Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c59018db3de1bf8b47991732c4f8488b69cd20a.cer
File:                     9c59018db3de1bf8b47991732c4f8488b69cd20a.cer (raw, json)
Hash identifier:          QQZUQ901m8g0CAROEEXiiTOlo2X8A4zSsrKttvzbMhQ=
Subject key identifier:   9B:81:DC:99:BD:70:B6:5F:FE:C1:C9:D5:2F:FB:F4:0B:28:C3:77:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107CE73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc55cde5-1379-4b0b-a044-68cb52eb7650/9c59018db3de1bf8b47991732c4f8488b69cd20a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc55cde5-1379-4b0b-a044-68cb52eb7650/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 22:31:59 +0000
Certificate not after:    Wed 25 Dec 2024 16:20:30 +0000
Subordinate resources:    AS: 28039
                          IP: 200.0.187.0/24
                          IP: 2801:0:100::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17288819 (0x107ce73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 22 22:31:59 2024 GMT
            Not After : Dec 25 16:20:30 2024 GMT
        Subject: CN=9c59018db3de1bf8b47991732c4f8488b69cd20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:03:87:f4:96:a0:d2:3d:a0:15:31:3c:13:
                    56:04:08:fd:90:cc:83:3c:93:8c:05:a2:24:46:1d:
                    7b:7b:97:7f:3f:44:77:c2:51:41:b7:18:02:ec:bc:
                    40:22:49:1c:99:e7:4d:08:e0:46:ad:a4:41:28:75:
                    42:75:a2:e2:92:19:5f:c6:f5:da:35:b5:3d:c6:41:
                    06:5d:89:1b:16:d7:d7:8d:31:11:2c:77:55:de:7f:
                    a9:a9:50:bf:3d:96:64:bb:e2:25:51:cc:59:d5:db:
                    6f:47:55:1d:ca:47:35:fa:40:6b:9f:73:1c:d9:d7:
                    40:77:2f:f3:02:d7:27:f4:10:52:b8:e9:81:d0:3a:
                    e4:0c:c0:d4:a7:c0:9e:7c:1e:c8:0b:52:f0:a4:95:
                    0c:c8:f9:97:16:63:35:e6:12:c4:3d:07:bc:e4:6c:
                    fd:7c:28:c5:1c:bb:40:d3:a3:81:fe:c4:13:ad:71:
                    14:20:9b:e6:7e:07:f0:c5:a1:65:48:63:05:a1:72:
                    42:74:c3:c9:02:40:fb:1a:59:1b:d9:56:6b:3c:06:
                    56:9c:ba:43:0a:b6:5d:7a:07:b7:80:e9:7c:80:a7:
                    83:e2:8c:cb:32:29:4f:ae:74:ec:d5:88:d9:80:5d:
                    f5:de:20:5c:5c:be:10:0f:21:41:3d:72:3e:65:0b:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:81:DC:99:BD:70:B6:5F:FE:C1:C9:D5:2F:FB:F4:0B:28:C3:77:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc55cde5-1379-4b0b-a044-68cb52eb7650/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc55cde5-1379-4b0b-a044-68cb52eb7650/9c59018db3de1bf8b47991732c4f8488b69cd20a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.187.0/24
                IPv6:
                  2801:0:100::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28039

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:0b:46:87:0c:a8:b6:dd:58:d1:65:98:28:09:d7:d1:3f:
         c9:85:6e:a7:da:a2:61:f3:c2:61:97:8d:31:39:4d:b1:f1:cb:
         f0:c7:fb:04:d0:8d:84:df:91:d2:e5:3b:7a:5f:95:ae:9c:cd:
         1c:b9:65:d7:66:8c:d5:ab:17:3b:4a:d1:98:8d:ad:a3:c4:27:
         d1:11:b0:1d:6b:16:7c:a5:bf:9b:8f:10:39:19:74:fb:2c:88:
         8a:60:3b:0f:94:2f:dd:a3:3e:89:9b:7a:3a:ac:71:d8:26:d5:
         f7:7a:80:2b:4e:d6:17:96:67:44:62:e6:a0:b7:84:e0:7c:ad:
         3d:4c:72:df:ab:0b:1f:08:a3:a0:ca:58:95:56:1e:23:b7:1a:
         e9:5e:b0:6b:df:70:c7:9e:d1:15:4c:63:47:03:4b:77:09:fe:
         5f:cd:97:38:60:f0:cb:2e:96:45:bc:57:d4:c4:a9:18:d2:e9:
         a3:dc:d3:96:7e:42:2d:45:d2:bb:ab:39:47:3e:ca:75:95:1e:
         c5:bc:28:2f:d3:41:0f:b8:94:2f:1a:45:cc:39:8b:b6:3f:5b:
         93:70:7f:31:ed:47:9b:92:28:4f:bb:a7:b2:de:7e:64:e1:b1:
         40:a5:10:f8:b5:ee:6c:18:ef:17:9b:76:21:90:5a:af:b3:62:
         1a:85:ab:bc
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgIEAQfOczANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEyMjIyMzE1OVoXDTI0MTIyNTE2MjAz
MFowMzExMC8GA1UEAxMoOWM1OTAxOGRiM2RlMWJmOGI0Nzk5MTczMmM0Zjg0ODhi
NjljZDIwYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ0xA4f0lqDS
PaAVMTwTVgQI/ZDMgzyTjAWiJEYde3uXfz9Ed8JRQbcYAuy8QCJJHJnnTQjgRq2k
QSh1QnWi4pIZX8b12jW1PcZBBl2JGxbX140xESx3Vd5/qalQvz2WZLviJVHMWdXb
b0dVHcpHNfpAa59zHNnXQHcv8wLXJ/QQUrjpgdA65AzA1KfAnnweyAtS8KSVDMj5
lxZjNeYSxD0HvORs/XwoxRy7QNOjgf7EE61xFCCb5n4H8MWhZUhjBaFyQnTDyQJA
+xpZG9lWazwGVpy6Qwq2XXoHt4DpfICng+KMyzIpT6507NWI2YBd9d4gXFy+EA8h
QT1yPmULQdkCAwEAAaOCAwowggMGMB0GA1UdDgQWBBSbgdyZvXC2X/7BydUv+/QL
KMN3wjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iYzU1Y2RlNS0xMzc5
LTRiMGItYTA0NC02OGNiNTJlYjc2NTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmM1NWNkZTUtMTM3OS00
YjBiLWEwNDQtNjhjYjUyZWI3NjUwLzljNTkwMThkYjNkZTFiZjhiNDc5OTE3MzJj
NGY4NDg4YjY5Y2QyMGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgAuzAPBAIAAjAJAwcAKAEAAAEA
MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm2HMA0GCSqGSIb3DQEBCwUAA4IBAQBP
OwtGhwyott1Y0WWYKAnX0T/JhW6n2qJh88Jhl40xOU2x8cvwx/sE0I2E35HS5Tt6
X5WunM0cuWXXZozVqxc7StGYja2jxCfREbAdaxZ8pb+bjxA5GXT7LIiKYDsPlC/d
oz6Jm3o6rHHYJtX3eoArTtYXlmdEYuagt4TgfK09THLfqwsfCKOgyliVVh4jtxrp
XrBr33DHntEVTGNHA0t3Cf5fzZc4YPDLLpZFvFfUxKkY0umj3NOWfkItRdK7qzlH
Psp1lR7FvCgv00EPuJQvGkXMOYu2P1uTcH8x7UebkihPu6ey3n5k4bFApRD4te5s
GO8Xm3YhkFqvs2Iahau8
-----END CERTIFICATE-----