Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94cd28c4c320f7466ec490dce432bfa9d3f82ad0.cer
File:                     94cd28c4c320f7466ec490dce432bfa9d3f82ad0.cer (raw, json)
Hash identifier:          Er6c5extv5D17nhU2JXS9EaO3pEPJ3/1TpmOlYYY1rs=
Subject key identifier:   10:BF:AB:47:09:ED:74:EE:69:76:BB:D7:1B:55:41:F5:47:2B:4F:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F09A9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e7eaa629-57ad-45eb-9a08-ddfab1959d55/94cd28c4c320f7466ec490dce432bfa9d3f82ad0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e7eaa629-57ad-45eb-9a08-ddfab1959d55/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 11:04:44 +0000
Certificate not after:    Sun 27 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 266807
                          IP: 45.238.192.0/22
                          IP: 2803:aca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15768222 (0xf09a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  4 11:04:44 2023 GMT
            Not After : Apr 27 06:00:00 2025 GMT
        Subject: CN=94cd28c4c320f7466ec490dce432bfa9d3f82ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:aa:bb:25:80:de:37:dd:45:8a:35:1d:8b:
                    53:e3:25:75:54:f6:47:0b:64:e1:62:aa:db:c6:d0:
                    ec:5d:37:5d:93:90:a7:b7:93:60:ff:79:80:1d:42:
                    44:f0:07:6c:b9:8b:a0:6c:2b:fe:16:cd:a9:6f:08:
                    bb:9f:3f:70:d3:b6:b1:82:e6:77:f9:fa:cd:e9:95:
                    cd:95:c9:31:3e:d5:e9:ad:8c:08:3b:f0:77:4b:e6:
                    06:a1:0d:19:26:5f:38:3f:15:5a:51:97:ae:38:ed:
                    8a:ea:24:9e:ec:d3:5e:ad:43:43:13:8a:75:d5:da:
                    8d:43:c1:a3:ea:46:91:bc:ea:5e:58:1b:98:b3:0c:
                    44:5d:47:f8:32:e6:4e:2a:f6:ca:27:ca:42:60:ac:
                    5a:33:73:fc:09:a9:b9:1d:22:8f:51:94:70:fd:09:
                    61:c4:a3:4c:34:c2:82:7c:7d:e2:59:62:05:4d:3e:
                    33:5f:20:53:2a:c9:1a:d7:61:46:63:cc:72:46:7f:
                    2b:e4:2f:ba:78:90:82:54:fd:4a:6d:cb:f1:f1:63:
                    50:68:16:8c:1f:6c:fe:5c:2d:49:44:dc:f4:36:40:
                    81:45:10:17:93:06:5e:d1:9d:ff:e7:f3:8b:11:1a:
                    f7:89:f4:03:ba:27:d9:f9:f2:79:3b:1f:e9:33:70:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BF:AB:47:09:ED:74:EE:69:76:BB:D7:1B:55:41:F5:47:2B:4F:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e7eaa629-57ad-45eb-9a08-ddfab1959d55/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e7eaa629-57ad-45eb-9a08-ddfab1959d55/94cd28c4c320f7466ec490dce432bfa9d3f82ad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.192.0/22
                IPv6:
                  2803:aca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266807

    Signature Algorithm: sha256WithRSAEncryption
         c1:e6:b9:ca:76:b2:ef:66:9c:4b:2b:29:ff:4d:33:ec:4b:91:
         b4:dd:c4:8d:e8:af:7a:dd:a1:03:55:62:4e:01:e9:45:a4:f9:
         b3:d4:05:4b:01:6d:16:30:04:69:37:42:62:f7:d4:ad:df:ed:
         43:2a:cf:e9:23:c6:36:61:0a:d9:77:ff:53:2d:eb:be:40:2e:
         1d:31:ff:8c:2d:8d:0d:f2:ca:90:68:f4:84:9b:59:51:94:f4:
         97:dc:6f:6c:77:3c:37:83:fa:dc:5f:ae:d6:6b:d9:19:25:3d:
         8d:57:55:49:2c:2d:6a:d3:ea:2d:ec:4a:db:8d:20:8c:44:02:
         21:e7:15:f4:b9:02:c7:ad:11:ab:ed:a7:88:f1:3f:e2:20:ba:
         19:1e:c2:0b:49:9b:64:47:dd:78:e0:02:8f:bd:01:be:ee:51:
         ed:8e:1c:4f:93:98:a4:c0:50:db:17:2f:56:06:c4:5b:a5:74:
         c8:08:0d:eb:8c:9c:b4:94:fd:dc:61:b3:29:b3:5e:fe:50:eb:
         4d:ef:e0:a8:15:80:52:c9:73:d6:aa:7f:e6:23:50:ca:fc:ab:
         2e:d9:82:9d:6d:d6:4c:96:90:88:af:9d:98:cf:10:21:d3:c2:
         b0:ab:a2:7f:52:9f:4f:e8:03:ed:60:2d:26:38:af:64:28:7f:
         39:7c:eb:b5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPCanjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcwNDExMDQ0NFoXDTI1MDQyNzA2MDAw
MFowMzExMC8GA1UEAxMoOTRjZDI4YzRjMzIwZjc0NjZlYzQ5MGRjZTQzMmJmYTlk
M2Y4MmFkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIjTqrslgN43
3UWKNR2LU+MldVT2Rwtk4WKq28bQ7F03XZOQp7eTYP95gB1CRPAHbLmLoGwr/hbN
qW8Iu58/cNO2sYLmd/n6zemVzZXJMT7V6a2MCDvwd0vmBqENGSZfOD8VWlGXrjjt
iuoknuzTXq1DQxOKddXajUPBo+pGkbzqXlgbmLMMRF1H+DLmTir2yifKQmCsWjNz
/AmpuR0ij1GUcP0JYcSjTDTCgnx94lliBU0+M18gUyrJGtdhRmPMckZ/K+QvuniQ
glT9Sm3L8fFjUGgWjB9s/lwtSUTc9DZAgUUQF5MGXtGd/+fzixEa94n0A7on2fny
eTsf6TNwPnsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQQv6tHCe107ml2u9cbVUH1
RytPmTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lN2VhYTYyOS01N2Fk
LTQ1ZWItOWEwOC1kZGZhYjE5NTlkNTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTdlYWE2MjktNTdhZC00
NWViLTlhMDgtZGRmYWIxOTU5ZDU1Lzk0Y2QyOGM0YzMyMGY3NDY2ZWM0OTBkY2U0
MzJiZmE5ZDNmODJhZDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3uwDANBAIAAjAHAwUAKAOsoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEjcwDQYJKoZIhvcNAQELBQADggEBAMHm
ucp2su9mnEsrKf9NM+xLkbTdxI3or3rdoQNVYk4B6UWk+bPUBUsBbRYwBGk3QmL3
1K3f7UMqz+kjxjZhCtl3/1Mt675ALh0x/4wtjQ3yypBo9ISbWVGU9Jfcb2x3PDeD
+txfrtZr2RklPY1XVUksLWrT6i3sStuNIIxEAiHnFfS5AsetEavtp4jxP+Iguhke
wgtJm2RH3XjgAo+9Ab7uUe2OHE+TmKTAUNsXL1YGxFuldMgIDeuMnLSU/dxhsymz
Xv5Q603v4KgVgFLJc9aqf+YjUMr8qy7Zgp1t1kyWkIivnZjPECHTwrCron9Sn0/o
A+1gLSY4r2Qofzl867U=
-----END CERTIFICATE-----