Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76e398f75f9d03b64b057a22be8f63c7123c5800.cer
File:                     76e398f75f9d03b64b057a22be8f63c7123c5800.cer (raw, json)
Hash identifier:          TaUrnQjNdIQu7L4ZFSK4cPm9WZdEy0qCpHrUl+MJdtQ=
Subject key identifier:   44:99:10:82:C4:3C:4B:A2:48:DB:30:5B:A8:47:6E:47:B5:45:61:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7BFFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec2c8eb4-4df7-4d24-8b42-b5033b2bc6b6/76e398f75f9d03b64b057a22be8f63c7123c5800.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec2c8eb4-4df7-4d24-8b42-b5033b2bc6b6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Apr 2023 18:54:44 +0000
Certificate not after:    Thu 15 Aug 2024 18:47:38 +0000
Subordinate resources:    AS: 271995
                          IP: 2801:16:1800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15187967 (0xe7bfff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 29 18:54:44 2023 GMT
            Not After : Aug 15 18:47:38 2024 GMT
        Subject: CN=76e398f75f9d03b64b057a22be8f63c7123c5800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:3b:d8:b1:5e:aa:67:3f:2f:a3:5c:f0:fb:
                    4d:46:0d:b4:e9:42:38:52:00:83:d7:db:70:17:d8:
                    6c:74:ca:8c:ac:6e:c4:da:9f:4b:29:46:a0:41:1a:
                    48:7d:3b:51:d2:4b:15:2c:43:1f:73:b5:86:c8:8e:
                    ae:bd:d4:23:c3:a6:97:ca:83:79:70:6b:af:58:0a:
                    37:70:f0:29:d3:d5:67:df:84:d4:9e:8b:c9:9e:b2:
                    13:2e:ff:88:1f:dd:92:b3:3d:20:90:8b:1f:f7:42:
                    aa:3b:6f:4e:83:33:52:d4:ea:89:27:c6:45:9d:af:
                    ae:fd:73:73:7d:3a:20:34:33:66:15:7e:0e:db:ce:
                    9c:a5:8c:e2:eb:eb:8f:cc:53:75:71:2d:b5:2b:19:
                    6e:54:ed:a2:82:cc:85:9d:f4:e1:e1:9a:6d:d4:9f:
                    ef:35:76:dc:13:ed:32:e3:74:3f:53:6c:f9:5e:0e:
                    03:e0:f1:34:84:c1:b0:50:62:92:aa:17:2d:f3:b6:
                    48:d5:bb:07:cf:81:50:ba:53:d3:5e:c7:ec:52:09:
                    64:21:2f:2b:e1:f4:4e:87:e4:f8:d5:43:9a:65:5b:
                    a9:26:ae:d3:26:b3:0c:91:1c:2d:c2:be:26:81:1b:
                    bf:ef:4a:7a:4f:93:60:de:db:e2:62:38:1a:3d:9d:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:10:82:C4:3C:4B:A2:48:DB:30:5B:A8:47:6E:47:B5:45:61:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2c8eb4-4df7-4d24-8b42-b5033b2bc6b6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2c8eb4-4df7-4d24-8b42-b5033b2bc6b6/76e398f75f9d03b64b057a22be8f63c7123c5800.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:1800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271995

    Signature Algorithm: sha256WithRSAEncryption
         11:76:ba:93:ba:69:6e:7a:51:ab:bf:19:28:cb:f5:1d:35:2c:
         1f:12:3e:78:a7:37:94:23:48:e0:4d:e3:39:ed:f7:21:dd:de:
         15:b3:ef:95:6a:6c:0f:7c:6f:2e:3c:9a:d7:a7:df:06:16:54:
         8a:9b:f4:8f:80:b5:a0:bc:8c:8a:04:b9:67:82:7f:76:ce:a1:
         ff:7e:f3:a0:e7:ce:8b:be:d8:07:1e:ce:57:23:ef:62:d4:4f:
         1e:16:ff:da:98:a2:24:86:8f:29:19:55:f7:9a:28:27:a8:b0:
         67:5e:dc:40:01:78:d6:0c:f6:4e:58:de:f1:b9:03:c1:ce:a9:
         f2:ea:28:21:c7:33:ce:43:56:57:c2:3b:34:0a:09:a2:44:4e:
         90:55:95:3f:69:97:9f:6d:63:4f:d6:44:ca:69:d9:b3:8e:0b:
         cb:38:33:4e:a3:70:fc:6a:a5:86:a8:8c:96:0a:f2:30:09:e4:
         d4:9e:2f:65:75:45:7c:b3:d2:4f:67:f2:0f:81:eb:5a:fa:4b:
         3b:6e:ff:0f:f8:34:e8:0c:d1:60:a1:63:e3:b0:8f:12:49:88:
         f6:fa:57:dc:36:f8:33:bc:f5:da:c1:a5:cb:4c:cf:d0:1e:f7:
         a1:62:21:89:e5:93:c0:3f:46:c5:c2:cf:14:eb:2d:45:43:76:
         52:c7:fb:f0
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAOe//zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQyOTE4NTQ0NFoXDTI0MDgxNTE4NDcz
OFowMzExMC8GA1UEAxMoNzZlMzk4Zjc1ZjlkMDNiNjRiMDU3YTIyYmU4ZjYzYzcx
MjNjNTgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIkhO9ixXqpn
Py+jXPD7TUYNtOlCOFIAg9fbcBfYbHTKjKxuxNqfSylGoEEaSH07UdJLFSxDH3O1
hsiOrr3UI8Oml8qDeXBrr1gKN3DwKdPVZ9+E1J6LyZ6yEy7/iB/dkrM9IJCLH/dC
qjtvToMzUtTqiSfGRZ2vrv1zc306IDQzZhV+DtvOnKWM4uvrj8xTdXEttSsZblTt
ooLMhZ304eGabdSf7zV23BPtMuN0P1Ns+V4OA+DxNITBsFBikqoXLfO2SNW7B8+B
ULpT017H7FIJZCEvK+H0Tofk+NVDmmVbqSau0yazDJEcLcK+JoEbv+9Kek+TYN7b
4mI4Gj2dsHkCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBREmRCCxDxLokjbMFuoR25H
tUVhxjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYzJjOGViNC00ZGY3
LTRkMjQtOGI0Mi1iNTAzM2IyYmM2YjYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWMyYzhlYjQtNGRmNy00
ZDI0LThiNDItYjUwMzNiMmJjNmI2Lzc2ZTM5OGY3NWY5ZDAzYjY0YjA1N2EyMmJl
OGY2M2M3MTIzYzU4MDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABYYADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEJnswDQYJKoZIhvcNAQELBQADggEBABF2upO6aW56Uau/GSjL
9R01LB8SPninN5QjSOBN4znt9yHd3hWz75VqbA98by48mten3wYWVIqb9I+AtaC8
jIoEuWeCf3bOof9+86Dnzou+2Acezlcj72LUTx4W/9qYoiSGjykZVfeaKCeosGde
3EABeNYM9k5Y3vG5A8HOqfLqKCHHM85DVlfCOzQKCaJETpBVlT9pl59tY0/WRMpp
2bOOC8s4M06jcPxqpYaojJYK8jAJ5NSeL2V1RXyz0k9n8g+B61r6Sztu/w/4NOgM
0WChY+OwjxJJiPb6V9w2+DO89drBpctMz9Ae96FiIYnlk8A/RsXCzxTrLUVDdlLH
+/A=
-----END CERTIFICATE-----