Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f7245634795eb402459d902a77509c493f8f42e.cer
File:                     6f7245634795eb402459d902a77509c493f8f42e.cer (raw, json)
Hash identifier:          nYVliRRl/sZ1yrlW+OV53N9XyYUcjXigx0CoLsBcNQ4=
Subject key identifier:   96:50:C1:7B:11:8B:A1:B8:DB:01:63:F9:A9:B6:41:F6:69:57:ED:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B413B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/493fd636-8aaa-4b08-8c3e-b236a0a0cda7/6f7245634795eb402459d902a77509c493f8f42e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/493fd636-8aaa-4b08-8c3e-b236a0a0cda7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 16:03:50 +0000
Certificate not after:    Wed 17 Sep 2025 21:26:41 +0000
Subordinate resources:    AS: 264813
                          IP: 170.239.236.0/22
                          IP: 2803:6cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17514811 (0x10b413b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 20 16:03:50 2024 GMT
            Not After : Sep 17 21:26:41 2025 GMT
        Subject: CN=6f7245634795eb402459d902a77509c493f8f42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:5b:a5:94:a1:7a:25:8f:2b:ce:b0:ce:7b:
                    ea:41:b7:e7:af:9e:1d:c9:35:a0:f9:7a:b0:b5:a2:
                    41:64:fa:8e:23:13:74:20:73:2b:5f:c0:02:25:aa:
                    7b:47:5c:f3:c5:5d:74:10:dc:da:a5:75:6c:c1:25:
                    35:9b:4e:71:ab:71:a2:d5:4a:63:fa:82:f6:6f:03:
                    ed:d5:8c:1d:72:f4:71:7f:00:14:5f:91:67:16:26:
                    0a:a7:ec:e0:60:7e:cf:2e:87:26:f7:15:38:33:98:
                    ef:78:e4:bd:52:37:d4:61:60:68:4e:e5:66:d2:6d:
                    0f:f6:c0:46:6b:8a:ca:16:ca:c5:2a:22:a7:70:40:
                    21:96:a1:13:f0:74:49:98:18:78:5b:98:a5:60:b4:
                    6e:65:77:7e:f7:10:79:ba:f2:92:01:af:c1:43:3a:
                    cd:f9:c7:5b:41:ab:1e:46:98:f5:55:e6:20:32:8f:
                    fc:50:fe:04:7c:88:dc:45:f7:47:52:c2:e4:ff:8e:
                    28:5e:c5:b5:3a:28:9b:81:99:f8:e1:a9:e7:d7:d2:
                    91:75:72:4a:0d:77:4e:ca:29:85:63:ae:2c:f9:fe:
                    5a:23:16:c0:e4:aa:e7:8f:a4:cd:38:9f:c0:d4:e5:
                    2b:f9:42:b1:55:b0:7f:5b:b1:21:c7:c6:6a:09:45:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:50:C1:7B:11:8B:A1:B8:DB:01:63:F9:A9:B6:41:F6:69:57:ED:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/493fd636-8aaa-4b08-8c3e-b236a0a0cda7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/493fd636-8aaa-4b08-8c3e-b236a0a0cda7/6f7245634795eb402459d902a77509c493f8f42e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.236.0/22
                IPv6:
                  2803:6cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264813

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:a4:c0:db:7e:93:84:e8:08:a5:62:7a:4f:87:96:6f:41:
         8a:d4:6e:e2:98:21:cf:01:cc:3a:69:1e:86:d0:70:97:d7:d1:
         ea:f7:58:95:2c:8b:af:17:5f:39:21:dc:3e:c1:88:85:b1:df:
         7c:ba:d6:09:ba:d4:79:ec:4d:d0:07:ae:36:14:84:12:20:be:
         05:b4:aa:28:97:5d:e2:ce:85:5c:09:36:3a:78:a9:72:e6:85:
         6f:2b:34:d4:48:9b:9a:5f:26:7f:6f:0e:61:d1:5e:0a:70:79:
         75:78:f3:16:a7:22:89:6d:ae:a0:57:59:a9:70:58:ec:29:c4:
         07:a6:f3:90:e4:69:6b:62:72:ad:eb:e3:52:d9:18:01:51:b8:
         92:fe:6b:82:98:e8:0f:f4:f5:1f:ab:c0:e0:8a:a5:f2:94:66:
         01:52:ab:49:a7:6e:e0:ac:a2:04:67:79:a1:01:0d:25:6a:73:
         5b:c7:e8:c1:0b:78:e6:d9:3b:f1:81:db:c2:4d:99:2e:86:30:
         9e:79:da:43:63:ac:c8:62:e9:2f:aa:52:0c:a4:45:6c:6a:2a:
         a9:c8:e4:59:eb:35:69:1a:d2:74:07:74:76:37:5e:df:e0:a2:
         71:c6:4e:dc:5f:03:b3:d8:33:17:15:35:3a:3e:c9:ab:e4:00:
         c3:75:6f:b2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQtBOzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIyMDE2MDM1MFoXDTI1MDkxNzIxMjY0
MVowMzExMC8GA1UEAxMoNmY3MjQ1NjM0Nzk1ZWI0MDI0NTlkOTAyYTc3NTA5YzQ5
M2Y4ZjQyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIskW6WUoXol
jyvOsM576kG356+eHck1oPl6sLWiQWT6jiMTdCBzK1/AAiWqe0dc88VddBDc2qV1
bMElNZtOcatxotVKY/qC9m8D7dWMHXL0cX8AFF+RZxYmCqfs4GB+zy6HJvcVODOY
73jkvVI31GFgaE7lZtJtD/bARmuKyhbKxSoip3BAIZahE/B0SZgYeFuYpWC0bmV3
fvcQebrykgGvwUM6zfnHW0GrHkaY9VXmIDKP/FD+BHyI3EX3R1LC5P+OKF7FtToo
m4GZ+OGp59fSkXVySg13TsophWOuLPn+WiMWwOSq54+kzTifwNTlK/lCsVWwf1ux
IcfGaglFj0sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSWUMF7EYuhuNsBY/mptkH2
aVft2DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OTNmZDYzNi04YWFh
LTRiMDgtOGMzZS1iMjM2YTBhMGNkYTcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkzZmQ2MzYtOGFhYS00
YjA4LThjM2UtYjIzNmEwYTBjZGE3LzZmNzI0NTYzNDc5NWViNDAyNDU5ZDkwMmE3
NzUwOWM0OTNmOGY0MmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrv7DANBAIAAjAHAwUAKANswDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECm0wDQYJKoZIhvcNAQELBQADggEBAF+M
pMDbfpOE6AilYnpPh5ZvQYrUbuKYIc8BzDppHobQcJfX0er3WJUsi68XXzkh3D7B
iIWx33y61gm61HnsTdAHrjYUhBIgvgW0qiiXXeLOhVwJNjp4qXLmhW8rNNRIm5pf
Jn9vDmHRXgpweXV48xanIoltrqBXWalwWOwpxAem85DkaWticq3r41LZGAFRuJL+
a4KY6A/09R+rwOCKpfKUZgFSq0mnbuCsogRneaEBDSVqc1vH6MELeObZO/GB28JN
mS6GMJ552kNjrMhi6S+qUgykRWxqKqnI5FnrNWka0nQHdHY3Xt/gonHGTtxfA7PY
MxcVNTo+yavkAMN1b7I=
-----END CERTIFICATE-----