Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ebb137312d0b9276fd1728c82220de693784901.cer
File:                     6ebb137312d0b9276fd1728c82220de693784901.cer (raw, json)
Hash identifier:          BOX/popR/Fffi96jrp/aN6NdnQj72xmMtUBjTYas2TE=
Subject key identifier:   53:F6:B8:88:55:DD:D9:E6:F2:92:E9:BB:B4:D6:FB:57:5D:5C:05:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CCA42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/6ebb137312d0b9276fd1728c82220de693784901.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 19:56:03 +0000
Certificate not after:    Tue 11 Feb 2025 02:51:45 +0000
Subordinate resources:    AS: 28428
                          IP: 45.174.44.0/22
                          IP: 2806:325::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17615426 (0x10cca42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 19:56:03 2023 GMT
            Not After : Feb 11 02:51:45 2025 GMT
        Subject: CN=6ebb137312d0b9276fd1728c82220de693784901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:64:d0:76:98:78:e1:d6:70:c6:a1:8d:d0:
                    9c:15:96:d5:aa:9a:5e:a0:d4:00:1b:00:cf:27:7c:
                    3c:75:68:55:bb:35:1c:32:77:cf:24:76:35:82:53:
                    72:2f:46:29:67:06:9a:76:8d:b3:ae:e8:c0:c2:41:
                    6d:a1:6b:07:bb:89:49:84:50:77:76:c9:51:c9:66:
                    30:d4:fc:4e:44:79:db:58:a4:da:e7:98:85:9d:63:
                    16:61:06:dd:a8:6d:2d:4a:54:95:0f:4f:49:aa:e8:
                    35:d2:49:14:fa:10:60:e0:59:ce:f7:4b:6d:97:6f:
                    35:51:c3:fd:36:99:6a:42:f2:60:03:81:bc:a4:e0:
                    64:6d:86:f2:00:0c:93:4a:9c:79:92:dc:95:90:80:
                    0c:ed:02:51:26:72:72:58:35:63:2e:33:20:d2:aa:
                    08:99:7c:0e:ad:b1:dc:2f:45:6f:97:2e:d0:3d:99:
                    68:c8:b5:02:95:02:7c:52:1f:40:9d:3d:e0:7f:3f:
                    ef:80:6e:f6:15:f9:40:24:70:e0:69:8b:2f:e7:5b:
                    54:5d:b2:c7:53:09:77:8b:23:5a:ea:b1:b0:64:5d:
                    0d:3d:5d:71:74:15:51:d0:34:65:46:3f:82:cf:1e:
                    4a:d3:24:09:d6:2a:53:41:a1:a3:f4:d7:86:15:ca:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:B8:88:55:DD:D9:E6:F2:92:E9:BB:B4:D6:FB:57:5D:5C:05:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/6ebb137312d0b9276fd1728c82220de693784901.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.44.0/22
                IPv6:
                  2806:325::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28428

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:83:c7:63:78:f6:90:22:cb:05:e3:0d:3c:99:3a:11:b8:
         ca:2b:a5:f5:c2:3e:97:17:27:8c:a7:f3:21:82:9b:59:9e:d2:
         13:a9:f9:16:f2:e7:78:67:43:5b:35:c5:29:70:3c:20:89:e4:
         18:64:dd:7d:eb:ce:12:c6:f1:dd:7b:b4:5a:2a:e0:fa:4c:ad:
         19:0a:2a:23:66:5a:2e:66:7c:c4:e6:56:b0:27:48:60:d0:82:
         f5:17:0f:e0:11:77:71:e7:cc:6f:79:f8:42:f3:af:af:c6:2c:
         c2:8b:20:77:32:bb:85:f6:ef:67:d5:41:75:4b:01:12:21:83:
         71:14:6b:83:14:7e:80:c8:2e:25:71:6d:b2:00:07:a8:5d:e0:
         87:64:b3:1d:bd:d6:32:88:2f:3e:83:14:ba:cf:b4:ab:1b:9e:
         59:d8:05:ea:e0:8e:8b:96:3a:3e:59:21:b3:3e:14:73:00:ca:
         7a:75:30:72:8d:b9:b0:7c:bd:f3:79:55:71:a6:5e:82:05:aa:
         58:f5:49:84:e4:66:2d:87:6d:ac:7a:5e:e5:8b:31:4d:b9:cf:
         7e:63:df:55:4a:de:9c:1d:52:44:73:cb:36:e4:9d:46:90:6d:
         1f:6b:89:3d:67:c0:d9:38:aa:d7:09:e3:15:57:7f:95:e5:62:
         b2:1a:d6:b5
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAQzKQjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAwOTE5NTYwM1oXDTI1MDIxMTAyNTE0
NVowMzExMC8GA1UEAxMoNmViYjEzNzMxMmQwYjkyNzZmZDE3MjhjODIyMjBkZTY5
Mzc4NDkwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKGpZNB2mHjh
1nDGoY3QnBWW1aqaXqDUABsAzyd8PHVoVbs1HDJ3zyR2NYJTci9GKWcGmnaNs67o
wMJBbaFrB7uJSYRQd3bJUclmMNT8TkR521ik2ueYhZ1jFmEG3ahtLUpUlQ9PSaro
NdJJFPoQYOBZzvdLbZdvNVHD/TaZakLyYAOBvKTgZG2G8gAMk0qceZLclZCADO0C
USZyclg1Yy4zINKqCJl8Dq2x3C9Fb5cu0D2ZaMi1ApUCfFIfQJ094H8/74Bu9hX5
QCRw4GmLL+dbVF2yx1MJd4sjWuqxsGRdDT1dcXQVUdA0ZUY/gs8eStMkCdYqU0Gh
o/TXhhXKOT8CAwEAAaOCAwgwggMEMB0GA1UdDgQWBBRT9riIVd3Z5vKS6bu01vtX
XVwFvzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZGQ0NjdiNi0zZjY0
LTRhZjctOGVlMi01NjA2NmE1MjZkNDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2RkNDY3YjYtM2Y2NC00
YWY3LThlZTItNTYwNjZhNTI2ZDQwLzZlYmIxMzczMTJkMGI5Mjc2ZmQxNzI4Yzgy
MjIwZGU2OTM3ODQ5MDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2uLDANBAIAAjAHAwUAKAYDJTAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJvDDANBgkqhkiG9w0BAQsFAAOCAQEALhmD
x2N49pAiywXjDTyZOhG4yiul9cI+lxcnjKfzIYKbWZ7SE6n5FvLneGdDWzXFKXA8
IInkGGTdfevOEsbx3Xu0Wirg+kytGQoqI2ZaLmZ8xOZWsCdIYNCC9RcP4BF3cefM
b3n4QvOvr8YswosgdzK7hfbvZ9VBdUsBEiGDcRRrgxR+gMguJXFtsgAHqF3gh2Sz
Hb3WMogvPoMUus+0qxueWdgF6uCOi5Y6Plkhsz4UcwDKenUwco25sHy983lVcaZe
ggWqWPVJhORmLYdtrHpe5YsxTbnPfmPfVUrenB1SRHPLNuSdRpBtH2uJPWfA2Tiq
1wnjFVd/leVishrWtQ==
-----END CERTIFICATE-----