Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/742da04ea6168c21fe8de2d1235f635575728926.cer
File:                     742da04ea6168c21fe8de2d1235f635575728926.cer (raw, json)
Hash identifier:          SxdT3KLS7vxikcZyZ2Kl/YnoFe24EtF/iICAVPaNbfM=
Subject key identifier:   ED:CF:EE:49:AF:92:3C:21:04:7C:AD:6A:9B:64:F7:04:0E:05:86:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F4CA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d982f8d-3b1a-4530-8fb6-d07f6b527aaa/742da04ea6168c21fe8de2d1235f635575728926.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d982f8d-3b1a-4530-8fb6-d07f6b527aaa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 18:59:57 +0000
Certificate not after:    Wed 10 Sep 2025 18:31:33 +0000
Subordinate resources:    AS: 264809
                          IP: 170.239.172.0/22
                          IP: 2803:4cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17779873 (0x10f4ca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 26 18:59:57 2024 GMT
            Not After : Sep 10 18:31:33 2025 GMT
        Subject: CN=742da04ea6168c21fe8de2d1235f635575728926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:c2:ae:c1:1e:ea:66:18:dc:53:fc:6f:d7:
                    68:10:a6:50:f1:98:ac:38:54:ce:5e:ed:76:88:5f:
                    c2:64:ed:a4:7f:63:63:de:c3:2f:a4:7f:65:58:a1:
                    e6:14:b6:5c:5f:8a:20:02:6d:18:af:a2:17:4b:31:
                    1b:1d:58:92:21:ee:c5:5f:48:16:7c:8d:ba:86:8e:
                    b6:75:3d:c9:7a:9a:fd:f3:bf:18:bc:4a:0d:25:e5:
                    db:d7:d8:e7:ef:0b:27:e7:fd:d5:8c:64:de:13:51:
                    c8:1c:9f:28:08:fa:ec:4c:87:a3:15:5c:b5:03:65:
                    3f:ec:7a:78:1b:be:8a:0c:fd:f2:9f:44:19:fc:35:
                    78:dd:1a:7a:a8:85:c3:a6:c5:66:4d:a1:04:a1:59:
                    ae:68:49:ef:7b:e6:18:42:16:01:17:86:43:2a:4d:
                    bd:62:1e:cc:00:f5:4a:69:27:ce:bf:ff:89:df:76:
                    09:23:e2:36:fa:e2:78:06:19:91:47:8b:1b:92:ac:
                    41:ea:9e:67:fc:00:56:8b:3e:93:85:10:5f:75:af:
                    a8:2c:f7:b2:58:29:a3:ee:8d:05:04:2e:36:f5:c8:
                    c6:7f:c7:11:d8:d8:66:4a:71:0b:51:42:19:a6:40:
                    fc:93:32:28:31:ec:f2:9f:64:b4:4d:14:ea:4e:de:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CF:EE:49:AF:92:3C:21:04:7C:AD:6A:9B:64:F7:04:0E:05:86:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d982f8d-3b1a-4530-8fb6-d07f6b527aaa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d982f8d-3b1a-4530-8fb6-d07f6b527aaa/742da04ea6168c21fe8de2d1235f635575728926.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.172.0/22
                IPv6:
                  2803:4cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264809

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:c2:47:bf:4f:c2:27:56:53:53:d8:50:43:17:e4:a8:d1:
         c1:98:44:bf:ca:c1:20:a7:89:bb:cb:95:a3:2f:c0:29:d5:03:
         b0:1f:91:d4:64:93:0e:9b:77:74:46:7a:73:e3:d2:92:90:86:
         e6:fa:75:48:14:74:51:05:9e:1d:2a:89:d6:88:1f:9a:68:0f:
         ab:9f:1a:b0:e3:8e:07:40:e4:34:48:5d:75:78:f1:2c:10:b0:
         ff:a7:10:a9:db:68:07:4b:c7:5b:c5:2c:70:4e:16:b9:f8:f8:
         88:5d:38:d5:67:83:98:e0:05:3e:69:d5:03:d7:0a:d6:c8:5b:
         58:b9:c3:83:9b:dc:11:8c:6c:79:16:4d:f9:f9:97:a0:7b:c5:
         3f:7a:46:f1:83:08:7d:99:33:66:24:ed:d6:28:3e:7b:6c:3b:
         d4:0b:ec:c0:dd:40:e1:34:42:c5:d9:8e:a8:38:3c:de:27:a8:
         06:fb:ac:11:b0:ff:be:09:58:27:ef:d0:38:54:49:21:c7:02:
         46:b4:0a:06:ec:af:f2:51:55:b2:1c:bb:c7:d4:22:bb:00:4f:
         53:a5:ee:0a:16:11:b0:66:3f:43:45:7b:75:4e:e3:92:5f:91:
         df:f0:c6:7c:63:b5:6d:ba:d7:64:0b:59:d6:6d:c9:8b:64:3d:
         7a:b4:76:7d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQ9MoTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDMyNjE4NTk1N1oXDTI1MDkxMDE4MzEz
M1owMzExMC8GA1UEAxMoNzQyZGEwNGVhNjE2OGMyMWZlOGRlMmQxMjM1ZjYzNTU3
NTcyODkyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOKlwq7BHupm
GNxT/G/XaBCmUPGYrDhUzl7tdohfwmTtpH9jY97DL6R/ZVih5hS2XF+KIAJtGK+i
F0sxGx1YkiHuxV9IFnyNuoaOtnU9yXqa/fO/GLxKDSXl29fY5+8LJ+f91Yxk3hNR
yByfKAj67EyHoxVctQNlP+x6eBu+igz98p9EGfw1eN0aeqiFw6bFZk2hBKFZrmhJ
73vmGEIWAReGQypNvWIezAD1Smknzr//id92CSPiNvrieAYZkUeLG5KsQeqeZ/wA
Vos+k4UQX3WvqCz3slgpo+6NBQQuNvXIxn/HEdjYZkpxC1FCGaZA/JMyKDHs8p9k
tE0U6k7eiIMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTtz+5Jr5I8IQR8rWqbZPcE
DgWGrDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84ZDk4MmY4ZC0zYjFh
LTQ1MzAtOGZiNi1kMDdmNmI1MjdhYWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGQ5ODJmOGQtM2IxYS00
NTMwLThmYjYtZDA3ZjZiNTI3YWFhLzc0MmRhMDRlYTYxNjhjMjFmZThkZTJkMTIz
NWY2MzU1NzU3Mjg5MjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrvrDANBAIAAjAHAwUAKANMwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECmkwDQYJKoZIhvcNAQELBQADggEBAGzO
wke/T8InVlNT2FBDF+So0cGYRL/KwSCnibvLlaMvwCnVA7AfkdRkkw6bd3RGenPj
0pKQhub6dUgUdFEFnh0qidaIH5poD6ufGrDjjgdA5DRIXXV48SwQsP+nEKnbaAdL
x1vFLHBOFrn4+IhdONVng5jgBT5p1QPXCtbIW1i5w4Ob3BGMbHkWTfn5l6B7xT96
RvGDCH2ZM2Yk7dYoPntsO9QL7MDdQOE0QsXZjqg4PN4nqAb7rBGw/74JWCfv0DhU
SSHHAka0Cgbsr/JRVbIcu8fUIrsAT1Ol7goWEbBmP0NFe3VO45Jfkd/wxnxjtW26
12QLWdZtyYtkPXq0dn0=
-----END CERTIFICATE-----