Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/824f5e3fe0d21a0ddb9851ebfb36393706fc532f.cer
File:                     824f5e3fe0d21a0ddb9851ebfb36393706fc532f.cer (raw, json)
Hash identifier:          j9t526Z33bbYOciKDYb19YHh+PsVjW2DywXA5P9Pook=
Subject key identifier:   AA:0E:2C:64:BA:AA:8C:20:54:06:F1:11:D5:9B:F6:E1:05:7A:62:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5539F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/af738894-d0c0-4a01-8404-2fb2138cfe75/824f5e3fe0d21a0ddb9851ebfb36393706fc532f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/af738894-d0c0-4a01-8404-2fb2138cfe75/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 15:21:18 +0000
Certificate not after:    Sun 24 Nov 2024 18:39:00 +0000
Subordinate resources:    IP: 2801:1ec::/42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16077727 (0xf5539f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 15 15:21:18 2023 GMT
            Not After : Nov 24 18:39:00 2024 GMT
        Subject: CN=824f5e3fe0d21a0ddb9851ebfb36393706fc532f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:63:4a:6f:45:d8:64:5f:a4:69:72:f7:03:40:
                    d3:80:62:40:30:63:60:b0:49:d2:32:63:1c:78:62:
                    c6:41:76:5e:ca:5c:33:80:89:c9:f1:f0:42:f3:c3:
                    0f:e9:2d:4f:da:33:9e:c6:3c:2c:ec:6b:2e:37:94:
                    a6:ac:d9:39:7c:68:0b:28:70:21:49:f0:b0:a4:73:
                    8c:1b:64:00:33:35:46:a7:ab:f0:c2:0b:76:d1:24:
                    ee:67:f6:e7:d0:ea:59:5b:61:c1:e0:5f:b8:9d:f7:
                    58:7a:e5:23:d0:16:82:a8:66:c0:3a:85:1a:93:cc:
                    d8:bf:31:a1:17:55:ce:26:1b:2c:36:95:50:2d:c2:
                    6a:18:c7:fe:c2:c5:de:f8:8c:81:7a:83:9f:36:a6:
                    bf:e7:4f:ce:ad:ef:08:2f:fb:0f:32:f8:26:77:03:
                    73:25:53:42:aa:ef:f5:e6:38:47:7b:9c:12:eb:1a:
                    c4:c2:0a:e9:a6:6e:e1:3d:4d:91:7a:d5:a4:69:11:
                    d1:31:57:cc:f7:23:97:bb:97:7f:b0:ba:1a:ca:ab:
                    3e:19:f4:25:77:d6:24:df:5b:63:e5:9f:ac:c5:79:
                    25:c2:15:f8:37:cc:c5:07:ae:d1:5b:0d:5a:ca:fb:
                    a0:8f:23:f5:c0:5b:e2:44:48:3e:77:4d:5e:2f:2e:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0E:2C:64:BA:AA:8C:20:54:06:F1:11:D5:9B:F6:E1:05:7A:62:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/af738894-d0c0-4a01-8404-2fb2138cfe75/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/af738894-d0c0-4a01-8404-2fb2138cfe75/824f5e3fe0d21a0ddb9851ebfb36393706fc532f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ec::/42

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:8a:5e:31:7b:75:2f:58:73:25:c4:75:9a:db:c7:bb:85:
         38:74:0e:fb:e2:a7:9c:e3:e1:d5:40:ab:93:9d:7d:17:19:fb:
         15:01:53:e8:0d:8e:18:d8:f0:08:66:86:6e:8b:c7:55:6d:84:
         7f:6e:55:e1:e5:4e:62:31:ae:ad:4c:c7:f8:b2:72:22:e8:20:
         5f:6b:d0:b7:38:52:74:b4:52:d3:2b:e1:a4:07:06:74:02:7f:
         be:d1:fe:6b:a6:b0:0f:c0:7a:14:12:98:18:7c:20:76:af:34:
         77:6d:c5:38:3b:1b:93:bd:56:91:e8:57:1c:1e:b1:1e:f5:c9:
         9d:d7:1b:5d:8e:6e:49:2f:91:14:1b:9f:3f:78:c5:c0:33:f2:
         87:b6:40:7a:1a:63:2a:a5:31:85:b0:ba:12:c4:32:d3:4e:17:
         59:18:af:31:bc:77:01:c0:b1:30:3c:ff:cc:65:71:03:59:c7:
         14:f1:3b:15:4d:23:67:5f:8e:b3:6e:86:96:1a:80:13:02:d0:
         90:ae:3a:62:ad:f2:54:cb:3b:e2:48:9a:21:bf:76:73:a3:0a:
         5b:8e:85:04:1b:03:ff:59:a9:59:4d:4f:b8:b4:bb:65:2d:bb:
         e6:23:87:c7:43:b3:bd:17:33:ad:11:a6:8e:92:fa:eb:a2:21:
         0a:5d:9a:96
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPVTnzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgxNTE1MjExOFoXDTI0MTEyNDE4Mzkw
MFowMzExMC8GA1UEAxMoODI0ZjVlM2ZlMGQyMWEwZGRiOTg1MWViZmIzNjM5Mzcw
NmZjNTMyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIpjSm9F2GRf
pGly9wNA04BiQDBjYLBJ0jJjHHhixkF2XspcM4CJyfHwQvPDD+ktT9oznsY8LOxr
LjeUpqzZOXxoCyhwIUnwsKRzjBtkADM1Rqer8MILdtEk7mf259DqWVthweBfuJ33
WHrlI9AWgqhmwDqFGpPM2L8xoRdVziYbLDaVUC3CahjH/sLF3viMgXqDnzamv+dP
zq3vCC/7DzL4JncDcyVTQqrv9eY4R3ucEusaxMIK6aZu4T1NkXrVpGkR0TFXzPcj
l7uXf7C6GsqrPhn0JXfWJN9bY+WfrMV5JcIV+DfMxQeu0VsNWsr7oI8j9cBb4kRI
PndNXi8uiw0CAwEAAaOCAuEwggLdMB0GA1UdDgQWBBSqDixkuqqMIFQG8RHVm/bh
BXpipDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hZjczODg5NC1kMGMw
LTRhMDEtODQwNC0yZmIyMTM4Y2ZlNzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWY3Mzg4OTQtZDBjMC00
YTAxLTg0MDQtMmZiMjEzOGNmZTc1LzgyNGY1ZTNmZTBkMjFhMGRkYjk4NTFlYmZi
MzYzOTM3MDZmYzUzMmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigBAewAADANBgkqhkiG9w0BAQsF
AAOCAQEABByKXjF7dS9YcyXEdZrbx7uFOHQO++KnnOPh1UCrk519Fxn7FQFT6A2O
GNjwCGaGbovHVW2Ef25V4eVOYjGurUzH+LJyIuggX2vQtzhSdLRS0yvhpAcGdAJ/
vtH+a6awD8B6FBKYGHwgdq80d23FODsbk71WkehXHB6xHvXJndcbXY5uSS+RFBuf
P3jFwDPyh7ZAehpjKqUxhbC6EsQy004XWRivMbx3AcCxMDz/zGVxA1nHFPE7FU0j
Z1+Os26GlhqAEwLQkK46Yq3yVMs74kiaIb92c6MKW46FBBsD/1mpWU1PuLS7ZS27
5iOHx0OzvRczrRGmjpL666IhCl2alg==
-----END CERTIFICATE-----