Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/589783623233141f65642bbbfa85d766ca194755.cer
File:                     589783623233141f65642bbbfa85d766ca194755.cer (raw, json)
Hash identifier:          v5TbcaE2vKe6MMb9bDYUOLy8d4bgW6S2+vePlr1cfEE=
Subject key identifier:   56:77:80:F7:92:9F:45:C4:11:A1:A0:E1:B0:B2:91:72:A5:70:3B:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCF67B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/589783623233141f65642bbbfa85d766ca194755.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 13:00:04 +0000
Certificate not after:    Mon 15 Apr 2024 22:32:09 +0000
Subordinate resources:    AS: 264738
                          IP: 138.118.212.0/22
                          IP: 170.233.116.0/22
                          IP: 2803:5440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14481019 (0xdcf67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 24 13:00:04 2023 GMT
            Not After : Apr 15 22:32:09 2024 GMT
        Subject: CN=589783623233141f65642bbbfa85d766ca194755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:0f:ba:d2:c9:38:5a:b8:7c:86:09:10:bc:
                    50:78:f2:0d:3a:56:9f:51:24:79:3a:a3:1d:02:4f:
                    d7:89:48:a7:0f:79:c3:90:f9:7d:f6:e8:5c:51:46:
                    eb:99:76:3d:4b:18:11:fc:1f:a9:f1:ab:14:af:4a:
                    8a:49:ec:f1:dc:78:f8:47:40:b8:cb:20:e8:1a:a2:
                    ce:30:16:56:d7:27:41:2d:c8:d0:4d:29:1d:16:2e:
                    61:57:73:00:f8:23:42:02:78:d6:1a:64:2e:74:84:
                    d2:63:ce:63:46:eb:83:01:5b:d3:d0:e8:a4:47:cd:
                    32:af:fc:50:ff:7f:7f:46:bb:14:ad:0e:9a:66:da:
                    6e:cf:63:71:4a:41:c2:00:fc:e1:51:8f:1d:1a:04:
                    1b:e7:4d:68:b5:38:08:ef:cb:24:af:9f:fd:e6:6e:
                    bb:7e:81:4f:fd:27:35:52:09:83:e3:8f:41:be:f2:
                    f2:7e:fa:b4:cd:40:f8:26:5c:21:a5:2c:2c:00:7c:
                    0c:73:36:44:c3:77:46:db:4f:e3:37:3f:67:19:46:
                    11:28:3b:54:5d:3f:b5:79:ad:53:61:00:7c:81:86:
                    ed:38:c5:e5:0d:8d:cf:f8:a1:ac:82:1e:28:49:55:
                    7c:8a:e1:11:30:49:8b:db:e2:da:68:7c:60:6e:78:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:80:F7:92:9F:45:C4:11:A1:A0:E1:B0:B2:91:72:A5:70:3B:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/589783623233141f65642bbbfa85d766ca194755.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.212.0/22
                  170.233.116.0/22
                IPv6:
                  2803:5440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264738

    Signature Algorithm: sha256WithRSAEncryption
         14:27:a2:30:e6:a6:9e:68:30:56:9c:85:76:da:e3:c8:32:6a:
         e0:aa:63:ba:4f:c4:6c:75:e9:3a:47:9b:d3:ac:c0:f2:61:a4:
         92:8c:9b:06:ea:5e:3c:f5:4a:94:81:14:6e:9c:d3:e9:01:54:
         3a:dd:40:75:b1:20:cf:d8:6e:e3:a4:90:bd:40:0b:b4:69:14:
         24:9f:3d:15:7e:2e:d0:97:8c:a0:c8:99:f3:72:68:72:23:61:
         83:90:ae:ca:2f:4f:34:a6:4e:9c:98:9e:9e:13:c1:cd:c3:2c:
         c9:04:19:fe:e9:e4:61:5a:c2:a4:ac:4c:e1:96:47:a3:8c:62:
         37:5e:22:98:1a:72:d1:49:d5:3f:c6:c1:c5:77:75:0a:5c:c7:
         93:41:80:1b:08:66:d9:e1:91:c8:c2:cf:5c:5a:c3:44:7e:b2:
         15:f7:34:fd:ad:b5:93:2d:e7:8d:a4:09:3e:e7:97:ed:d5:cf:
         f7:bd:41:8c:e5:ae:e9:c8:dc:00:a1:2a:eb:99:5c:f8:88:6a:
         e6:50:d0:71:b3:af:f0:fb:03:03:d7:f9:ed:32:6b:58:03:51:
         91:cc:57:d4:2b:9a:89:3b:40:0f:0d:c4:3d:9f:f6:b6:ee:62:
         33:27:ec:78:62:d7:f8:0e:14:25:b7:a9:84:7d:bc:2b:33:1e:
         ac:98:d5:3a
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEANz2ezANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDEyNDEzMDAwNFoXDTI0MDQxNTIyMzIw
OVowMzExMC8GA1UEAxMoNTg5NzgzNjIzMjMzMTQxZjY1NjQyYmJiZmE4NWQ3NjZj
YTE5NDc1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKItD7rSyTha
uHyGCRC8UHjyDTpWn1EkeTqjHQJP14lIpw95w5D5ffboXFFG65l2PUsYEfwfqfGr
FK9Kikns8dx4+EdAuMsg6BqizjAWVtcnQS3I0E0pHRYuYVdzAPgjQgJ41hpkLnSE
0mPOY0brgwFb09DopEfNMq/8UP9/f0a7FK0Ommbabs9jcUpBwgD84VGPHRoEG+dN
aLU4CO/LJK+f/eZuu36BT/0nNVIJg+OPQb7y8n76tM1A+CZcIaUsLAB8DHM2RMN3
RttP4zc/ZxlGESg7VF0/tXmtU2EAfIGG7TjF5Q2Nz/ihrIIeKElVfIrhETBJi9vi
2mh8YG54D58CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRWd4D3kp9FxBGhoOGwspFy
pXA7nDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMTEyOTQ5Ni1hMzZm
LTRiMTItOWU0Mi01MGVjYjhlZGM0NjEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTExMjk0OTYtYTM2Zi00
YjEyLTllNDItNTBlY2I4ZWRjNDYxLzU4OTc4MzYyMzIzMzE0MWY2NTY0MmJiYmZh
ODVkNzY2Y2ExOTQ3NTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAop21AMEAqrpdDANBAIAAjAHAwUA
KANUQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECiIwDQYJKoZIhvcNAQELBQAD
ggEBABQnojDmpp5oMFachXba48gyauCqY7pPxGx16TpHm9OswPJhpJKMmwbqXjz1
SpSBFG6c0+kBVDrdQHWxIM/YbuOkkL1AC7RpFCSfPRV+LtCXjKDImfNyaHIjYYOQ
rsovTzSmTpyYnp4Twc3DLMkEGf7p5GFawqSsTOGWR6OMYjdeIpgactFJ1T/GwcV3
dQpcx5NBgBsIZtnhkcjCz1xaw0R+shX3NP2ttZMt542kCT7nl+3Vz/e9QYzlrunI
3AChKuuZXPiIauZQ0HGzr/D7AwPX+e0ya1gDUZHMV9Qrmok7QA8NxD2f9rbuYjMn
7Hhi1/gOFCW3qYR9vCszHqyY1To=
-----END CERTIFICATE-----