Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90a6da3fa2ec3d2dd48a7406e3bd1fe52887fb82.cer
File:                     90a6da3fa2ec3d2dd48a7406e3bd1fe52887fb82.cer (raw, json)
Hash identifier:          JLCVSlNNCgts4pi3/P/ArBZaRWhQPwnKYBwIwMmcB7A=
Subject key identifier:   DD:11:0A:62:59:44:0B:4D:80:0C:99:CA:21:9E:4C:02:BE:90:81:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5342E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d2485b9-3732-41de-bf3b-086b9d874c19/90a6da3fa2ec3d2dd48a7406e3bd1fe52887fb82.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d2485b9-3732-41de-bf3b-086b9d874c19/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 16:21:03 +0000
Certificate not after:    Sat 04 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 27963
                          IP: 200.2.28.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15021102 (0xe5342e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 16:21:03 2023 GMT
            Not After : Jan  4 05:00:00 2025 GMT
        Subject: CN=90a6da3fa2ec3d2dd48a7406e3bd1fe52887fb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:9a:a8:0d:66:45:eb:bd:7e:38:9c:5e:10:
                    0d:b2:08:52:f4:4f:65:fd:11:c4:8f:44:67:ff:89:
                    30:3c:cc:b0:5c:f3:ab:cd:95:86:3b:ad:d6:78:57:
                    9d:02:07:c0:6a:6c:50:77:95:b9:ab:21:f6:4a:2e:
                    40:a7:98:72:21:0a:25:99:c8:d9:15:fd:0c:7b:9d:
                    1c:12:b0:6e:b5:65:e9:1f:e8:b2:c3:db:d4:cc:e4:
                    75:21:8b:45:23:ac:9e:27:e9:3f:09:27:b2:3f:f0:
                    66:a9:a9:c6:07:ca:f9:bf:fe:13:8f:c3:70:c8:a7:
                    93:5e:44:61:c5:53:2f:be:51:b1:ab:00:d9:f7:10:
                    bf:c8:b6:57:17:30:b9:42:2e:3f:ed:98:38:0e:6b:
                    70:af:02:e4:dc:4f:dc:36:49:e3:98:37:53:42:2b:
                    49:10:d7:f7:ba:2e:af:02:27:56:aa:4d:3e:09:b2:
                    38:38:da:9f:8f:f9:13:ba:a3:84:46:52:09:44:b1:
                    bd:69:87:2b:bb:38:52:7d:2b:f1:6f:dc:c2:ca:cb:
                    e5:d0:64:b9:03:e1:71:4b:e7:ad:c5:91:5c:94:50:
                    48:62:84:7f:b8:96:a9:5b:b6:df:97:76:e1:9b:83:
                    5d:4f:84:88:14:59:65:86:16:a9:e6:6c:2e:6d:6b:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:11:0A:62:59:44:0B:4D:80:0C:99:CA:21:9E:4C:02:BE:90:81:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d2485b9-3732-41de-bf3b-086b9d874c19/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d2485b9-3732-41de-bf3b-086b9d874c19/90a6da3fa2ec3d2dd48a7406e3bd1fe52887fb82.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.28.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27963

    Signature Algorithm: sha256WithRSAEncryption
         b5:97:ad:ab:eb:af:d9:be:9d:37:9d:e3:58:5e:ef:a7:02:43:
         15:34:f0:34:40:39:5d:e1:49:1a:ed:b0:19:13:9b:ea:f9:a9:
         76:7c:3f:2f:98:8b:05:b9:51:5c:4a:9f:e7:76:9b:a0:e8:7f:
         65:70:75:86:32:5b:e8:55:66:10:74:e7:42:f4:cc:0a:a5:c3:
         7d:6c:3f:ad:b3:f6:39:e4:9a:95:04:f4:b6:65:11:14:66:03:
         54:09:87:83:af:5b:ee:1b:1e:50:fe:40:5f:59:16:22:97:11:
         6c:a6:a0:4a:a4:36:68:45:d9:9d:a0:87:d8:54:f8:72:2e:b3:
         76:11:ef:19:1f:6b:fe:9f:b9:7c:a1:0b:4d:f5:84:3d:43:98:
         2c:cd:ac:40:41:23:3d:0d:3a:47:67:75:ec:2a:d3:34:43:45:
         83:fc:f6:17:69:5b:91:92:f9:e6:ca:0c:9d:fa:a7:0f:b5:32:
         73:58:b8:f9:a0:16:fd:7b:3e:6f:41:a5:88:4b:0d:a3:a5:2c:
         a6:8d:bb:98:af:82:1c:4b:db:85:69:12:40:71:71:35:2e:92:
         61:7b:64:6a:2e:04:c2:49:a7:e5:ee:7f:b3:3d:ee:d9:0b:e9:
         b8:45:5a:69:a8:75:e4:e6:71:dd:2f:86:6c:74:d5:57:71:44:
         4a:50:08:08
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAOU0LjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMjE2MjEwM1oXDTI1MDEwNDA1MDAw
MFowMzExMC8GA1UEAxMoOTBhNmRhM2ZhMmVjM2QyZGQ0OGE3NDA2ZTNiZDFmZTUy
ODg3ZmI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI0emqgNZkXr
vX44nF4QDbIIUvRPZf0RxI9EZ/+JMDzMsFzzq82Vhjut1nhXnQIHwGpsUHeVuash
9kouQKeYciEKJZnI2RX9DHudHBKwbrVl6R/ossPb1MzkdSGLRSOsnifpPwknsj/w
ZqmpxgfK+b/+E4/DcMink15EYcVTL75RsasA2fcQv8i2VxcwuUIuP+2YOA5rcK8C
5NxP3DZJ45g3U0IrSRDX97ourwInVqpNPgmyODjan4/5E7qjhEZSCUSxvWmHK7s4
Un0r8W/cwsrL5dBkuQPhcUvnrcWRXJRQSGKEf7iWqVu235d24ZuDXU+EiBRZZYYW
qeZsLm1rD5UCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTdEQpiWUQLTYAMmcohnkwC
vpCBezAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZDI0ODViOS0zNzMy
LTQxZGUtYmYzYi0wODZiOWQ4NzRjMTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2QyNDg1YjktMzczMi00
MWRlLWJmM2ItMDg2YjlkODc0YzE5LzkwYTZkYTNmYTJlYzNkMmRkNDhhNzQwNmUz
YmQxZmU1Mjg4N2ZiODIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgCHDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJtOzANBgkqhkiG9w0BAQsFAAOCAQEAtZetq+uv2b6dN53jWF7vpwJD
FTTwNEA5XeFJGu2wGROb6vmpdnw/L5iLBblRXEqf53aboOh/ZXB1hjJb6FVmEHTn
QvTMCqXDfWw/rbP2OeSalQT0tmURFGYDVAmHg69b7hseUP5AX1kWIpcRbKagSqQ2
aEXZnaCH2FT4ci6zdhHvGR9r/p+5fKELTfWEPUOYLM2sQEEjPQ06R2d17CrTNENF
g/z2F2lbkZL55soMnfqnD7Uyc1i4+aAW/Xs+b0GliEsNo6Uspo27mK+CHEvbhWkS
QHFxNS6SYXtkai4Ewkmn5e5/sz3u2QvpuEVaaah15OZx3S+GbHTVV3FESlAICA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org