Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0785d3bb6de9ad5d12804990234382fe9a9cabb.cer
File:                     a0785d3bb6de9ad5d12804990234382fe9a9cabb.cer (raw, json)
Hash identifier:          In2Zgn2tSTeSQyAe9DECcBuEKAvYXKko3ovWjLXLaCo=
Subject key identifier:   B4:F9:EF:4C:79:C9:47:F0:A6:98:5B:4E:65:5E:A4:AC:11:FD:70:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7A3BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4c7679a2-47cd-4077-8c5f-f22b27a3e263/a0785d3bb6de9ad5d12804990234382fe9a9cabb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4c7679a2-47cd-4077-8c5f-f22b27a3e263/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 16:31:10 +0000
Certificate not after:    Wed 10 Jul 2024 19:20:57 +0000
Subordinate resources:    IP: 45.183.220.0/23
                          IP: 2803:7d60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16229306 (0xf7a3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 16:31:10 2023 GMT
            Not After : Jul 10 19:20:57 2024 GMT
        Subject: CN=a0785d3bb6de9ad5d12804990234382fe9a9cabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:fa:0c:b8:26:ac:53:92:78:6d:24:b1:ac:
                    8e:49:e7:8c:87:fa:b9:a7:4e:60:d3:b5:65:87:fc:
                    2c:33:3f:bd:1e:fa:f5:04:27:09:24:65:dd:f0:19:
                    f5:27:c6:64:79:33:13:6b:d8:55:75:a9:29:8a:63:
                    ac:f2:93:35:e8:1f:28:34:e6:d3:56:97:31:09:bb:
                    dc:20:56:48:86:b2:4b:7f:42:71:b5:6d:00:21:bc:
                    a6:da:ca:9e:2c:f5:82:cc:8f:67:11:02:9a:e6:fc:
                    bd:7b:45:1f:ad:82:72:0e:71:5a:dc:3a:c0:de:26:
                    ba:b9:bc:9e:bf:51:6a:da:11:e9:3a:6a:3e:5b:87:
                    ef:da:fb:e0:98:c3:ba:4f:9d:50:0b:5f:65:30:60:
                    98:82:68:25:fb:ad:fc:4a:ee:5d:9d:9c:f1:98:76:
                    20:42:db:15:d8:94:64:7b:1e:92:f0:a7:68:44:69:
                    68:3a:f7:7e:39:a5:b5:44:21:de:4e:4f:da:90:ea:
                    fb:32:95:e3:f4:ec:33:ee:bf:a5:36:d3:ec:4d:c1:
                    5a:27:fc:3e:47:31:46:8a:0b:0a:fe:bb:82:a6:93:
                    91:00:3a:89:ac:40:1a:6e:72:80:6a:00:80:11:dc:
                    8e:ea:ea:58:5a:57:ac:c2:a3:89:b0:8f:a4:7c:ee:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:EF:4C:79:C9:47:F0:A6:98:5B:4E:65:5E:A4:AC:11:FD:70:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4c7679a2-47cd-4077-8c5f-f22b27a3e263/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4c7679a2-47cd-4077-8c5f-f22b27a3e263/a0785d3bb6de9ad5d12804990234382fe9a9cabb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.220.0/23
                IPv6:
                  2803:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:f4:02:14:5f:3c:1a:97:b1:d9:1a:78:9d:f6:a8:e6:27:
         04:3d:e9:ca:ec:c0:f8:1a:0f:7b:15:1e:ed:85:8d:4a:53:b5:
         97:97:a0:eb:fb:e5:fe:9e:95:9a:af:11:36:d2:32:c7:90:66:
         97:37:b0:91:3d:8f:2f:df:97:98:95:a6:54:00:e7:76:3e:68:
         a9:4b:4d:f4:10:49:08:e5:be:fa:fa:e5:a1:99:45:35:e5:6e:
         48:6f:db:de:f4:b3:d0:3b:fc:62:f6:dc:e2:08:12:87:1b:2a:
         1a:d4:b1:da:1e:ca:fa:d1:65:c8:45:3f:06:e8:73:75:f1:20:
         a5:de:9f:f4:76:60:3e:35:47:08:69:99:fa:f0:31:06:60:70:
         dd:2f:07:3d:be:9f:cf:24:f9:e9:0c:3a:eb:79:27:da:6e:8a:
         01:81:6b:e0:dc:d0:a7:ce:d0:ae:00:be:6a:c1:2f:a9:89:b5:
         0a:68:54:08:ca:60:38:08:79:03:48:d6:ea:b5:e4:3d:38:29:
         16:a8:6d:55:41:15:b2:3a:3c:8d:bc:3e:98:bf:ff:a2:9b:75:
         46:e8:b5:4f:c5:a3:2d:59:a8:98:81:bc:b6:6c:e5:ab:65:16:
         a1:95:5a:80:d1:0a:33:fa:6d:17:2e:a1:15:1a:96:fb:eb:1b:
         1a:de:9f:40
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAPejujANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgzMTE2MzExMFoXDTI0MDcxMDE5MjA1
N1owMzExMC8GA1UEAxMoYTA3ODVkM2JiNmRlOWFkNWQxMjgwNDk5MDIzNDM4MmZl
OWE5Y2FiYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIR+gy4JqxT
knhtJLGsjknnjIf6uadOYNO1ZYf8LDM/vR769QQnCSRl3fAZ9SfGZHkzE2vYVXWp
KYpjrPKTNegfKDTm01aXMQm73CBWSIayS39CcbVtACG8ptrKniz1gsyPZxECmub8
vXtFH62Ccg5xWtw6wN4murm8nr9RatoR6TpqPluH79r74JjDuk+dUAtfZTBgmIJo
Jfut/EruXZ2c8Zh2IELbFdiUZHsekvCnaERpaDr3fjmltUQh3k5P2pDq+zKV4/Ts
M+6/pTbT7E3BWif8PkcxRooLCv67gqaTkQA6iaxAGm5ygGoAgBHcjurqWFpXrMKj
ibCPpHzulPkCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBS0+e9MeclH8KaYW05lXqSs
Ef1wZTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80Yzc2NzlhMi00N2Nk
LTQwNzctOGM1Zi1mMjJiMjdhM2UyNjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGM3Njc5YTItNDdjZC00
MDc3LThjNWYtZjIyYjI3YTNlMjYzL2EwNzg1ZDNiYjZkZTlhZDVkMTI4MDQ5OTAy
MzQzODJmZTlhOWNhYmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS233DANBAIAAjAHAwUAKAN9YDAN
BgkqhkiG9w0BAQsFAAOCAQEADEf0AhRfPBqXsdkaeJ32qOYnBD3pyuzA+BoPexUe
7YWNSlO1l5eg6/vl/p6Vmq8RNtIyx5BmlzewkT2PL9+XmJWmVADndj5oqUtN9BBJ
COW++vrloZlFNeVuSG/b3vSz0Dv8Yvbc4ggShxsqGtSx2h7K+tFlyEU/BuhzdfEg
pd6f9HZgPjVHCGmZ+vAxBmBw3S8HPb6fzyT56Qw663kn2m6KAYFr4NzQp87QrgC+
asEvqYm1CmhUCMpgOAh5A0jW6rXkPTgpFqhtVUEVsjo8jbw+mL//opt1Rui1T8Wj
LVmomIG8tmzlq2UWoZVagNEKM/ptFy6hFRqW++sbGt6fQA==
-----END CERTIFICATE-----