Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a02a3081b7b759b372455eb4682ba4044091d583.cer
File:                     a02a3081b7b759b372455eb4682ba4044091d583.cer (raw, json)
Hash identifier:          rzqQy7A8ngSYEqw8UMnQEMCeD2WrXPXZeaAFQZG8vHM=
Subject key identifier:   AA:D5:21:E3:EF:00:59:64:CF:DE:CE:A7:C7:4F:4F:D6:6D:DA:DF:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E524C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/a02a3081b7b759b372455eb4682ba4044091d583.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 15:35:00 +0000
Certificate not after:    Mon 18 Mar 2024 14:57:35 +0000
Subordinate resources:    AS: 270001
                          IP: 200.142.236.0/22
                          IP: 2803:61e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15017160 (0xe524c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 15:35:00 2023 GMT
            Not After : Mar 18 14:57:35 2024 GMT
        Subject: CN=a02a3081b7b759b372455eb4682ba4044091d583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:9f:aa:0c:f4:4e:5a:24:3d:e4:a4:ca:ce:
                    e6:86:00:f2:92:aa:c7:48:90:27:e6:52:32:96:b0:
                    23:f7:71:25:f2:76:a4:25:1a:f5:2c:d1:30:5e:a5:
                    30:7a:8b:23:37:24:a1:d2:1d:19:69:da:21:72:08:
                    98:d0:19:11:2e:e7:b3:7b:f4:bb:bd:7f:83:22:0f:
                    57:f1:6d:ac:1a:7c:3a:d2:43:44:e4:46:af:86:1c:
                    c0:ee:aa:d0:22:9a:d9:cd:a5:b4:5c:48:a3:b3:80:
                    a3:f2:e7:2d:d2:8e:4d:7b:13:4e:71:47:cd:f5:75:
                    b1:5f:63:a2:41:77:c9:07:f9:c7:54:b0:6d:1f:50:
                    ef:29:84:4b:30:eb:fa:ca:82:60:13:24:29:f2:ff:
                    64:8a:33:9f:e8:87:57:c7:af:e6:d4:b1:d4:81:2b:
                    e0:2f:2a:88:68:c4:d7:43:a5:e6:82:fc:c8:27:ff:
                    77:e9:54:b7:cd:7d:91:81:a2:fe:5d:90:03:07:3e:
                    88:c1:69:39:9b:cb:b1:60:cb:b0:ed:f2:fc:89:60:
                    d9:33:95:cb:52:55:ec:fb:36:af:8b:10:07:ba:fd:
                    cf:af:a9:4d:09:98:91:50:ce:37:c6:6b:ee:72:e8:
                    c8:8a:cc:fa:9b:bd:13:8c:53:87:5f:c3:1d:23:ff:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D5:21:E3:EF:00:59:64:CF:DE:CE:A7:C7:4F:4F:D6:6D:DA:DF:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/a02a3081b7b759b372455eb4682ba4044091d583.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.236.0/22
                IPv6:
                  2803:61e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270001

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:38:e8:ed:16:e5:a4:a7:e1:a0:27:f2:4b:a8:82:df:dd:
         d0:61:82:e5:a5:1f:dc:50:a8:42:72:11:a2:1c:c8:c4:39:9a:
         3f:f3:3d:77:c0:ee:13:db:2d:a9:ef:62:ad:91:d9:71:8b:49:
         c6:df:7a:0a:bb:ae:87:25:a8:ef:46:b1:97:82:cd:09:6c:68:
         b5:b6:53:43:fa:79:17:c4:3b:60:0d:7c:70:9a:e3:17:b4:a8:
         d8:50:47:f2:fa:5c:6b:78:48:af:3e:b8:00:76:59:71:64:38:
         b9:61:e7:8d:b4:be:86:d0:db:8c:67:ab:8d:d7:ed:e0:5a:57:
         ef:b2:89:c5:89:23:28:e9:56:7a:d5:8c:99:ee:1e:64:58:95:
         54:99:4f:b6:8b:fe:86:59:60:3f:09:45:56:61:b8:a7:f4:e7:
         51:42:38:9e:2d:59:05:86:2b:d0:c9:7a:73:76:8f:19:c8:9c:
         18:16:e6:c1:42:99:f9:c8:cc:89:ae:c4:25:a8:53:9a:7c:be:
         e6:94:7a:57:04:66:cd:d1:f4:72:22:e9:3c:c1:1a:ef:9a:d2:
         c2:42:ba:6d:61:b5:ae:44:8a:f4:b9:66:79:fd:2e:53:4b:fb:
         73:f1:53:6c:09:12:2c:e7:df:6d:b4:b5:4d:4c:32:8d:1c:83:
         d9:aa:e2:a2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOUkyDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMjE1MzUwMFoXDTI0MDMxODE0NTcz
NVowMzExMC8GA1UEAxMoYTAyYTMwODFiN2I3NTliMzcyNDU1ZWI0NjgyYmE0MDQ0
MDkxZDU4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYKn6oM9E5a
JD3kpMrO5oYA8pKqx0iQJ+ZSMpawI/dxJfJ2pCUa9SzRMF6lMHqLIzckodIdGWna
IXIImNAZES7ns3v0u71/gyIPV/FtrBp8OtJDRORGr4YcwO6q0CKa2c2ltFxIo7OA
o/LnLdKOTXsTTnFHzfV1sV9jokF3yQf5x1SwbR9Q7ymESzDr+sqCYBMkKfL/ZIoz
n+iHV8ev5tSx1IEr4C8qiGjE10Ol5oL8yCf/d+lUt819kYGi/l2QAwc+iMFpOZvL
sWDLsO3y/Ilg2TOVy1JV7Ps2r4sQB7r9z6+pTQmYkVDON8Zr7nLoyIrM+pu9E4xT
h1/DHSP/zzECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSq1SHj7wBZZM/ezqfHT0/W
bdrfeDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iZjMxMTZiZi1jZjE1
LTQ5MGYtOGJhMC04NzNlYzM5ZDIyYTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmYzMTE2YmYtY2YxNS00
OTBmLThiYTAtODczZWMzOWQyMmE2L2EwMmEzMDgxYjdiNzU5YjM3MjQ1NWViNDY4
MmJhNDA0NDA5MWQ1ODMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsiO7DANBAIAAjAHAwUAKANh4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHrEwDQYJKoZIhvcNAQELBQADggEBAGZN
OOjtFuWkp+GgJ/JLqILf3dBhguWlH9xQqEJyEaIcyMQ5mj/zPXfA7hPbLanvYq2R
2XGLScbfegq7roclqO9GsZeCzQlsaLW2U0P6eRfEO2ANfHCa4xe0qNhQR/L6XGt4
SK8+uAB2WXFkOLlh5420vobQ24xnq43X7eBaV++yicWJIyjpVnrVjJnuHmRYlVSZ
T7aL/oZZYD8JRVZhuKf051FCOJ4tWQWGK9DJenN2jxnInBgW5sFCmfnIzImuxCWo
U5p8vuaUelcEZs3R9HIi6TzBGu+a0sJCum1hta5EivS5Znn9LlNL+3PxU2wJEizn
3220tU1MMo0cg9mq4qI=
-----END CERTIFICATE-----