Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a9f03249f3f1402e960482f2258f07f1e9902f2.cer
File:                     8a9f03249f3f1402e960482f2258f07f1e9902f2.cer (raw, json)
Hash identifier:          aKMnZiWBWTovaRP77SgWZ+MHyEVsGBlzMVeAzpZZ8z0=
Subject key identifier:   FA:3F:23:2A:36:9E:18:87:54:5A:DF:E8:6E:54:63:6D:80:D1:11:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD7D52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/edf9506c-0543-4370-a8bc-46168aba4973/8a9f03249f3f1402e960482f2258f07f1e9902f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/edf9506c-0543-4370-a8bc-46168aba4973/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 23:38:34 +0000
Certificate not after:    Mon 28 Jul 2025 18:36:02 +0000
Subordinate resources:    AS: 270203
                          IP: 200.23.51.0/24
                          IP: 2801:c4:94::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16612690 (0xfd7d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 19 23:38:34 2023 GMT
            Not After : Jul 28 18:36:02 2025 GMT
        Subject: CN=8a9f03249f3f1402e960482f2258f07f1e9902f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:cf:07:04:ac:31:1c:51:71:aa:b3:fa:a1:
                    c1:f7:88:41:ef:d9:0b:dc:69:62:3c:d4:53:93:8c:
                    d0:ae:2e:90:1a:46:d3:49:86:f1:f8:0b:e4:0e:6b:
                    f9:e8:da:53:9f:37:21:75:8b:4f:94:d8:a5:75:fa:
                    2b:c0:54:0c:e7:be:3b:fe:f7:f9:63:35:c4:55:f8:
                    f5:68:3b:65:51:eb:d4:ce:2f:26:d1:bc:5a:ea:90:
                    d0:89:39:b4:75:1c:c4:95:a0:b0:78:45:1d:51:c6:
                    8b:1c:1f:1d:b2:73:a0:ee:6e:7e:62:58:4a:f2:07:
                    b7:aa:db:09:84:8e:3e:63:c5:38:bf:17:37:05:e8:
                    8d:5b:d1:01:e4:83:41:ef:84:91:98:04:2e:14:4d:
                    39:be:93:1e:f9:50:9c:12:6d:bf:d7:5d:95:75:2a:
                    02:2c:08:69:8f:27:ca:14:20:1e:91:8b:06:e1:55:
                    eb:8b:4e:dc:a5:32:e4:c7:07:ad:0b:22:9d:50:0e:
                    30:c5:5e:8a:b6:c6:0c:19:87:e5:67:99:ae:40:64:
                    40:04:f5:7d:2e:b3:4d:dd:73:bf:56:27:29:05:fa:
                    0c:95:57:d9:19:28:59:17:f3:f7:b9:1f:27:65:b9:
                    d5:b5:c3:92:67:53:38:b2:9c:6d:e1:d6:f8:1e:ab:
                    ee:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:23:2A:36:9E:18:87:54:5A:DF:E8:6E:54:63:6D:80:D1:11:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/edf9506c-0543-4370-a8bc-46168aba4973/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/edf9506c-0543-4370-a8bc-46168aba4973/8a9f03249f3f1402e960482f2258f07f1e9902f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.51.0/24
                IPv6:
                  2801:c4:94::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270203

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:8e:e0:86:13:21:ec:04:d7:ad:c6:de:da:fc:42:48:f7:
         96:aa:e5:a2:81:e7:86:60:07:80:ae:cd:e3:80:4a:23:3e:30:
         f0:75:40:80:62:d7:8d:f3:c9:48:55:2f:6e:87:4e:3c:cd:bb:
         93:ce:a1:c7:20:89:36:f5:60:1f:f7:a1:fb:60:4b:6e:3b:1a:
         bc:35:b1:4a:d3:37:a2:1f:ff:5f:c6:e8:db:b0:47:11:0b:d5:
         77:86:f5:4d:b6:34:f1:4c:48:d4:d8:48:1f:47:b0:5c:28:17:
         54:c2:5d:71:c1:c2:42:93:64:d8:c4:81:61:4a:45:bb:97:f6:
         2e:25:57:eb:d2:d0:1a:7f:74:0c:46:9e:a8:8e:bf:cb:ee:65:
         d2:f9:97:c2:8f:ae:13:2c:a1:fd:c1:29:bf:40:0a:1f:82:57:
         f4:0f:74:be:1d:90:cb:d0:7d:84:2a:1a:b1:8d:46:2f:bf:f0:
         2d:f1:16:f9:b7:8f:94:c6:e9:94:13:b9:1d:4c:c9:a0:55:ff:
         4a:5b:f5:0e:04:41:3d:0e:49:be:49:7d:15:70:41:0a:85:29:
         cb:0f:df:a7:6b:e9:5f:9f:9e:db:15:2f:de:41:fa:34:c8:99:
         11:2a:a4:91:8e:0c:fd:23:21:94:ee:65:f5:07:33:9d:6c:c8:
         f0:e4:d7:f4
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAP19UjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAxOTIzMzgzNFoXDTI1MDcyODE4MzYw
MlowMzExMC8GA1UEAxMoOGE5ZjAzMjQ5ZjNmMTQwMmU5NjA0ODJmMjI1OGYwN2Yx
ZTk5MDJmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJRuzwcErDEc
UXGqs/qhwfeIQe/ZC9xpYjzUU5OM0K4ukBpG00mG8fgL5A5r+ejaU583IXWLT5TY
pXX6K8BUDOe+O/73+WM1xFX49Wg7ZVHr1M4vJtG8WuqQ0Ik5tHUcxJWgsHhFHVHG
ixwfHbJzoO5ufmJYSvIHt6rbCYSOPmPFOL8XNwXojVvRAeSDQe+EkZgELhRNOb6T
HvlQnBJtv9ddlXUqAiwIaY8nyhQgHpGLBuFV64tO3KUy5McHrQsinVAOMMVeirbG
DBmH5WeZrkBkQAT1fS6zTd1zv1YnKQX6DJVX2RkoWRfz97kfJ2W51bXDkmdTOLKc
beHW+B6r7icCAwEAAaOCAwswggMHMB0GA1UdDgQWBBT6PyMqNp4Yh1Ra3+huVGNt
gNER1DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZGY5NTA2Yy0wNTQz
LTQzNzAtYThiYy00NjE2OGFiYTQ5NzMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWRmOTUwNmMtMDU0My00
MzcwLWE4YmMtNDYxNjhhYmE0OTczLzhhOWYwMzI0OWYzZjE0MDJlOTYwNDgyZjIy
NThmMDdmMWU5OTAyZjIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgXMzAPBAIAAjAJAwcAKAEAxACU
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfezANBgkqhkiG9w0BAQsFAAOCAQEA
l62O4IYTIewE163G3tr8Qkj3lqrlooHnhmAHgK7N44BKIz4w8HVAgGLXjfPJSFUv
bodOPM27k86hxyCJNvVgH/eh+2BLbjsavDWxStM3oh//X8bo27BHEQvVd4b1TbY0
8UxI1NhIH0ewXCgXVMJdccHCQpNk2MSBYUpFu5f2LiVX69LQGn90DEaeqI6/y+5l
0vmXwo+uEyyh/cEpv0AKH4JX9A90vh2Qy9B9hCoasY1GL7/wLfEW+bePlMbplBO5
HUzJoFX/Slv1DgRBPQ5Jvkl9FXBBCoUpyw/fp2vpX5+e2xUv3kH6NMiZESqkkY4M
/SMhlO5l9QcznWzI8OTX9A==
-----END CERTIFICATE-----