Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ecd08c16b3527d5f6f78928da91dc1df52e2c5a.cer
File:                     4ecd08c16b3527d5f6f78928da91dc1df52e2c5a.cer (raw, json)
Hash identifier:          o5qP9LimRoKpgE3Lgxop1TZfpbFAd620XeV/hl0+RZM=
Subject key identifier:   13:1A:CB:57:22:05:B1:7D:68:26:14:44:53:59:6F:6D:C6:95:0F:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106F91F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19ea7793-c70a-4da9-a0cd-97f5e5b811be/4ecd08c16b3527d5f6f78928da91dc1df52e2c5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19ea7793-c70a-4da9-a0cd-97f5e5b811be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 19:31:34 +0000
Certificate not after:    Fri 14 Nov 2025 20:11:35 +0000
Subordinate resources:    AS: 272048
                          IP: 181.233.160.0/22
                          IP: 2803:ed10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17234207 (0x106f91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 19:31:34 2024 GMT
            Not After : Nov 14 20:11:35 2025 GMT
        Subject: CN=4ecd08c16b3527d5f6f78928da91dc1df52e2c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:d2:8e:06:54:0f:99:f5:3e:25:b8:94:68:
                    c7:10:a1:89:2d:52:1d:12:ee:6b:6a:db:7f:93:c6:
                    c3:e6:11:e0:a1:e5:33:cd:45:5f:ae:b8:75:0d:9f:
                    d3:ef:f3:a4:2f:da:63:14:5a:67:b5:c5:de:56:0e:
                    f8:21:af:6e:cd:14:b4:23:79:cb:d4:fe:45:9a:d8:
                    d3:b8:57:ac:73:0a:9c:44:e9:5d:02:de:75:2e:09:
                    ef:3d:c8:a2:06:b7:d3:be:4d:48:6c:00:17:84:1f:
                    b3:99:20:83:dd:59:6f:c5:42:f7:41:73:1b:0a:fa:
                    a2:1f:b5:2f:a8:a2:88:c7:7d:87:a2:74:e0:82:09:
                    02:c8:16:b5:a0:f1:49:32:1d:2b:c6:5a:fe:c6:fb:
                    75:92:66:f9:b8:0a:35:a9:1a:07:85:a9:23:5b:f9:
                    c6:29:4c:11:f9:7c:54:c5:bf:63:9d:39:27:32:49:
                    53:62:c5:72:b9:1e:19:2e:1d:f0:ae:74:a2:81:2d:
                    b9:d1:2d:de:9e:96:ef:8d:44:ff:34:3a:ef:1a:ba:
                    67:01:12:9f:91:09:4a:1d:08:f8:73:5d:1a:e6:f0:
                    47:91:8d:1d:b0:e7:22:29:ba:af:72:fb:be:a6:7a:
                    02:3c:49:bf:ee:b5:ee:6c:c9:10:cf:c1:d6:0b:04:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:CB:57:22:05:B1:7D:68:26:14:44:53:59:6F:6D:C6:95:0F:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19ea7793-c70a-4da9-a0cd-97f5e5b811be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19ea7793-c70a-4da9-a0cd-97f5e5b811be/4ecd08c16b3527d5f6f78928da91dc1df52e2c5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.160.0/22
                IPv6:
                  2803:ed10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272048

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:29:f1:38:c9:47:1a:3c:63:41:8a:47:27:4b:74:9c:39:
         ef:85:21:48:46:f0:27:76:03:09:c5:45:83:b7:54:30:8b:d5:
         f8:32:36:2c:7c:c6:e3:dd:b8:37:75:9d:33:6c:af:61:d6:4c:
         9f:18:cc:6f:4b:89:28:f8:bb:08:fb:f8:6d:c9:d3:1f:7e:83:
         30:9a:2e:67:67:99:ec:90:72:bb:f3:aa:7f:d8:6e:b8:3e:e3:
         5a:ab:23:13:5b:67:d5:04:4a:34:ae:c9:f9:71:39:3f:d4:96:
         fc:ce:a5:bc:e3:e4:2a:e5:5e:41:c8:15:5f:39:50:6c:c6:6f:
         d7:ed:b0:9f:6d:cd:7a:08:f4:13:10:8c:11:d7:e8:b1:ee:18:
         53:3a:d9:cb:b3:0d:b3:9e:10:63:60:f4:c7:1b:38:ff:d7:f4:
         00:24:12:07:26:95:12:a1:60:85:b8:11:c8:fe:ee:8a:fb:c2:
         bb:c9:ba:87:c8:86:5b:7e:7e:59:f1:46:87:c1:ad:b6:52:20:
         e7:f6:66:68:d9:5b:8c:ba:e7:53:fd:a9:57:56:9e:00:44:07:
         78:a4:e1:fb:e6:d8:c9:25:cb:b7:6d:48:a6:fd:d9:3a:16:1e:
         39:9c:34:4c:1c:b8:03:32:36:8f:02:3c:15:ec:f8:f5:fb:23:
         cb:4d:3e:77
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQb5HzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDExNjE5MzEzNFoXDTI1MTExNDIwMTEz
NVowMzExMC8GA1UEAxMoNGVjZDA4YzE2YjM1MjdkNWY2Zjc4OTI4ZGE5MWRjMWRm
NTJlMmM1YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXC0o4GVA+Z
9T4luJRoxxChiS1SHRLua2rbf5PGw+YR4KHlM81FX664dQ2f0+/zpC/aYxRaZ7XF
3lYO+CGvbs0UtCN5y9T+RZrY07hXrHMKnETpXQLedS4J7z3Ioga3075NSGwAF4Qf
s5kgg91Zb8VC90FzGwr6oh+1L6iiiMd9h6J04IIJAsgWtaDxSTIdK8Za/sb7dZJm
+bgKNakaB4WpI1v5xilMEfl8VMW/Y505JzJJU2LFcrkeGS4d8K50ooEtudEt3p6W
741E/zQ67xq6ZwESn5EJSh0I+HNdGubwR5GNHbDnIim6r3L7vqZ6AjxJv+617mzJ
EM/B1gsEBKkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQTGstXIgWxfWgmFERTWW9t
xpUPlzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xOWVhNzc5My1jNzBh
LTRkYTktYTBjZC05N2Y1ZTViODExYmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTllYTc3OTMtYzcwYS00
ZGE5LWEwY2QtOTdmNWU1YjgxMWJlLzRlY2QwOGMxNmIzNTI3ZDVmNmY3ODkyOGRh
OTFkYzFkZjUyZTJjNWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXpoDANBAIAAjAHAwUAKAPtEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJrAwDQYJKoZIhvcNAQELBQADggEBAJ4q
KfE4yUcaPGNBikcnS3ScOe+FIUhG8Cd2AwnFRYO3VDCL1fgyNix8xuPduDd1nTNs
r2HWTJ8YzG9LiSj4uwj7+G3J0x9+gzCaLmdnmeyQcrvzqn/Ybrg+41qrIxNbZ9UE
SjSuyflxOT/UlvzOpbzj5CrlXkHIFV85UGzGb9ftsJ9tzXoI9BMQjBHX6LHuGFM6
2cuzDbOeEGNg9McbOP/X9AAkEgcmlRKhYIW4Ecj+7or7wrvJuofIhlt+flnxRofB
rbZSIOf2ZmjZW4y651P9qVdWngBEB3ik4fvm2Mkly7dtSKb92ToWHjmcNEwcuAMy
No8CPBXs+PX7I8tNPnc=
-----END CERTIFICATE-----