Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9be1ea9bb90486e08daa38d4d03496f60d6efc17.cer
File:                     9be1ea9bb90486e08daa38d4d03496f60d6efc17.cer (raw, json)
Hash identifier:          1ircti2oB162ywxLz9Q59VJVRqythFSjbmDgs6WsM40=
Subject key identifier:   7D:3B:6D:FA:32:9B:2A:59:DD:EC:6C:9B:DE:05:B6:CB:BF:34:4C:F2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED9DAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/9be1ea9bb90486e08daa38d4d03496f60d6efc17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 13 Jun 2023 17:27:45 +0000
Certificate not after:    Sat 12 Apr 2025 20:26:57 +0000
Subordinate resources:    AS: 273022
                          IP: 2803:5390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15572394 (0xed9daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 13 17:27:45 2023 GMT
            Not After : Apr 12 20:26:57 2025 GMT
        Subject: CN=9be1ea9bb90486e08daa38d4d03496f60d6efc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:ef:8a:b5:c3:49:66:1c:54:54:29:2d:4f:
                    e0:f3:09:91:a1:04:fe:20:be:1e:70:b6:e3:48:83:
                    5e:7f:30:f4:69:a7:58:ca:aa:79:9a:32:fa:16:27:
                    e8:c6:5b:a5:18:d5:46:3e:f3:d0:a6:74:94:c0:21:
                    5d:a7:46:a6:c7:48:54:b3:ef:f8:f9:3d:35:ef:f0:
                    f7:70:04:1f:24:a8:2f:45:46:6e:04:a1:3c:ed:11:
                    c7:07:ec:13:39:18:a0:3c:ea:08:ec:6b:3e:3c:3c:
                    cb:93:d8:7a:35:d1:d8:fb:06:7c:cd:28:a0:80:8a:
                    d0:98:e4:03:42:1f:b0:6f:8f:cc:66:55:c1:cd:75:
                    99:66:e8:5c:9b:77:6c:76:9a:f9:12:32:cf:98:ac:
                    21:76:57:23:56:cc:49:cc:ca:e2:b2:71:d6:7f:32:
                    00:64:9b:77:09:dd:5d:a5:06:88:40:e5:58:ad:de:
                    1f:5b:48:c5:7a:b0:d3:db:c4:b1:a8:5d:af:e7:14:
                    62:05:76:62:fc:03:3b:3a:c4:c3:4f:0b:b6:e4:eb:
                    61:05:4f:d6:2b:e8:1a:5b:5d:e7:0a:d4:58:27:a9:
                    27:3e:c2:36:57:c0:ef:25:61:b8:e9:9d:ac:fb:39:
                    35:de:b6:13:05:b8:3e:7e:4b:e7:4f:ed:3f:50:a4:
                    2b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:6D:FA:32:9B:2A:59:DD:EC:6C:9B:DE:05:B6:CB:BF:34:4C:F2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/9be1ea9bb90486e08daa38d4d03496f60d6efc17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273022

    Signature Algorithm: sha256WithRSAEncryption
         ac:c8:28:f4:dc:eb:dd:a3:00:72:e9:ca:c5:df:26:3b:cb:dd:
         36:00:e0:59:61:b2:6b:a1:aa:f2:2d:d7:38:2e:83:46:a1:3a:
         0a:dd:98:da:26:89:d4:8c:4c:87:7b:4a:7c:e9:a5:b0:09:82:
         88:7e:de:b6:e6:b5:c8:38:40:08:ad:1c:51:4e:17:41:f3:e6:
         ff:65:df:9a:91:1d:6c:d7:70:3a:79:6f:20:e3:ea:13:6d:6f:
         ee:1e:15:af:91:15:0d:3d:09:74:35:43:ce:1b:23:de:fe:2e:
         c3:9c:ec:5f:60:7c:d6:33:29:3a:d4:2e:09:ee:12:47:c7:a8:
         8b:44:61:7b:11:f4:cf:5a:4e:54:31:5d:5f:52:5f:72:0b:17:
         59:cb:c2:42:e7:be:b2:33:8b:3d:29:e1:bb:a7:83:24:5e:ac:
         95:80:b3:33:4c:3e:e3:71:04:27:6c:e7:f2:87:b8:ef:a6:80:
         6f:b2:32:71:89:2a:aa:79:6e:59:c9:b1:22:cd:77:c8:6b:a2:
         4a:11:fc:6a:84:0e:b4:e8:3a:79:25:bc:04:5c:33:8e:a3:02:
         70:2b:78:cf:43:c4:d6:ad:a4:e4:67:b2:c3:0a:30:36:51:9b:
         97:19:9d:66:da:ba:d6:76:f9:26:71:ee:f4:f8:a8:1a:c6:cf:
         f7:9d:5b:7e
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAO2dqjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYxMzE3Mjc0NVoXDTI1MDQxMjIwMjY1
N1owMzExMC8GA1UEAxMoOWJlMWVhOWJiOTA0ODZlMDhkYWEzOGQ0ZDAzNDk2ZjYw
ZDZlZmMxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfM74q1w0lm
HFRUKS1P4PMJkaEE/iC+HnC240iDXn8w9GmnWMqqeZoy+hYn6MZbpRjVRj7z0KZ0
lMAhXadGpsdIVLPv+Pk9Ne/w93AEHySoL0VGbgShPO0RxwfsEzkYoDzqCOxrPjw8
y5PYejXR2PsGfM0ooICK0JjkA0IfsG+PzGZVwc11mWboXJt3bHaa+RIyz5isIXZX
I1bMSczK4rJx1n8yAGSbdwndXaUGiEDlWK3eH1tIxXqw09vEsahdr+cUYgV2YvwD
OzrEw08LtuTrYQVP1ivoGltd5wrUWCepJz7CNlfA7yVhuOmdrPs5Nd62EwW4Pn5L
50/tP1CkK2sCAwEAAaOCAvswggL3MB0GA1UdDgQWBBR9O236MpsqWd3sbJveBbbL
vzRM8jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kODQwOTBiMy01ZTQx
LTRjYTQtODg2My02MDY4YWM5NmU1YzkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDg0MDkwYjMtNWU0MS00
Y2E0LTg4NjMtNjA2OGFjOTZlNWM5LzliZTFlYTliYjkwNDg2ZTA4ZGFhMzhkNGQw
MzQ5NmY2MGQ2ZWZjMTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDU5AwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCp+MA0GCSqGSIb3DQEBCwUAA4IBAQCsyCj03OvdowBy6crF3yY7
y902AOBZYbJroaryLdc4LoNGoToK3ZjaJonUjEyHe0p86aWwCYKIft625rXIOEAI
rRxRThdB8+b/Zd+akR1s13A6eW8g4+oTbW/uHhWvkRUNPQl0NUPOGyPe/i7DnOxf
YHzWMyk61C4J7hJHx6iLRGF7EfTPWk5UMV1fUl9yCxdZy8JC576yM4s9KeG7p4Mk
XqyVgLMzTD7jcQQnbOfyh7jvpoBvsjJxiSqqeW5ZybEizXfIa6JKEfxqhA606Dp5
JbwEXDOOowJwK3jPQ8TWraTkZ7LDCjA2UZuXGZ1m2rrWdvkmce70+Kgaxs/3nVt+
-----END CERTIFICATE-----