Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dcb01bde4e84f9294668f40efb6ad53fedf909a.cer
File:                     5dcb01bde4e84f9294668f40efb6ad53fedf909a.cer (raw, json)
Hash identifier:          q1TQYOxCP1V1VV79zScz91YwryR7whEyG6WTsFUSz3A=
Subject key identifier:   63:97:22:2A:83:8B:79:1B:EB:DE:3B:D1:FE:8B:C8:72:FB:02:40:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E25232
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/5dcb01bde4e84f9294668f40efb6ad53fedf909a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Mar 2023 18:21:44 +0000
Certificate not after:    Tue 24 Dec 2024 15:34:35 +0000
Subordinate resources:    AS: 265636
                          IP: 170.245.240.0/22
                          IP: 190.2.216.0/21
                          IP: 2803:8800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14832178 (0xe25232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 23 18:21:44 2023 GMT
            Not After : Dec 24 15:34:35 2024 GMT
        Subject: CN=5dcb01bde4e84f9294668f40efb6ad53fedf909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:be:b7:8b:cd:8b:67:d0:c9:6f:88:4f:dc:
                    f6:a6:46:f5:63:d4:4d:97:e9:bc:d3:c0:57:04:f7:
                    e7:29:61:8e:88:b6:c7:56:9e:f7:b4:6a:d0:75:51:
                    9b:bd:8e:f7:88:a4:12:53:17:69:b8:b7:2c:aa:49:
                    25:31:07:54:68:47:e5:06:2d:c1:c1:32:75:5e:f5:
                    12:85:83:c8:3e:55:ea:71:54:d4:41:ab:35:ec:b4:
                    ce:3f:66:df:11:b5:19:43:cd:d8:7d:c7:35:9b:33:
                    27:7c:60:86:26:77:58:cb:2a:28:d4:b2:d5:b3:e2:
                    b9:23:9f:80:ae:e8:d2:71:5a:24:e1:2e:b4:18:ef:
                    37:53:f8:f8:74:b9:ee:ad:d1:0b:38:eb:cb:ee:06:
                    e2:43:7b:70:ed:14:7e:58:f0:ae:03:da:61:93:2f:
                    2b:54:74:84:f2:40:0b:4b:06:9d:c0:4d:16:c9:86:
                    3f:6d:2a:2c:57:4a:5f:16:a1:2e:56:0e:85:74:7c:
                    85:13:6a:9c:0d:d0:d6:01:26:30:94:57:9d:ef:9c:
                    c9:28:64:2f:5f:1d:56:78:5b:5e:d4:66:b9:2f:65:
                    0c:2b:61:ec:13:53:2d:c2:cf:f2:e6:ff:63:a9:13:
                    09:66:d7:e7:86:ce:fa:70:c4:f7:8a:f7:20:7c:1f:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:22:2A:83:8B:79:1B:EB:DE:3B:D1:FE:8B:C8:72:FB:02:40:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/5dcb01bde4e84f9294668f40efb6ad53fedf909a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.240.0/22
                  190.2.216.0/21
                IPv6:
                  2803:8800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265636

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:29:8e:2e:20:d4:d3:b3:ee:88:fb:f8:6a:54:60:0f:44:
         ab:cf:a0:29:28:77:41:93:19:1f:1f:01:3b:6d:1c:92:e0:1b:
         7e:03:d1:f6:8e:95:c6:b8:4b:48:33:0b:86:a6:f2:5a:7a:87:
         15:0b:13:a7:ae:92:8a:7a:81:c4:88:51:e5:40:42:a0:76:ba:
         ee:85:bf:da:f3:28:5e:30:e8:79:a6:ea:79:dc:e9:4c:cd:7b:
         60:90:41:cd:df:b2:a1:df:b0:88:d6:64:26:49:f5:1f:40:42:
         03:2b:63:c9:43:f2:b3:d2:e8:96:cc:f7:5c:f4:62:77:00:f5:
         b6:10:83:44:ba:1e:75:39:ec:fd:74:c0:2f:84:12:a1:ce:95:
         9c:cb:27:66:b4:e0:50:4f:e0:1f:84:cf:75:92:f5:ce:ac:fa:
         a2:84:d5:72:09:d3:73:47:cd:a3:ba:16:12:cb:ad:6d:73:98:
         68:47:3e:28:36:c5:2e:ff:41:2b:a5:32:1c:f0:50:55:f0:6d:
         db:0c:92:c3:b4:f3:57:de:00:28:08:b9:5f:eb:69:81:bc:20:
         0a:77:37:7e:98:b2:18:19:c7:b7:bb:6d:b0:c6:cb:e0:0d:dc:
         ed:76:87:55:3e:f4:6f:5f:29:f2:52:c8:bc:63:61:18:95:d1:
         a6:e8:30:8b
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAOJSMjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDMyMzE4MjE0NFoXDTI0MTIyNDE1MzQz
NVowMzExMC8GA1UEAxMoNWRjYjAxYmRlNGU4NGY5Mjk0NjY4ZjQwZWZiNmFkNTNm
ZWRmOTA5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXsvreLzYtn
0MlviE/c9qZG9WPUTZfpvNPAVwT35ylhjoi2x1ae97Rq0HVRm72O94ikElMXabi3
LKpJJTEHVGhH5QYtwcEydV71EoWDyD5V6nFU1EGrNey0zj9m3xG1GUPN2H3HNZsz
J3xghiZ3WMsqKNSy1bPiuSOfgK7o0nFaJOEutBjvN1P4+HS57q3RCzjry+4G4kN7
cO0UfljwrgPaYZMvK1R0hPJAC0sGncBNFsmGP20qLFdKXxahLlYOhXR8hRNqnA3Q
1gEmMJRXne+cyShkL18dVnhbXtRmuS9lDCth7BNTLcLP8ub/Y6kTCWbX54bO+nDE
94r3IHwfq8UCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRjlyIqg4t5G+veO9H+i8hy
+wJAUzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ZWI0Yzk2Ny1hZGVm
LTRhOGItOTdmNS01YTRlZWExYmIwNmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGViNGM5NjctYWRlZi00
YThiLTk3ZjUtNWE0ZWVhMWJiMDZlLzVkY2IwMWJkZTRlODRmOTI5NDY2OGY0MGVm
YjZhZDUzZmVkZjkwOWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqr18AMEA74C2DANBAIAAjAHAwUA
KAOIADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDaQwDQYJKoZIhvcNAQELBQAD
ggEBAI6kKY4uINTTs+6I+/hqVGAPRKvPoCkod0GTGR8fATttHJLgG34D0faOlca4
S0gzC4am8lp6hxULE6eukop6gcSIUeVAQqB2uu6Fv9rzKF4w6Hmm6nnc6UzNe2CQ
Qc3fsqHfsIjWZCZJ9R9AQgMrY8lD8rPS6JbM91z0YncA9bYQg0S6HnU57P10wC+E
EqHOlZzLJ2a04FBP4B+Ez3WS9c6s+qKE1XIJ03NHzaO6FhLLrW1zmGhHPig2xS7/
QSulMhzwUFXwbdsMksO081feACgIuV/raYG8IAp3N36YshgZx7e7bbDGy+AN3O12
h1U+9G9fKfJSyLxjYRiV0aboMIs=
-----END CERTIFICATE-----