Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62433c4e191b23c6ea7743f400992e42caf5c791.cer
File:                     62433c4e191b23c6ea7743f400992e42caf5c791.cer (raw, json)
Hash identifier:          CZMAS8GQ94VT4+J4f/qinQQ8J9dPdHz4YGhRY3Naw4U=
Subject key identifier:   0F:56:7B:A3:CD:0D:C5:D4:27:38:58:AC:D9:F7:05:E3:82:C5:75:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEA9BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b13cb9c1-19d0-4ee2-abf0-f453dbf5caaf/62433c4e191b23c6ea7743f400992e42caf5c791.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b13cb9c1-19d0-4ee2-abf0-f453dbf5caaf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:05:06 +0000
Certificate not after:    Wed 13 Nov 2024 13:16:56 +0000
Subordinate resources:    AS: 262883
                          IP: 138.99.20.0/22
                          IP: 177.22.0.0/20
                          IP: 2804:2324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16689599 (0xfea9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:05:06 2023 GMT
            Not After : Nov 13 13:16:56 2024 GMT
        Subject: CN=62433c4e191b23c6ea7743f400992e42caf5c791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:5c:1b:5b:ff:db:37:ee:c8:b9:a8:7e:ac:
                    14:a9:33:95:c4:83:61:e1:eb:7b:4b:48:60:fc:22:
                    e4:d7:09:4b:92:92:2e:01:fb:53:3c:42:46:b8:eb:
                    36:90:c0:5b:a0:29:7a:ec:6d:d6:5e:90:e9:24:a5:
                    95:b9:5e:d2:50:da:70:1f:61:01:dd:71:8e:db:28:
                    f7:27:38:a2:4f:8e:64:77:8b:92:25:b4:c2:73:29:
                    0b:4e:ab:72:9f:91:39:e5:dd:1e:f3:4a:e0:77:32:
                    ae:15:5b:95:38:da:09:4b:ac:46:ef:ad:3c:dd:27:
                    c0:85:e4:b5:12:19:b5:06:80:48:d9:d0:7d:3f:a7:
                    ae:47:22:5c:83:15:16:90:90:da:66:8b:3e:8d:fe:
                    ec:76:6d:e4:17:4d:7e:de:61:87:0f:c5:d7:73:17:
                    b2:2e:6b:30:c8:9c:4b:4c:c7:83:8d:2c:d3:b7:ac:
                    df:25:2e:a3:5e:b6:8e:db:52:c9:04:a5:c9:5f:3b:
                    18:6b:d4:1b:cf:ef:d5:a7:62:9d:ef:1b:f1:bf:77:
                    14:72:69:db:83:49:cb:69:15:81:04:64:39:09:b7:
                    ca:67:12:81:cd:36:f6:10:96:88:25:f1:ae:b2:54:
                    a4:4b:41:f9:8f:c5:7f:dc:aa:9e:43:ac:2f:a4:15:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:7B:A3:CD:0D:C5:D4:27:38:58:AC:D9:F7:05:E3:82:C5:75:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b13cb9c1-19d0-4ee2-abf0-f453dbf5caaf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b13cb9c1-19d0-4ee2-abf0-f453dbf5caaf/62433c4e191b23c6ea7743f400992e42caf5c791.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.20.0/22
                  177.22.0.0/20
                IPv6:
                  2804:2324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262883

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:f9:3a:db:f3:52:bf:95:80:98:0d:85:05:fd:b3:78:f8:
         4b:a9:d8:e0:0f:97:34:50:6b:bf:0e:f5:19:ac:11:02:db:5f:
         95:6e:a9:42:7f:5d:7d:f2:02:ae:f5:d9:ff:a0:79:d0:02:7d:
         c6:6d:51:78:59:78:1e:22:5a:39:bf:0a:14:01:54:f1:11:e8:
         a4:f3:4f:34:ed:ac:6b:70:91:24:58:4e:ab:1c:dc:2d:b2:b5:
         26:73:d5:fe:be:88:7b:f9:89:6f:d4:9e:2b:18:3f:95:b5:24:
         5f:54:03:65:4c:db:ec:17:b5:55:27:e5:b5:14:db:79:3a:69:
         77:f5:73:18:29:d5:a6:95:c0:de:25:ff:3f:a2:56:a5:62:0e:
         3d:bf:6c:b7:44:d0:0b:ac:c5:9d:92:ad:c2:d3:e1:aa:50:ae:
         b2:76:19:b1:36:9f:a8:75:70:44:78:07:05:5b:a0:27:6d:a3:
         e8:83:fa:93:95:cc:68:1c:04:a8:b3:09:3c:ae:cc:c7:ff:5a:
         58:2c:5e:d4:0a:b7:a1:b0:a3:9d:5e:e3:9a:bf:71:94:18:5e:
         59:92:a7:9a:41:98:d8:b4:fa:78:ea:19:32:15:63:ac:8c:43:
         49:27:5b:e5:92:5c:1a:b6:b6:56:6e:c0:f9:ab:2c:57:38:e4:
         5b:3e:df:76
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAP6pvzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwMDUwNloXDTI0MTExMzEzMTY1
NlowMzExMC8GA1UEAxMoNjI0MzNjNGUxOTFiMjNjNmVhNzc0M2Y0MDA5OTJlNDJj
YWY1Yzc5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIWhXBtb/9s3
7si5qH6sFKkzlcSDYeHre0tIYPwi5NcJS5KSLgH7UzxCRrjrNpDAW6Apeuxt1l6Q
6SSllble0lDacB9hAd1xjtso9yc4ok+OZHeLkiW0wnMpC06rcp+ROeXdHvNK4Hcy
rhVblTjaCUusRu+tPN0nwIXktRIZtQaASNnQfT+nrkciXIMVFpCQ2maLPo3+7HZt
5BdNft5hhw/F13MXsi5rMMicS0zHg40s07es3yUuo162jttSyQSlyV87GGvUG8/v
1adine8b8b93FHJp24NJy2kVgQRkOQm3ymcSgc029hCWiCXxrrJUpEtB+Y/Ff9yq
nkOsL6QVA0cCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBQPVnujzQ3F1Cc4WKzZ9wXj
gsV1sDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iMTNjYjljMS0xOWQw
LTRlZTItYWJmMC1mNDUzZGJmNWNhYWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjEzY2I5YzEtMTlkMC00
ZWUyLWFiZjAtZjQ1M2RiZjVjYWFmLzYyNDMzYzRlMTkxYjIzYzZlYTc3NDNmNDAw
OTkyZTQyY2FmNWM3OTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAopjFAMEBLEWADANBAIAAjAHAwUA
KAQjJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAuMwDQYJKoZIhvcNAQELBQAD
ggEBACf1+Trb81K/lYCYDYUF/bN4+Eup2OAPlzRQa78O9RmsEQLbX5VuqUJ/XX3y
Aq712f+gedACfcZtUXhZeB4iWjm/ChQBVPER6KTzTzTtrGtwkSRYTqsc3C2ytSZz
1f6+iHv5iW/UnisYP5W1JF9UA2VM2+wXtVUn5bUU23k6aXf1cxgp1aaVwN4l/z+i
VqViDj2/bLdE0AusxZ2SrcLT4apQrrJ2GbE2n6h1cER4BwVboCdto+iD+pOVzGgc
BKizCTyuzMf/WlgsXtQKt6Gwo51e45q/cZQYXlmSp5pBmNi0+njqGTIVY6yMQ0kn
W+WSXBq2tlZuwPmrLFc45Fs+33Y=
-----END CERTIFICATE-----