Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.cer
File:                     ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.cer (raw, json)
Hash identifier:          1nqXZU4OVoesB4EKLRtUnI1V+swfk1yTo3znGknyK7g=
Subject key identifier:   23:11:D2:26:9B:C6:31:48:DC:31:90:2B:14:1A:21:92:0A:05:6D:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103F981
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 17:43:12 +0000
Certificate not after:    Sun 14 Sep 2025 23:27:26 +0000
Subordinate resources:    AS: 267719
                          IP: 45.166.72.0/22
                          IP: 2803:b9a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17037697 (0x103f981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 14 17:43:12 2023 GMT
            Not After : Sep 14 23:27:26 2025 GMT
        Subject: CN=ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:d6:38:9a:c4:76:e3:26:d7:29:0f:f5:28:
                    b4:4c:7e:66:31:97:0c:90:4c:6c:ba:3d:7d:23:d0:
                    5c:e2:e2:c1:5b:89:c2:1e:c9:3e:db:d2:a1:89:df:
                    1e:ed:ff:28:a0:d9:ad:e3:db:d0:cb:f3:74:b3:09:
                    5d:cc:cc:5f:44:e3:08:bd:34:d0:c6:55:d9:dc:fc:
                    4a:e7:84:c4:0c:12:fc:38:12:b1:5f:80:42:78:17:
                    8f:48:c7:03:a8:d8:79:fb:4e:36:ce:9d:f9:db:fa:
                    25:7a:43:2c:2f:62:78:67:94:92:77:9f:84:a3:46:
                    7e:19:b5:fd:89:a1:7a:90:93:b7:d4:f8:51:c4:70:
                    1d:75:ad:f4:35:58:d6:da:c4:f5:9f:01:1d:87:3d:
                    46:b5:c7:17:dc:18:0e:86:3b:b6:d6:81:de:fd:31:
                    d1:10:d5:69:33:4d:fd:22:b3:52:94:e4:60:b8:fb:
                    b3:e2:db:ae:7c:5c:a7:a2:1d:a7:dc:b2:60:a0:84:
                    bb:4e:42:8b:2d:ca:e2:a2:8d:3a:ee:16:54:a8:23:
                    93:01:c4:75:a4:84:de:73:8a:c2:4d:d2:0f:e8:9c:
                    fa:f1:9a:32:55:44:fe:3c:5a:5a:2c:5f:c8:9f:54:
                    bd:ee:d1:14:cb:d7:8b:e9:81:c8:7d:3e:e4:99:cc:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:11:D2:26:9B:C6:31:48:DC:31:90:2B:14:1A:21:92:0A:05:6D:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.72.0/22
                IPv6:
                  2803:b9a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267719

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:2a:b7:20:23:c6:fe:25:9b:dd:43:64:5e:88:f4:a0:6b:
         6d:53:14:59:ee:c4:fc:39:aa:ec:05:bc:ae:42:fa:85:95:43:
         b7:20:dc:49:60:7b:69:44:bd:cc:81:ac:39:94:60:5e:5d:0b:
         3f:02:38:69:b1:74:b0:3d:2f:8a:c0:cb:a0:a2:59:cb:54:94:
         f1:f2:42:03:18:b6:7a:55:ea:a9:e8:7c:7e:38:aa:a3:31:b0:
         7d:ac:ea:d2:49:18:8e:53:4a:40:66:57:e5:e0:a4:10:c5:dc:
         6a:26:a6:37:8b:4d:0d:5e:16:d0:1c:27:cd:76:7f:52:2a:31:
         56:51:12:61:8a:ce:dd:35:bd:8e:0e:5a:4c:e7:0c:85:3c:42:
         3e:30:46:54:95:a0:b3:40:b2:ad:97:bf:8f:64:39:13:5b:90:
         82:17:cf:51:21:08:d3:2b:bb:fb:98:a7:da:d5:ad:81:79:01:
         31:6e:6a:9f:31:3f:9b:1a:55:d9:79:ef:dc:f9:34:b4:5e:a0:
         f9:d1:ed:7c:c3:d0:74:49:52:b0:0f:3d:1b:ad:28:c5:c4:ff:
         1f:03:8d:bf:dd:c8:72:50:a8:d8:90:25:8e:68:94:66:dd:fc:
         bb:48:da:e3:89:ad:70:09:f6:85:82:92:5a:2a:e9:a5:b4:2b:
         f9:c0:4c:90
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQP5gTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIxNDE3NDMxMloXDTI1MDkxNDIzMjcy
NlowMzExMC8GA1UEAxMoYmExZGJlOWQ1NTg5NDY0Yjk0Yzc3MWU0MjBhNGI1YTVk
OGVhYWZmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIi81jiaxHbj
JtcpD/UotEx+ZjGXDJBMbLo9fSPQXOLiwVuJwh7JPtvSoYnfHu3/KKDZrePb0Mvz
dLMJXczMX0TjCL000MZV2dz8SueExAwS/DgSsV+AQngXj0jHA6jYeftONs6d+dv6
JXpDLC9ieGeUknefhKNGfhm1/YmhepCTt9T4UcRwHXWt9DVY1trE9Z8BHYc9RrXH
F9wYDoY7ttaB3v0x0RDVaTNN/SKzUpTkYLj7s+Lbrnxcp6Idp9yyYKCEu05Ciy3K
4qKNOu4WVKgjkwHEdaSE3nOKwk3SD+ic+vGaMlVE/jxaWixfyJ9Uve7RFMvXi+mB
yH0+5JnMeesCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQjEdImm8YxSNwxkCsUGiGS
CgVt5zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYjM1OGEzMS0zNGZi
LTQwMzMtYWI3OS1iY2E3ODAzODQ0YjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2IzNThhMzEtMzRmYi00
MDMzLWFiNzktYmNhNzgwMzg0NGIwL2JhMWRiZTlkNTU4OTQ2NGI5NGM3NzFlNDIw
YTRiNWE1ZDhlYWFmZjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2mSDANBAIAAjAHAwUAKAO5oDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFccwDQYJKoZIhvcNAQELBQADggEBAGo+
KrcgI8b+JZvdQ2ReiPSga21TFFnuxPw5quwFvK5C+oWVQ7cg3Elge2lEvcyBrDmU
YF5dCz8COGmxdLA9L4rAy6CiWctUlPHyQgMYtnpV6qnofH44qqMxsH2s6tJJGI5T
SkBmV+XgpBDF3GompjeLTQ1eFtAcJ812f1IqMVZREmGKzt01vY4OWkznDIU8Qj4w
RlSVoLNAsq2Xv49kORNbkIIXz1EhCNMru/uYp9rVrYF5ATFuap8xP5saVdl579z5
NLReoPnR7XzD0HRJUrAPPRutKMXE/x8Djb/dyHJQqNiQJY5olGbd/LtI2uOJrXAJ
9oWCkloq6aW0K/nATJA=
-----END CERTIFICATE-----