXMpyfkFAWBsr5BCE7MmJ13t1mqvjBWMWHmMOt3OMQ9x8Z0ce2fe
rXf5rYYNZC4CVmPBTv6UYcu1G8fADQcUP3JIaP6hyJ2i88lIQ5Wrr+7Ky4a5gJsI
3Z4hA/JZUFlE0atEKcLNTdfE6fPTG+e8V3sAmO2qdoWJOJWd0lV3WcL93yLoLjOL
AOhCpfPUY8fVSc3UKtpRSlf8iE4eBYdWmThoQRyBpGVnHpZQgwuzx8i9mXoG6b27
DtXT8fLfhd6Iw7sT2k8=
-----END CERTIFICATE-----