Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
File:                     96da91711589e877379a24b4e7e81faaa3d64334.cer (raw, json)
Hash identifier:          CMPWQvTcnkQO/HO5hcwuvetEg2ctoKzW24pWrnelPoQ=
Subject key identifier:   CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C61663
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Apr 2022 14:24:25 +0000
Certificate not after:    Wed 31 Jan 2024 17:37:48 +0000
Subordinate resources:    AS: 269978
                          IP: 189.45.176.0/22
                          IP: 2803:ee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12981859 (0xc61663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 28 14:24:25 2022 GMT
            Not After : Jan 31 17:37:48 2024 GMT
        Subject: CN=96da91711589e877379a24b4e7e81faaa3d64334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:8f:e2:55:67:7c:16:4d:07:1f:40:c8:31:
                    c2:c5:ac:7f:99:93:f6:e0:de:5d:c2:96:ae:bc:2f:
                    55:1b:f2:d7:84:f9:e1:1a:75:7f:53:da:33:70:b8:
                    9f:61:cd:d6:67:51:b6:8b:76:69:89:0d:b6:dc:ba:
                    b0:ed:ad:12:ef:19:94:a0:24:f9:a4:df:79:11:5c:
                    8f:fd:e3:35:a0:82:cd:a7:43:b9:66:43:26:15:eb:
                    6c:47:ac:aa:23:07:1c:b2:24:40:e5:37:75:45:08:
                    0a:10:b6:c2:af:b2:55:39:d3:dc:87:e9:d5:7e:83:
                    83:76:06:4d:c1:19:0f:9b:94:1a:9a:b2:91:c2:70:
                    81:de:d0:24:34:81:5b:88:64:2d:90:b2:79:6f:10:
                    c7:b0:6d:f7:3d:3d:5e:d9:6f:f3:25:e7:bc:38:86:
                    fb:2b:ab:01:b0:e5:44:e2:19:96:13:49:cf:7c:f0:
                    25:db:dc:77:26:4a:0a:8d:f0:61:55:15:19:aa:ed:
                    f7:83:c0:87:e3:9c:be:da:18:1a:d8:ff:b6:8f:e0:
                    32:84:c4:94:c1:b7:e5:09:8d:ef:ee:6f:6e:ea:98:
                    ac:7d:a9:99:22:ff:9a:23:ab:7e:de:e7:8c:51:91:
                    18:72:68:d6:74:e2:27:2c:e9:6e:d4:62:1e:9f:94:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.176.0/22
                IPv6:
                  2803:ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269978

    Signature Algorithm: sha256WithRSAEncryption
         85:52:3c:db:5c:cb:4c:27:7f:90:43:ac:2f:60:b0:8d:42:63:
         0c:7c:5f:96:57:51:f6:d2:0c:8c:78:61:a0:86:06:d6:1d:d8:
         5d:15:b7:87:e8:2f:e6:3b:1f:2c:cd:4d:6e:43:91:56:bc:2c:
         5b:5c:e7:6f:b3:63:4c:b2:ba:52:40:7e:c4:ba:9b:c4:72:e1:
         57:79:ce:54:61:26:dc:83:a3:26:04:9a:7d:89:0e:dc:cc:49:
         a4:c2:f9:cc:cc:01:fa:0e:40:db:92:5f:73:9b:6a:05:48:a7:
         aa:97:73:4a:4d:8b:b7:fc:a8:f1:f2:68:70:24:dd:c6:ac:3c:
         53:b3:79:c8:69:33:f0:ea:bf:0b:06:5c:8a:9e:f3:5d:cb:20:
         b4:33:2b:8b:1f:03:c5:d9:00:11:b5:b8:77:48:a4:4c:50:cc:
         5d:6f:35:94:73:1a:d0:33:af:7e:65:c5:3a:af:2a:cb:9c:bd:
         16:cf:88:f3:0e:9c:44:b2:7a:84:a0:3e:42:a2:60:61:7b:58:
         ca:c1:b4:fa:95:8b:fa:1a:c2:e5:cd:85:15:79:b7:ce:25:f3:
         7d:1e:88:ec:55:f4:49:5d:23:83:4b:24:1d:20:90:d1:d2:f6:
         52:44:cd:da:58:50:f6:6f:c5:64:ab:02:3b:49:81:fd:d1:5c:
         c6:89:4a:4d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAMYWYzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDQyODE0MjQyNVoXDTI0MDEzMTE3Mzc0
OFowMzExMC8GA1UEAxMoOTZkYTkxNzExNTg5ZTg3NzM3OWEyNGI0ZTdlODFmYWFh
M2Q2NDMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJwjj+JVZ3wW
TQcfQMgxwsWsf5mT9uDeXcKWrrwvVRvy14T54Rp1f1PaM3C4n2HN1mdRtot2aYkN
tty6sO2tEu8ZlKAk+aTfeRFcj/3jNaCCzadDuWZDJhXrbEesqiMHHLIkQOU3dUUI
ChC2wq+yVTnT3Ifp1X6Dg3YGTcEZD5uUGpqykcJwgd7QJDSBW4hkLZCyeW8Qx7Bt
9z09Xtlv8yXnvDiG+yurAbDlROIZlhNJz3zwJdvcdyZKCo3wYVUVGart94PAh+Oc
vtoYGtj/to/gMoTElMG35QmN7+5vbuqYrH2pmSL/miOrft7njFGRGHJo1nTiJyzp
btRiHp+UuOcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTKENQkVmaA+uHMmswFZXbg
biTgRjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wOGM3MmViMS0zZjg5
LTRmOTEtOTExNi1iMGRiM2Q4NTRmNDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDhjNzJlYjEtM2Y4OS00
ZjkxLTkxMTYtYjBkYjNkODU0ZjQwLzk2ZGE5MTcxMTU4OWU4NzczNzlhMjRiNGU3
ZTgxZmFhYTNkNjQzMzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr0tsDANBAIAAjAHAwUAKAMO4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHpowDQYJKoZIhvcNAQELBQADggEBAIVS
PNtcy0wnf5BDrC9gsI1CYwx8X5ZXUfbSDIx4YaCGBtYd2F0Vt4foL+Y7HyzNTW5D
kVa8LFtc52+zY0yyulJAfsS6m8Ry4Vd5zlRhJtyDoyYEmn2JDtzMSaTC+czMAfoO
QNuSX3ObagVIp6qXc0pNi7f8qPHyaHAk3casPFOzechpM/DqvwsGXIqe813LILQz
K4sfA8XZABG1uHdIpExQzF1vNZRzGtAzr35lxTqvKsucvRbPiPMOnESyeoSgPkKi
YGF7WMrBtPqVi/oawuXNhRV5t84l830eiOxV9EldI4NLJB0gkNHS9lJEzdpYUPZv
xWSrAjtJgf3RXMaJSk0=
-----END CERTIFICATE-----