Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c9233863e5f453ce9960738649c234b5377132f.cer
File:                     7c9233863e5f453ce9960738649c234b5377132f.cer (raw, json)
Hash identifier:          SdfPsxyycHhxfsX+0BZhBq4klVXZAsvXIpl/PXbuKM4=
Subject key identifier:   6A:46:9E:95:71:19:A9:65:EB:4D:BB:96:7E:E9:5F:E2:E0:2D:1C:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC1135
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/55bf45a1-bdc9-4ecc-9118-cce75bc1e582/7c9233863e5f453ce9960738649c234b5377132f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/55bf45a1-bdc9-4ecc-9118-cce75bc1e582/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 01:26:22 +0000
Certificate not after:    Fri 21 Mar 2025 18:45:57 +0000
Subordinate resources:    AS: 267862
                          IP: 45.177.0.0/22
                          IP: 2803:c260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15470901 (0xec1135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 01:26:22 2023 GMT
            Not After : Mar 21 18:45:57 2025 GMT
        Subject: CN=7c9233863e5f453ce9960738649c234b5377132f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:29:25:be:dd:8a:2a:f5:e8:75:8f:ae:15:
                    04:a0:d3:97:33:9c:15:94:f4:20:9a:4a:43:9c:f5:
                    57:58:52:20:1b:c8:39:19:b4:32:2f:18:9b:62:2c:
                    40:05:e7:18:ce:5c:31:1e:6b:4e:1b:18:16:5b:af:
                    c8:47:1a:df:86:c7:2b:83:d4:9e:b4:20:76:87:36:
                    b3:f4:48:73:c3:de:c5:93:ee:15:bf:77:cc:12:6d:
                    0b:80:81:6b:a5:dd:a2:dc:81:d2:5b:b3:70:f2:0e:
                    44:21:23:1f:62:14:e5:bd:fc:fa:26:a8:ed:ce:ab:
                    ba:0b:6a:eb:34:fa:50:8a:36:0c:92:ed:1c:18:d7:
                    c8:8c:ce:ba:37:9d:ad:4a:aa:f0:d8:49:c0:dd:53:
                    f8:63:dd:81:82:09:15:93:fc:fe:0d:54:a0:85:9d:
                    23:5e:e8:e0:41:59:4c:fa:cb:56:53:6f:e2:c8:4c:
                    18:b7:b6:58:32:29:8c:74:4a:aa:f1:dd:7d:25:56:
                    5f:d5:1d:ec:d8:a2:88:a9:cd:28:3a:54:44:5d:87:
                    c0:35:32:0e:36:b0:39:0a:1d:7c:d9:f9:a2:c2:01:
                    cf:0b:51:02:79:a3:f1:78:d3:f4:a9:89:2e:54:91:
                    d2:48:54:38:93:34:d4:76:cf:bd:3b:e5:c6:bc:c5:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:9E:95:71:19:A9:65:EB:4D:BB:96:7E:E9:5F:E2:E0:2D:1C:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/55bf45a1-bdc9-4ecc-9118-cce75bc1e582/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/55bf45a1-bdc9-4ecc-9118-cce75bc1e582/7c9233863e5f453ce9960738649c234b5377132f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.0.0/22
                IPv6:
                  2803:c260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267862

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:af:f9:3c:0a:69:b8:9d:6d:05:6b:6f:1e:a5:96:49:40:
         a0:89:c4:1c:42:b7:df:2d:c8:6f:75:2b:13:f5:a9:d2:47:71:
         f6:62:2a:6f:cf:b4:40:c3:bc:1f:29:0f:68:20:d7:2c:22:6e:
         92:5c:22:1b:6d:a3:ee:87:0f:fe:0d:89:af:68:c2:2a:a7:87:
         a2:61:a3:4b:5e:7d:39:ee:e8:29:f2:22:b8:e9:6b:f2:cd:ac:
         9f:32:4e:47:15:ee:4c:8e:a4:db:c6:7e:fa:fd:b2:9b:0e:b7:
         79:18:59:01:66:d2:ea:f1:ca:f6:ed:fb:40:9c:76:9d:63:25:
         d7:35:e3:9b:c1:4a:de:cb:57:fa:62:4d:5e:42:c3:47:58:e0:
         42:0b:1d:6c:ae:ee:25:a8:2a:94:54:a8:e8:f0:64:1f:da:41:
         ac:35:78:31:a5:49:7e:6b:95:8c:52:fa:84:c4:a7:da:08:b7:
         19:15:88:a0:dd:61:56:ee:d2:82:fa:4c:12:7a:b5:8c:50:23:
         1c:cd:b9:67:6c:82:cc:4c:f5:ec:2a:48:c5:9c:90:19:b9:c1:
         4f:b1:7d:45:ba:f2:aa:3e:3e:27:12:15:7e:cf:26:e8:8f:63:
         aa:fb:db:cb:0b:60:31:d0:4f:95:1a:d4:2f:59:99:23:cd:4a:
         9b:09:fc:15
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOwRNTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwMTAxMjYyMloXDTI1MDMyMTE4NDU1
N1owMzExMC8GA1UEAxMoN2M5MjMzODYzZTVmNDUzY2U5OTYwNzM4NjQ5YzIzNGI1
Mzc3MTMyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIiXKSW+3Yoq
9eh1j64VBKDTlzOcFZT0IJpKQ5z1V1hSIBvIORm0Mi8Ym2IsQAXnGM5cMR5rThsY
FluvyEca34bHK4PUnrQgdoc2s/RIc8PexZPuFb93zBJtC4CBa6XdotyB0luzcPIO
RCEjH2IU5b38+iao7c6rugtq6zT6UIo2DJLtHBjXyIzOujedrUqq8NhJwN1T+GPd
gYIJFZP8/g1UoIWdI17o4EFZTPrLVlNv4shMGLe2WDIpjHRKqvHdfSVWX9Ud7Nii
iKnNKDpURF2HwDUyDjawOQodfNn5osIBzwtRAnmj8XjT9KmJLlSR0khUOJM01HbP
vTvlxrzFQXkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRqRp6VcRmpZetNu5Z+6V/i
4C0cqzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NWJmNDVhMS1iZGM5
LTRlY2MtOTExOC1jY2U3NWJjMWU1ODIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTViZjQ1YTEtYmRjOS00
ZWNjLTkxMTgtY2NlNzViYzFlNTgyLzdjOTIzMzg2M2U1ZjQ1M2NlOTk2MDczODY0
OWMyMzRiNTM3NzEzMmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2xADANBAIAAjAHAwUAKAPCYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFlYwDQYJKoZIhvcNAQELBQADggEBAKqV
r/k8Cmm4nW0Fa28epZZJQKCJxBxCt98tyG91KxP1qdJHcfZiKm/PtEDDvB8pD2gg
1ywibpJcIhtto+6HD/4Nia9owiqnh6Jho0tefTnu6CnyIrjpa/LNrJ8yTkcV7kyO
pNvGfvr9spsOt3kYWQFm0urxyvbt+0Ccdp1jJdc145vBSt7LV/piTV5Cw0dY4EIL
HWyu7iWoKpRUqOjwZB/aQaw1eDGlSX5rlYxS+oTEp9oItxkViKDdYVbu0oL6TBJ6
tYxQIxzNuWdsgsxM9ewqSMWckBm5wU+xfUW68qo+PicSFX7PJuiPY6r728sLYDHQ
T5Ua1C9ZmSPNSpsJ/BU=
-----END CERTIFICATE-----