Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer
File:                     5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer (raw, json)
Hash identifier:          TgFuiMZxzEwVlHsfd6Tm0K0SEeYfHKuZSE9f0l+lxZ4=
Subject key identifier:   5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E707F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 18:31:40 +0000
Certificate not after:    Sun 10 Mar 2024 19:07:24 +0000
Subordinate resources:    AS: 272140
                          IP: 190.103.191.0/24
                          IP: 2801:18:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15140855 (0xe707f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 18:31:40 2023 GMT
            Not After : Mar 10 19:07:24 2024 GMT
        Subject: CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4b:83:06:41:0e:f8:31:f3:c9:d3:86:45:79:
                    7b:10:20:7d:b6:20:87:f0:68:9a:3f:06:e5:56:67:
                    57:ec:83:f7:93:d7:95:01:b0:2e:67:47:d7:7b:33:
                    51:b8:aa:8e:8a:69:4d:7e:8b:28:ee:38:e9:78:7b:
                    2a:7a:9e:12:5a:fc:36:78:50:32:58:4d:09:7c:91:
                    ca:da:80:a7:36:8a:7b:2c:1b:0c:7a:78:1d:7a:14:
                    8b:2c:22:e1:a6:d6:a7:4e:ec:e8:8b:fd:a5:09:7d:
                    17:cc:be:a0:c8:15:1c:52:49:ee:9f:52:ba:d2:af:
                    e1:29:c4:a4:e1:a0:90:93:8f:8f:7b:e8:6f:a2:8e:
                    d3:09:1a:37:84:44:b6:84:f5:30:56:78:90:c6:08:
                    0a:08:eb:42:37:ea:3e:56:73:52:e2:50:72:1c:67:
                    42:ee:0a:f0:ed:83:d7:22:d2:f5:40:2d:dc:67:71:
                    94:eb:7d:ec:88:2c:dc:f1:02:3a:4a:af:0e:7d:64:
                    48:6f:c9:0f:c3:4a:49:2f:80:fa:ef:12:b5:cc:97:
                    b0:ee:89:a2:cc:b9:f5:df:a1:b6:64:53:e0:5b:b5:
                    82:f2:ef:6d:ac:a0:63:7f:9c:ad:6e:b7:54:bd:2e:
                    b6:fa:0b:76:a0:0b:54:ad:99:3a:42:f7:6a:34:8c:
                    38:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.191.0/24
                IPv6:
                  2801:18:5800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272140

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:ab:64:96:c3:9a:df:b8:e6:32:57:43:51:3f:13:67:b4:
         d8:8e:4b:71:88:46:6b:00:4d:a8:d1:7e:94:ef:b9:0c:82:9c:
         02:2b:eb:03:a1:e7:c9:02:6b:a9:4c:ce:e9:6b:2f:5e:5d:92:
         c2:8f:ff:1a:81:9d:a6:84:8d:56:5d:d5:1f:ed:4c:12:aa:b2:
         3e:5c:8f:ac:ab:30:28:d8:ef:7f:94:ca:c9:b7:fc:0d:2a:17:
         da:a6:03:37:f2:df:ca:77:dc:55:92:b5:99:19:0e:32:59:b3:
         5f:76:52:b7:61:2e:8e:1f:ee:0d:a0:b7:1d:b5:f7:2a:66:ce:
         a7:4e:8f:c4:0a:67:ce:92:2b:9b:38:4a:76:fd:95:f3:72:83:
         e5:d6:bd:b9:4b:54:73:d6:b9:a4:32:04:a5:93:cd:3c:b0:e8:
         09:dd:93:de:eb:66:a8:d4:51:3a:dc:03:f8:6e:3c:eb:cf:2a:
         66:cb:5b:6b:65:70:36:f8:8e:c6:c0:9c:0a:c4:a4:a3:7d:47:
         ed:64:af:7d:41:43:57:67:64:bf:50:19:c9:bc:f4:73:4b:ec:
         49:4c:42:75:02:67:7a:a3:2c:80:09:37:8e:9e:50:e2:5c:df:
         2b:d2:33:a0:a9:8a:fd:3f:83:73:d8:ed:a0:1b:7c:10:ee:80:
         a6:b6:c5:83
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOcH9zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQyNDE4MzE0MFoXDTI0MDMxMDE5MDcy
NFowMzExMC8GA1UEAxMoNWNhMGFjODZiZWJiOGJkOGU1OWNlZDZhMmQ5ZDYzNTRl
NGVlODhlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIVLgwZBDvgx
88nThkV5exAgfbYgh/Bomj8G5VZnV+yD95PXlQGwLmdH13szUbiqjoppTX6LKO44
6Xh7KnqeElr8NnhQMlhNCXyRytqApzaKeywbDHp4HXoUiywi4abWp07s6Iv9pQl9
F8y+oMgVHFJJ7p9SutKv4SnEpOGgkJOPj3vob6KO0wkaN4REtoT1MFZ4kMYICgjr
QjfqPlZzUuJQchxnQu4K8O2D1yLS9UAt3GdxlOt97Igs3PECOkqvDn1kSG/JD8NK
SS+A+u8StcyXsO6Josy59d+htmRT4Fu1gvLvbaygY3+crW63VL0utvoLdqALVK2Z
OkL3ajSMOAMCAwEAAaOCAwswggMHMB0GA1UdDgQWBBRfjGdjceWoyMp6MxXX6XPQ
B9mKrzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80NzQyMTU5ZS1lOWJl
LTRjMzMtODllZi00YTU0YmJiY2YxZTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDc0MjE1OWUtZTliZS00
YzMzLTg5ZWYtNGE1NGJiYmNmMWU2LzVjYTBhYzg2YmViYjhiZDhlNTljZWQ2YTJk
OWQ2MzU0ZTRlZTg4ZTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAL5nvzAPBAIAAjAJAwcAKAEAGFgA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQnDDANBgkqhkiG9w0BAQsFAAOCAQEA
B/urZJbDmt+45jJXQ1E/E2e02I5LcYhGawBNqNF+lO+5DIKcAivrA6HnyQJrqUzO
6WsvXl2Swo//GoGdpoSNVl3VH+1MEqqyPlyPrKswKNjvf5TKybf8DSoX2qYDN/Lf
ynfcVZK1mRkOMlmzX3ZSt2Eujh/uDaC3HbX3KmbOp06PxApnzpIrmzhKdv2V83KD
5da9uUtUc9a5pDIEpZPNPLDoCd2T3utmqNRROtwD+G48688qZstba2VwNviOxsCc
CsSko31H7WSvfUFDV2dkv1AZybz0c0vsSUxCdQJneqMsgAk3jp5Q4lzfK9IzoKmK
/T+Dc9jtoBt8EO6AprbFgw==
-----END CERTIFICATE-----