Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491acfc3caa333c01c36fa039f700188dbc91264.cer
File:                     491acfc3caa333c01c36fa039f700188dbc91264.cer (raw, json)
Hash identifier:          IEeqWmuIpUfjhEQpogpOk5vB/qMePJXYNtEPTRVxwb8=
Subject key identifier:   44:3A:16:8A:F5:F7:74:B3:BD:11:73:5A:B5:DA:F9:53:93:A2:1A:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F17ED5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 20:20:06 +0000
Certificate not after:    Mon 10 Jun 2024 15:33:43 +0000
Subordinate resources:    AS: 272840
                          IP: 167.250.135.0/24
                          IP: 2803:dc90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15826645 (0xf17ed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 18 20:20:06 2023 GMT
            Not After : Jun 10 15:33:43 2024 GMT
        Subject: CN=491acfc3caa333c01c36fa039f700188dbc91264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a4:e5:18:80:98:eb:9c:b5:76:95:e0:1b:3a:
                    2e:29:24:ec:fb:4f:9b:c0:e4:16:bc:8e:df:cb:3b:
                    08:56:ce:65:e4:7c:23:e0:4c:35:38:8f:e2:fb:d3:
                    53:32:83:6d:1b:45:1c:41:bd:55:f6:e8:fe:b1:89:
                    9f:bd:5a:c6:99:1c:39:7b:17:06:fc:38:1e:84:d6:
                    36:77:f4:6f:80:07:e0:ca:e7:53:d5:3c:45:18:b2:
                    f7:ed:e4:86:87:79:f9:54:ea:87:4c:54:6e:f8:28:
                    15:4c:99:8e:42:0b:e3:a1:0b:d8:d5:1f:f5:0e:67:
                    99:0d:df:ad:ab:c7:b7:85:d4:15:9c:1c:9d:9a:45:
                    6c:37:df:6c:b1:85:14:83:f3:fe:58:7c:69:59:91:
                    d0:b4:b3:3b:39:e4:8a:bf:d8:4b:2f:93:c3:9e:88:
                    9c:8f:7b:ea:e4:90:02:f7:61:54:0d:47:8d:fd:aa:
                    99:c7:c5:12:db:04:64:73:74:cc:ce:93:2b:b7:99:
                    85:a0:d9:56:82:88:59:e2:27:6d:3e:7e:dc:8d:5a:
                    ea:c3:ab:85:c9:a6:32:8a:5a:30:5d:dd:cf:6e:39:
                    ae:b9:25:ef:28:8f:3e:42:d8:40:58:dc:74:c3:d8:
                    b1:02:c0:1a:2d:87:27:7d:27:10:89:88:f1:57:75:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3A:16:8A:F5:F7:74:B3:BD:11:73:5A:B5:DA:F9:53:93:A2:1A:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.135.0/24
                IPv6:
                  2803:dc90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272840

    Signature Algorithm: sha256WithRSAEncryption
         a2:05:82:9d:60:5d:eb:6c:4f:5c:41:de:56:2f:84:52:ee:6c:
         ff:4c:5a:9c:a8:84:1e:c3:bd:0c:7e:b6:6b:f7:73:b1:b3:85:
         f2:d5:cc:3b:aa:a5:cf:ef:9f:4d:a9:d1:24:95:fb:86:66:a4:
         b4:a7:dd:a1:5e:09:62:dd:d0:47:57:7d:f3:b9:0a:93:f8:91:
         75:f0:be:e5:08:73:77:91:2f:d8:ed:9a:d7:76:7c:7d:86:13:
         95:11:2a:bc:d4:2d:1c:5e:12:10:f0:20:d0:12:14:8d:3a:b9:
         a8:26:61:c2:ee:01:b0:43:b3:fd:d1:9e:cc:f9:5f:21:1a:28:
         9e:40:94:34:04:27:fd:0c:72:58:e9:29:cb:92:81:5c:b6:59:
         01:66:af:ef:5f:a8:a0:25:76:72:de:6f:cd:bd:44:50:95:53:
         59:7c:0d:f9:ad:f1:e4:68:31:9a:f7:71:b0:65:88:40:a4:b3:
         47:f7:2c:30:50:a9:67:b4:d2:75:a0:bd:f6:21:b5:48:e8:8a:
         c4:85:d9:ed:78:a2:b4:c7:e6:b0:10:4d:e5:b1:5a:94:de:19:
         20:83:0c:d4:86:ad:fc:b3:bc:9c:46:23:b5:03:78:17:36:f5:
         6f:af:c2:f7:4d:4d:d3:99:bc:e0:28:c3:c6:4f:ae:4a:f9:49:
         0c:b6:55:fa
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPF+1TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxODIwMjAwNloXDTI0MDYxMDE1MzM0
M1owMzExMC8GA1UEAxMoNDkxYWNmYzNjYWEzMzNjMDFjMzZmYTAzOWY3MDAxODhk
YmM5MTI2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANak5RiAmOuc
tXaV4Bs6Likk7PtPm8DkFryO38s7CFbOZeR8I+BMNTiP4vvTUzKDbRtFHEG9Vfbo
/rGJn71axpkcOXsXBvw4HoTWNnf0b4AH4MrnU9U8RRiy9+3khod5+VTqh0xUbvgo
FUyZjkIL46EL2NUf9Q5nmQ3fravHt4XUFZwcnZpFbDffbLGFFIPz/lh8aVmR0LSz
Oznkir/YSy+Tw56InI976uSQAvdhVA1Hjf2qmcfFEtsEZHN0zM6TK7eZhaDZVoKI
WeInbT5+3I1a6sOrhcmmMopaMF3dz245rrkl7yiPPkLYQFjcdMPYsQLAGi2HJ30n
EImI8Vd1hzMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBREOhaK9fd0s70Rc1q12vlT
k6Ia+TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lOGVmMGJlYi1mODQz
LTRiNGQtODViOC05YWMxNWI1NWEyOTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZThlZjBiZWItZjg0My00
YjRkLTg1YjgtOWFjMTViNTVhMjk5LzQ5MWFjZmMzY2FhMzMzYzAxYzM2ZmEwMzlm
NzAwMTg4ZGJjOTEyNjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAKf6hzANBAIAAjAHAwUAKAPckDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKcgwDQYJKoZIhvcNAQELBQADggEBAKIF
gp1gXetsT1xB3lYvhFLubP9MWpyohB7DvQx+tmv3c7GzhfLVzDuqpc/vn02p0SSV
+4ZmpLSn3aFeCWLd0EdXffO5CpP4kXXwvuUIc3eRL9jtmtd2fH2GE5URKrzULRxe
EhDwINASFI06uagmYcLuAbBDs/3Rnsz5XyEaKJ5AlDQEJ/0McljpKcuSgVy2WQFm
r+9fqKAldnLeb829RFCVU1l8Dfmt8eRoMZr3cbBliECks0f3LDBQqWe00nWgvfYh
tUjoisSF2e14orTH5rAQTeWxWpTeGSCDDNSGrfyzvJxGI7UDeBc29W+vwvdNTdOZ
vOAow8ZPrkr5SQy2Vfo=
-----END CERTIFICATE-----