Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/920d0d37b776a4fc941afaa30c4b1c8c085a25e5.cer
File:                     920d0d37b776a4fc941afaa30c4b1c8c085a25e5.cer (raw, json)
Hash identifier:          puY6K00pF2xtAJrmbcmNHXl11NfHc1gywkHm3uaHl00=
Subject key identifier:   9A:2B:48:E8:9A:CF:0A:90:56:27:73:30:C4:74:92:3A:7D:91:E0:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DA482
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/396a0503-46e0-4c77-824c-0fa329c22fba/920d0d37b776a4fc941afaa30c4b1c8c085a25e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/396a0503-46e0-4c77-824c-0fa329c22fba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 20:29:56 +0000
Certificate not after:    Wed 28 May 2025 23:42:32 +0000
Subordinate resources:    AS: 28374
                          IP: 201.131.116.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17671298 (0x10da482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 11 20:29:56 2024 GMT
            Not After : May 28 23:42:32 2025 GMT
        Subject: CN=920d0d37b776a4fc941afaa30c4b1c8c085a25e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:22:ea:72:f1:5f:31:4d:74:35:d2:a1:ce:
                    07:4d:17:6d:2d:66:b9:a5:e5:d5:98:21:ce:03:11:
                    05:1c:f2:da:a1:a9:0a:3f:8b:88:e9:1c:18:ea:57:
                    20:47:bb:40:a2:f7:06:5b:90:02:b6:06:a2:70:94:
                    15:a7:cc:18:46:78:13:08:92:cc:11:2f:30:5a:da:
                    5d:77:63:7d:13:2e:82:25:33:9e:05:06:17:bb:92:
                    c8:4c:fc:29:22:0a:00:61:62:95:a9:ba:62:4b:bb:
                    a6:82:e5:11:06:db:13:db:45:c2:87:10:dd:d5:ec:
                    2a:7c:cc:04:ef:08:b2:04:da:44:c1:2f:e2:88:9b:
                    36:de:48:6b:8e:a6:a8:33:28:41:61:15:4c:9b:86:
                    d9:46:f1:47:1c:16:36:9a:4e:4a:de:55:43:35:88:
                    53:9d:4c:64:4c:a7:fb:52:4c:12:22:58:99:4d:29:
                    94:81:df:9e:10:25:38:e7:21:49:75:13:49:3e:b8:
                    b7:45:96:cf:47:42:a8:b2:87:04:42:ee:30:12:04:
                    6d:3d:19:43:f4:ae:17:b8:3d:8a:66:e4:40:b1:af:
                    fe:f0:76:85:da:c5:b0:3e:87:f7:fb:4e:8e:d3:51:
                    e5:9f:ab:52:00:a8:a8:dc:5d:06:16:5c:bd:3a:ed:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2B:48:E8:9A:CF:0A:90:56:27:73:30:C4:74:92:3A:7D:91:E0:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/396a0503-46e0-4c77-824c-0fa329c22fba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/396a0503-46e0-4c77-824c-0fa329c22fba/920d0d37b776a4fc941afaa30c4b1c8c085a25e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.116.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28374

    Signature Algorithm: sha256WithRSAEncryption
         26:36:db:b3:cd:6a:4c:f2:7d:d5:9b:7a:f8:d3:27:db:d9:f3:
         44:31:c1:21:09:9b:cb:ba:fb:11:6a:00:a9:00:f3:16:a9:8a:
         1e:f9:4d:f7:25:96:29:08:bd:eb:7b:de:23:24:1d:05:1f:55:
         0d:20:68:fc:6f:4a:6c:0e:bb:52:5e:ba:10:3f:99:99:cc:84:
         77:08:1a:0e:be:ef:4d:5c:bc:91:0e:1a:26:a4:f9:82:bb:07:
         8f:ff:fb:7e:66:40:52:3e:01:b9:5a:9b:94:99:1f:33:04:72:
         b3:55:de:63:a6:8a:e4:7e:98:54:89:c7:fe:fe:8f:20:aa:b2:
         2d:17:95:e5:26:18:7d:48:b4:38:56:95:bb:8c:91:8e:5f:04:
         60:57:be:19:85:b0:45:8a:e8:b9:99:c3:e4:21:f2:54:92:19:
         13:50:71:e0:7f:9d:61:aa:60:cd:ac:a1:62:46:ce:8e:06:74:
         a1:4b:41:fe:9a:38:d8:f0:fb:81:c2:e2:ab:de:fd:94:3f:b9:
         05:2e:a9:3b:1e:cd:b4:98:bf:0c:fa:fe:91:70:97:cc:10:c3:
         29:26:9f:97:e3:ac:49:1e:0e:3d:0c:a6:11:7e:79:55:cd:62:
         d6:5d:0c:98:b8:71:5b:53:87:08:ce:1c:d8:d3:56:40:72:53:
         06:5f:68:c0
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAQ2kgjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDMxMTIwMjk1NloXDTI1MDUyODIzNDIz
MlowMzExMC8GA1UEAxMoOTIwZDBkMzdiNzc2YTRmYzk0MWFmYWEzMGM0YjFjOGMw
ODVhMjVlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANICIupy8V8x
TXQ10qHOB00XbS1muaXl1ZghzgMRBRzy2qGpCj+LiOkcGOpXIEe7QKL3BluQArYG
onCUFafMGEZ4EwiSzBEvMFraXXdjfRMugiUzngUGF7uSyEz8KSIKAGFilam6Yku7
poLlEQbbE9tFwocQ3dXsKnzMBO8IsgTaRMEv4oibNt5Ia46mqDMoQWEVTJuG2Ubx
RxwWNppOSt5VQzWIU51MZEyn+1JMEiJYmU0plIHfnhAlOOchSXUTST64t0WWz0dC
qLKHBELuMBIEbT0ZQ/SuF7g9imbkQLGv/vB2hdrFsD6H9/tOjtNR5Z+rUgCoqNxd
BhZcvTrt6wUCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSaK0joms8KkFYnczDEdJI6
fZHg6DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zOTZhMDUwMy00NmUw
LTRjNzctODI0Yy0wZmEzMjljMjJmYmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzk2YTA1MDMtNDZlMC00
Yzc3LTgyNGMtMGZhMzI5YzIyZmJhLzkyMGQwZDM3Yjc3NmE0ZmM5NDFhZmFhMzBj
NGIxYzhjMDg1YTI1ZTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcmDdDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJu1jANBgkqhkiG9w0BAQsFAAOCAQEAJjbbs81qTPJ91Zt6+NMn29nz
RDHBIQmby7r7EWoAqQDzFqmKHvlN9yWWKQi963veIyQdBR9VDSBo/G9KbA67Ul66
ED+ZmcyEdwgaDr7vTVy8kQ4aJqT5grsHj//7fmZAUj4BuVqblJkfMwRys1XeY6aK
5H6YVInH/v6PIKqyLReV5SYYfUi0OFaVu4yRjl8EYFe+GYWwRYrouZnD5CHyVJIZ
E1Bx4H+dYapgzayhYkbOjgZ0oUtB/po42PD7gcLiq979lD+5BS6pOx7NtJi/DPr+
kXCXzBDDKSafl+OsSR4OPQymEX55Vc1i1l0MmLhxW1OHCM4c2NNWQHJTBl9owA==
-----END CERTIFICATE-----