Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f535c94e6aaf26b88c639f520dbe67e558d169.cer
File:                     61f535c94e6aaf26b88c639f520dbe67e558d169.cer (raw, json)
Hash identifier:          p6B+RwQH2KqCfjmiPqoz04i8TSTG13dgOjh/PXcwfcE=
Subject key identifier:   F5:F3:3D:6C:93:78:98:C2:70:F7:EF:3B:A8:9E:5D:C9:57:6B:3D:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D15E5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/61f535c94e6aaf26b88c639f520dbe67e558d169.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 May 2022 15:25:07 +0000
Certificate not after:    Sun 04 Feb 2024 21:28:02 +0000
Subordinate resources:    IP: 2801:1f:9800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13721178 (0xd15e5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 15:25:07 2022 GMT
            Not After : Feb  4 21:28:02 2024 GMT
        Subject: CN=61f535c94e6aaf26b88c639f520dbe67e558d169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:8e:af:b4:82:5f:6d:46:38:23:dd:9e:6a:
                    37:6d:88:bc:e3:71:78:b7:8f:32:70:f2:a0:9f:77:
                    34:4c:14:2d:37:60:86:71:d7:3d:18:aa:70:9a:9b:
                    97:cf:df:67:09:70:34:2f:84:76:ec:63:7f:e8:0b:
                    f1:35:54:09:01:6a:96:e9:ee:96:33:32:3a:41:92:
                    01:23:4b:e2:3f:29:a0:95:0b:cf:02:17:cc:06:4a:
                    a7:3b:f3:bb:8f:b5:59:bc:f7:00:4b:65:cf:9d:f5:
                    28:ef:0e:62:ce:1e:78:12:db:fc:4d:98:b0:f0:36:
                    e9:b1:c7:de:82:ac:7a:ac:94:29:6e:41:f1:c3:2b:
                    95:c0:09:99:9c:e1:b6:3e:c5:4d:dd:77:3a:45:28:
                    55:9d:e1:af:df:3a:83:47:b6:0b:1c:28:19:15:c2:
                    4f:a7:fc:91:01:a2:2c:5b:23:84:9a:44:ad:74:69:
                    7a:f9:69:55:26:3d:dc:3e:91:59:2a:6d:0d:32:26:
                    a5:b5:43:a1:dd:c7:e4:8c:2c:84:c1:e6:90:73:9c:
                    61:7b:ca:95:8a:68:97:7b:57:bb:21:a8:53:c0:5c:
                    60:34:f3:67:08:8f:fd:5d:a1:e7:87:01:0b:8f:0e:
                    cd:02:95:b4:f9:8d:da:2a:e1:0e:a2:87:85:db:7f:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:3D:6C:93:78:98:C2:70:F7:EF:3B:A8:9E:5D:C9:57:6B:3D:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/61f535c94e6aaf26b88c639f520dbe67e558d169.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:87:ef:a8:49:23:f7:76:16:01:8c:29:54:9f:23:79:63:17:
         0e:8f:ce:67:74:6d:7b:7b:8c:e0:2d:21:6b:6b:2b:c0:96:7c:
         67:9f:b7:a0:8d:92:6e:2d:dd:bc:26:22:33:64:8b:48:0a:a6:
         69:c7:57:c0:07:47:01:bb:ec:3a:9b:f3:ca:58:52:82:37:b0:
         a3:2c:4b:f0:43:76:40:25:8c:6e:e0:6a:69:53:f1:f7:63:b3:
         71:4f:00:89:88:cc:8d:98:72:11:c5:f6:0b:5b:cd:f8:92:79:
         fa:4a:06:f4:b1:7e:1c:60:03:f3:90:6d:88:2a:a0:ce:4c:75:
         6b:e4:4a:f3:1e:94:65:6c:5c:87:ec:53:a1:a0:31:e6:92:ec:
         6d:e3:8d:6c:c1:d0:d1:98:6b:03:8c:92:c5:89:3a:21:91:15:
         4e:bb:61:3e:d3:24:97:2e:c1:0d:99:c4:fc:0d:6d:cf:bc:f6:
         5b:83:b8:d9:46:a5:f8:95:9c:af:c5:06:b7:e6:d7:dd:79:0e:
         cc:af:37:b4:75:db:1c:54:b3:9a:32:5f:af:42:8b:f7:40:5d:
         47:cd:b8:ff:a1:b9:2a:3b:ce:77:57:8f:b3:02:37:74:33:87:
         81:cf:73:06:b2:12:d9:78:47:1e:2c:89:6d:03:1a:c9:e8:fe:
         0f:d6:a6:9c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEANFeWjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDUwMjE1MjUwN1oXDTI0MDIwNDIxMjgw
MlowMzExMC8GA1UEAxMoNjFmNTM1Yzk0ZTZhYWYyNmI4OGM2MzlmNTIwZGJlNjdl
NTU4ZDE2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzAjq+0gl9t
Rjgj3Z5qN22IvONxeLePMnDyoJ93NEwULTdghnHXPRiqcJqbl8/fZwlwNC+Eduxj
f+gL8TVUCQFqlunuljMyOkGSASNL4j8poJULzwIXzAZKpzvzu4+1Wbz3AEtlz531
KO8OYs4eeBLb/E2YsPA26bHH3oKseqyUKW5B8cMrlcAJmZzhtj7FTd13OkUoVZ3h
r986g0e2CxwoGRXCT6f8kQGiLFsjhJpErXRpevlpVSY93D6RWSptDTImpbVDod3H
5IwshMHmkHOcYXvKlYpol3tXuyGoU8BcYDTzZwiP/V2h54cBC48OzQKVtPmN2irh
DqKHhdt/4qMCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBT18z1sk3iYwnD37zuonl3J
V2s9zTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85OGJkYzI0ZS03N2My
LTQyMjgtYTVjYi04NjQyYzhkZGJjYTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOThiZGMyNGUtNzdjMi00
MjI4LWE1Y2ItODY0MmM4ZGRiY2E4LzYxZjUzNWM5NGU2YWFmMjZiODhjNjM5ZjUy
MGRiZTY3ZTU1OGQxNjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAB+YADANBgkqhkiG9w0BAQsF
AAOCAQEAlIfvqEkj93YWAYwpVJ8jeWMXDo/OZ3Rte3uM4C0ha2srwJZ8Z5+3oI2S
bi3dvCYiM2SLSAqmacdXwAdHAbvsOpvzylhSgjewoyxL8EN2QCWMbuBqaVPx92Oz
cU8AiYjMjZhyEcX2C1vN+JJ5+koG9LF+HGAD85BtiCqgzkx1a+RK8x6UZWxch+xT
oaAx5pLsbeONbMHQ0ZhrA4ySxYk6IZEVTrthPtMkly7BDZnE/A1tz7z2W4O42Ual
+JWcr8UGt+bX3XkOzK83tHXbHFSzmjJfr0KL90BdR824/6G5KjvOd1ePswI3dDOH
gc9zBrIS2XhHHiyJbQMayej+D9amnA==
-----END CERTIFICATE-----