Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88090651a57205ced971272490d218922a3b3701.cer
File:                     88090651a57205ced971272490d218922a3b3701.cer (raw, json)
Hash identifier:          JVsvtKldS/9ERkVNnoRYqGPUrBHm0IrhHSbkL+EzhZU=
Subject key identifier:   5F:D1:85:EF:09:B7:44:9D:F3:C2:B1:14:19:F2:45:51:AA:66:83:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A9AC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/88090651a57205ced971272490d218922a3b3701.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Apr 2023 16:39:05 +0000
Certificate not after:    Mon 27 Oct 2025 14:15:49 +0000
Subordinate resources:    AS: 272928
                          IP: 190.110.229.0/24
                          IP: 2803:4190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17472195 (0x10a9ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 16:39:05 2023 GMT
            Not After : Oct 27 14:15:49 2025 GMT
        Subject: CN=88090651a57205ced971272490d218922a3b3701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:5b:18:82:6e:93:6f:fe:02:ab:99:de:39:
                    ce:bf:65:ab:38:76:d7:5d:41:fe:47:67:3c:63:70:
                    38:65:5a:3e:42:23:2e:c8:fc:c5:bc:a5:5a:6d:59:
                    23:a4:ab:8b:18:d7:5a:26:96:da:42:13:28:7c:7d:
                    19:0d:e3:24:7c:8d:6a:bb:42:58:43:b5:26:c6:74:
                    ff:e3:e6:48:39:d2:e0:85:c7:5d:7e:ee:02:67:b3:
                    2d:0e:ec:17:70:e1:fc:0e:65:a7:71:cf:74:06:1a:
                    5b:c9:5c:70:5c:15:17:53:9f:7c:0b:12:26:05:44:
                    f1:62:66:92:77:cf:ca:d0:10:3b:6b:61:5c:a1:05:
                    06:34:b1:29:98:88:f9:22:44:c9:a6:e9:5b:06:05:
                    88:9c:7b:92:08:69:d3:c7:bb:6b:81:3a:d6:ee:ca:
                    82:45:d4:a9:e9:4c:dd:05:c4:df:72:12:ec:bb:4b:
                    d8:b3:a1:fc:65:0c:f8:2a:74:5d:c3:4d:04:1c:74:
                    5d:03:c6:a8:64:3d:64:e9:54:26:a4:20:4e:57:7c:
                    25:61:8a:e5:dd:78:86:7d:e5:d6:be:7c:0c:f4:a3:
                    42:bb:07:4f:ae:a9:30:40:00:c7:61:78:f7:30:b6:
                    98:33:f7:75:3c:f0:2f:21:5a:b1:85:00:96:c8:55:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D1:85:EF:09:B7:44:9D:F3:C2:B1:14:19:F2:45:51:AA:66:83:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/88090651a57205ced971272490d218922a3b3701.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.229.0/24
                IPv6:
                  2803:4190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272928

    Signature Algorithm: sha256WithRSAEncryption
         6c:8b:2f:1f:44:47:33:35:cb:06:fb:a2:30:53:69:78:8d:b9:
         83:4f:b3:13:a1:50:ef:bf:40:d0:96:b1:cb:97:7a:73:69:58:
         ad:bf:f2:1a:b2:a2:8a:3a:3a:58:e1:dc:48:36:37:9b:af:71:
         fd:a4:a3:43:7e:b6:c7:bf:52:db:ca:37:5e:a3:58:65:07:cd:
         83:f9:dc:d6:1a:a3:8d:24:cd:e8:b5:ad:49:63:c9:14:c9:98:
         39:d9:cc:6a:f2:e3:b9:4c:89:78:84:a9:92:c7:a6:45:f6:40:
         27:49:cd:87:04:ed:24:e3:5c:60:d3:21:02:e9:35:4c:90:32:
         15:57:3f:c5:e5:a5:90:8c:50:01:d9:59:9a:73:05:f8:2f:2f:
         26:04:91:0a:ca:d1:1c:c1:dd:25:37:15:06:6d:35:3e:55:c7:
         17:ba:4d:c5:54:74:13:a6:34:d9:9d:6e:55:12:aa:40:bc:90:
         a2:97:23:0f:b8:9a:83:b5:58:26:a3:48:e1:5f:06:48:89:9f:
         a1:e1:2c:c3:fd:8c:c9:a7:1f:56:ea:66:37:f3:b1:13:10:2b:
         dd:9e:2c:db:76:4c:a6:29:8d:5d:f7:fb:33:ef:be:dc:0d:34:
         a0:35:0d:b1:5d:a9:bd:0e:00:6f:51:a0:7e:db:25:e5:a1:1e:
         4e:9e:8f:ea
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQqawzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxOTE2MzkwNVoXDTI1MTAyNzE0MTU0
OVowMzExMC8GA1UEAxMoODgwOTA2NTFhNTcyMDVjZWQ5NzEyNzI0OTBkMjE4OTIy
YTNiMzcwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI34WxiCbpNv
/gKrmd45zr9lqzh2111B/kdnPGNwOGVaPkIjLsj8xbylWm1ZI6SrixjXWiaW2kIT
KHx9GQ3jJHyNartCWEO1JsZ0/+PmSDnS4IXHXX7uAmezLQ7sF3Dh/A5lp3HPdAYa
W8lccFwVF1OffAsSJgVE8WJmknfPytAQO2thXKEFBjSxKZiI+SJEyabpWwYFiJx7
kghp08e7a4E61u7KgkXUqelM3QXE33IS7LtL2LOh/GUM+Cp0XcNNBBx0XQPGqGQ9
ZOlUJqQgTld8JWGK5d14hn3l1r58DPSjQrsHT66pMEAAx2F49zC2mDP3dTzwLyFa
sYUAlshVXckCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRf0YXvCbdEnfPCsRQZ8kVR
qmaDWjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMWM3ZjY4Yy1hZmEy
LTQ5NDMtYTZlNi1hODViOGIzMTY4OWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTFjN2Y2OGMtYWZhMi00
OTQzLWE2ZTYtYTg1YjhiMzE2ODlkLzg4MDkwNjUxYTU3MjA1Y2VkOTcxMjcyNDkw
ZDIxODkyMmEzYjM3MDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAL5u5TANBAIAAjAHAwUAKANBkDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKiAwDQYJKoZIhvcNAQELBQADggEBAGyL
Lx9ERzM1ywb7ojBTaXiNuYNPsxOhUO+/QNCWscuXenNpWK2/8hqyooo6Oljh3Eg2
N5uvcf2ko0N+tse/UtvKN16jWGUHzYP53NYao40kzei1rUljyRTJmDnZzGry47lM
iXiEqZLHpkX2QCdJzYcE7STjXGDTIQLpNUyQMhVXP8XlpZCMUAHZWZpzBfgvLyYE
kQrK0RzB3SU3FQZtNT5Vxxe6TcVUdBOmNNmdblUSqkC8kKKXIw+4moO1WCajSOFf
BkiJn6HhLMP9jMmnH1bqZjfzsRMQK92eLNt2TKYpjV33+zPvvtwNNKA1DbFdqb0O
AG9RoH7bJeWhHk6ej+o=
-----END CERTIFICATE-----