Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87711908d9b7474c61788c5e3b8953e837a5738f.cer
File:                     87711908d9b7474c61788c5e3b8953e837a5738f.cer (raw, json)
Hash identifier:          CFLu7ud6tRi+XmClLHZbLS3gRkKttOTt6R0tZMvmHB0=
Subject key identifier:   0E:94:25:58:05:EB:0B:E2:EA:DE:90:42:2B:C8:E6:44:2F:E0:B7:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E89ED0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4f958b99-3943-49a9-9f18-239fbeab891d/87711908d9b7474c61788c5e3b8953e837a5738f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4f958b99-3943-49a9-9f18-239fbeab891d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 16:04:21 +0000
Certificate not after:    Sat 21 Sep 2024 16:37:49 +0000
Subordinate resources:    AS: 267726
                          IP: 45.162.86.0/24
                          IP: 2803:c5a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15245008 (0xe89ed0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 16:04:21 2023 GMT
            Not After : Sep 21 16:37:49 2024 GMT
        Subject: CN=87711908d9b7474c61788c5e3b8953e837a5738f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:3a:68:bb:46:9b:f4:1b:ff:f2:33:f9:83:
                    1f:99:8b:25:36:26:c1:60:96:9e:95:7a:2b:c4:1b:
                    b2:3f:c7:e0:9f:07:c1:f8:b0:fe:7c:59:c4:7a:6e:
                    02:f0:e2:ff:db:75:04:fc:b9:6c:22:74:fc:58:ce:
                    78:2b:a5:88:38:16:78:62:52:2a:aa:36:1a:b7:ab:
                    99:c4:8a:5e:be:a6:51:c8:77:4b:5c:09:9a:aa:8e:
                    a7:07:03:7f:ab:64:10:38:27:5a:71:a6:42:66:03:
                    69:ce:49:4a:ef:a1:fe:e0:ba:0f:74:f9:f5:b9:33:
                    a2:d4:6c:6d:b0:f8:d7:70:8b:90:ec:29:ed:45:df:
                    db:ee:33:49:9e:54:73:5d:ce:21:05:6f:c9:c0:5d:
                    e4:9d:b9:19:ac:1e:7c:2f:0c:ff:74:b2:eb:7c:39:
                    e3:fa:fa:6e:9b:29:1f:d5:ca:4e:a7:8d:7c:26:b1:
                    f0:53:22:09:69:6d:e8:48:4a:7b:90:13:54:34:2f:
                    65:fc:f8:a5:bf:4d:9c:9d:31:1e:8a:f1:31:45:7b:
                    c6:39:f0:71:0f:ff:20:f5:00:0a:b5:1e:57:44:be:
                    56:08:53:2b:dd:2a:9d:d7:7b:aa:2b:9b:1a:92:59:
                    7c:3a:96:58:a1:ab:cc:18:1e:c4:fd:56:c8:73:01:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:25:58:05:EB:0B:E2:EA:DE:90:42:2B:C8:E6:44:2F:E0:B7:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4f958b99-3943-49a9-9f18-239fbeab891d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4f958b99-3943-49a9-9f18-239fbeab891d/87711908d9b7474c61788c5e3b8953e837a5738f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.86.0/24
                IPv6:
                  2803:c5a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267726

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:37:f9:61:b1:b7:ba:eb:f2:83:64:74:78:95:85:f7:c5:
         19:0d:ec:a0:f4:88:52:45:65:86:88:6a:57:d0:5a:00:49:13:
         ee:f6:2e:78:a2:19:21:9b:ce:f7:1a:9d:ef:e1:f2:c4:33:ee:
         71:93:cb:2f:16:ad:4b:83:3a:ae:ec:67:2d:99:ef:0d:cb:a5:
         c9:35:01:d7:79:d4:fe:fe:2f:37:d3:0e:a1:06:6b:01:0e:dd:
         30:05:36:3b:89:89:e0:e8:92:01:d4:1c:f6:91:37:c8:21:03:
         d0:57:7e:52:10:40:c0:ac:cf:5d:dc:ca:2c:7a:2b:40:da:52:
         5f:5b:8a:df:27:28:4c:49:34:ec:6c:0e:92:86:6e:d3:83:ec:
         52:2c:dc:b6:b8:01:ee:6d:3e:cb:a5:8d:ab:ea:39:ac:53:1d:
         4d:1b:d3:7f:7e:82:cf:e6:52:42:1e:16:14:0c:b4:c1:1d:b9:
         e8:8c:dd:e5:28:af:08:69:a3:1f:f0:f8:6c:f5:39:98:d6:13:
         80:f4:fd:95:df:f9:5c:4c:98:fa:b4:14:4b:17:9e:ee:3e:31:
         da:ca:9f:20:4c:74:d2:6a:24:34:ed:cb:71:9d:9c:87:70:2b:
         09:83:24:7d:78:f0:2b:3b:16:ca:19:f9:51:ea:53:1a:32:f7:
         d6:e1:97:a2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOie0DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwNTE2MDQyMVoXDTI0MDkyMTE2Mzc0
OVowMzExMC8GA1UEAxMoODc3MTE5MDhkOWI3NDc0YzYxNzg4YzVlM2I4OTUzZTgz
N2E1NzM4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVxOmi7Rpv0
G//yM/mDH5mLJTYmwWCWnpV6K8Qbsj/H4J8Hwfiw/nxZxHpuAvDi/9t1BPy5bCJ0
/FjOeCuliDgWeGJSKqo2GrermcSKXr6mUch3S1wJmqqOpwcDf6tkEDgnWnGmQmYD
ac5JSu+h/uC6D3T59bkzotRsbbD413CLkOwp7UXf2+4zSZ5Uc13OIQVvycBd5J25
GawefC8M/3Sy63w54/r6bpspH9XKTqeNfCax8FMiCWlt6EhKe5ATVDQvZfz4pb9N
nJ0xHorxMUV7xjnwcQ//IPUACrUeV0S+VghTK90qndd7qiubGpJZfDqWWKGrzBge
xP1WyHMBZh0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQOlCVYBesL4urekEIryOZE
L+C36DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80Zjk1OGI5OS0zOTQz
LTQ5YTktOWYxOC0yMzlmYmVhYjg5MWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGY5NThiOTktMzk0My00
OWE5LTlmMTgtMjM5ZmJlYWI4OTFkLzg3NzExOTA4ZDliNzQ3NGM2MTc4OGM1ZTNi
ODk1M2U4MzdhNTczOGYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2iVjANBAIAAjAHAwUAKAPFoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFc4wDQYJKoZIhvcNAQELBQADggEBAE3u
N/lhsbe66/KDZHR4lYX3xRkN7KD0iFJFZYaIalfQWgBJE+72LniiGSGbzvcane/h
8sQz7nGTyy8WrUuDOq7sZy2Z7w3Lpck1Add51P7+LzfTDqEGawEO3TAFNjuJieDo
kgHUHPaRN8ghA9BXflIQQMCsz13cyix6K0DaUl9bit8nKExJNOxsDpKGbtOD7FIs
3La4Ae5tPsuljavqOaxTHU0b039+gs/mUkIeFhQMtMEdueiM3eUorwhpox/w+Gz1
OZjWE4D0/ZXf+VxMmPq0FEsXnu4+MdrKnyBMdNJqJDTty3GdnIdwKwmDJH148Cs7
FsoZ+VHqUxoy99bhl6I=
-----END CERTIFICATE-----