Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/735219299be31feced07dd9523bac5dd0d86f653.cer
File:                     735219299be31feced07dd9523bac5dd0d86f653.cer (raw, json)
Hash identifier:          hNtPjvBnoKzIhR1hgyxG56NIwH3hny6umoSUFqIR/C4=
Subject key identifier:   A0:40:7E:C3:05:7E:2A:37:84:B5:6B:22:38:80:EB:21:22:78:0A:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D64FDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/735219299be31feced07dd9523bac5dd0d86f653.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Apr 2021 01:37:45 +0000
Certificate not after:    Sat 02 Dec 2023 16:09:09 +0000
Subordinate resources:    AS: 271962
                          IP: 45.231.32.0/22
                          IP: 2803:a320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14045146 (0xd64fda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 22 01:37:45 2021 GMT
            Not After : Dec  2 16:09:09 2023 GMT
        Subject: CN=735219299be31feced07dd9523bac5dd0d86f653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:c4:f9:f3:cb:31:f5:9d:bc:43:cc:ec:0a:
                    fa:5b:76:14:39:e8:9a:34:29:37:67:85:a2:47:fc:
                    97:6f:93:2a:f6:24:72:ab:fc:72:92:09:f9:60:a8:
                    c0:af:39:5b:49:74:42:e1:03:10:c3:4a:30:d6:30:
                    d8:84:f9:0a:e5:aa:2a:af:c4:86:82:5d:d7:95:b4:
                    86:f9:2e:21:2c:b7:76:39:ae:1d:47:6c:b1:5d:07:
                    f1:f8:ec:22:01:31:83:4a:0a:d7:91:4b:74:9b:6a:
                    ca:b3:6d:36:59:44:7f:14:70:1c:1c:6d:92:8c:87:
                    80:ec:d1:09:85:27:ba:82:aa:e0:e2:58:29:be:0e:
                    e7:f3:58:02:0b:0b:99:d6:8a:96:a7:4f:98:04:86:
                    8c:3c:05:2e:c5:51:f7:9b:03:69:a5:e8:17:5f:5f:
                    1a:25:b9:4d:d9:c4:70:b7:4d:a2:ef:21:f5:b9:27:
                    ba:13:f1:5b:65:6e:1f:3c:5d:6f:94:5f:a1:db:61:
                    13:e4:d1:f6:f7:03:73:1f:8c:6c:e6:e3:91:83:a6:
                    75:99:dc:02:90:aa:d8:1b:85:25:03:ea:32:10:9a:
                    29:9b:2e:3d:ac:a9:e7:59:3f:3b:db:dd:c6:22:fe:
                    4d:01:74:ac:38:d9:75:1d:e7:96:58:b6:20:f9:bc:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:7E:C3:05:7E:2A:37:84:B5:6B:22:38:80:EB:21:22:78:0A:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/735219299be31feced07dd9523bac5dd0d86f653.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.32.0/22
                IPv6:
                  2803:a320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271962

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:1a:35:f8:a4:79:69:7a:9e:39:a9:fc:bf:9e:bf:ec:a3:
         9e:7b:5d:7f:30:ac:a3:4d:f6:df:02:fa:bd:f1:cd:82:36:c6:
         a0:30:81:6e:5e:eb:47:5d:0e:b3:cc:7d:ac:4d:56:2f:9e:79:
         73:9c:d8:ea:6f:c0:25:39:71:dd:6c:d1:46:4e:67:9f:70:19:
         65:58:f5:eb:11:e4:e6:d2:1f:25:f9:ff:15:83:d9:4b:dc:7e:
         f2:7c:08:65:9b:df:2d:ee:b2:69:c3:49:8c:17:d4:04:eb:61:
         ad:f8:e5:d3:10:5f:a9:90:71:1e:6a:f9:9b:7c:cd:6a:7d:74:
         3f:33:61:7e:c5:27:4a:69:e4:c1:d7:13:ff:00:cf:cb:bd:4c:
         57:ea:41:53:84:86:ea:34:c6:a3:b5:15:e8:bb:47:df:f0:a6:
         cb:31:8e:58:ef:d9:a9:5a:fa:50:b4:7c:11:48:f5:2e:87:fb:
         43:7a:14:f3:1d:10:9d:11:28:d6:b2:b5:d4:72:e5:1a:73:98:
         9e:4f:7b:ad:c8:9a:96:e3:41:9a:d9:ce:fa:58:e5:e0:9f:1d:
         49:bf:36:9c:3b:bf:c2:02:9b:d3:8e:d9:c4:f6:32:8f:c4:4c:
         6c:94:fb:98:1c:bd:ee:f4:c7:3a:71:8c:c7:7c:64:a3:cc:83:
         78:c6:e0:d2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANZP2jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQyMjAxMzc0NVoXDTIzMTIwMjE2MDkw
OVowMzExMC8GA1UEAxMoNzM1MjE5Mjk5YmUzMWZlY2VkMDdkZDk1MjNiYWM1ZGQw
ZDg2ZjY1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKAYxPnzyzH1
nbxDzOwK+lt2FDnomjQpN2eFokf8l2+TKvYkcqv8cpIJ+WCowK85W0l0QuEDEMNK
MNYw2IT5CuWqKq/EhoJd15W0hvkuISy3djmuHUdssV0H8fjsIgExg0oK15FLdJtq
yrNtNllEfxRwHBxtkoyHgOzRCYUnuoKq4OJYKb4O5/NYAgsLmdaKlqdPmASGjDwF
LsVR95sDaaXoF19fGiW5TdnEcLdNou8h9bknuhPxW2VuHzxdb5RfodthE+TR9vcD
cx+MbObjkYOmdZncApCq2BuFJQPqMhCaKZsuPayp51k/O9vdxiL+TQF0rDjZdR3n
lli2IPm8LNsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSgQH7DBX4qN4S1ayI4gOsh
IngKPjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iN2Y0ODZhMi00MTE5
LTQ3NDItOTk0MC04MTZjZDZmNDhiOWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjdmNDg2YTItNDExOS00
NzQyLTk5NDAtODE2Y2Q2ZjQ4YjlmLzczNTIxOTI5OWJlMzFmZWNlZDA3ZGQ5NTIz
YmFjNWRkMGQ4NmY2NTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3nIDANBAIAAjAHAwUAKAOjIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJlowDQYJKoZIhvcNAQELBQADggEBAIqm
GjX4pHlpep45qfy/nr/so557XX8wrKNN9t8C+r3xzYI2xqAwgW5e60ddDrPMfaxN
Vi+eeXOc2OpvwCU5cd1s0UZOZ59wGWVY9esR5ObSHyX5/xWD2UvcfvJ8CGWb3y3u
smnDSYwX1ATrYa345dMQX6mQcR5q+Zt8zWp9dD8zYX7FJ0pp5MHXE/8Az8u9TFfq
QVOEhuo0xqO1Fei7R9/wpssxjljv2ala+lC0fBFI9S6H+0N6FPMdEJ0RKNaytdRy
5RpzmJ5Pe63ImpbjQZrZzvpY5eCfHUm/Npw7v8ICm9OO2cT2Mo/ETGyU+5gcve70
xzpxjMd8ZKPMg3jG4NI=
-----END CERTIFICATE-----