Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbe528ecdadd740d45fc8ec771b1e26370ac30d8.cer
File:                     bbe528ecdadd740d45fc8ec771b1e26370ac30d8.cer (raw, json)
Hash identifier:          qRbPWgFJQY/z8f3NitYqhx48wIYrRChfcc/a/+ATqQg=
Subject key identifier:   96:DB:08:72:A9:9D:51:2D:79:73:66:70:2D:BD:B8:2B:B3:AE:13:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F94049
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/47a0e1ef-3eb7-4455-8b2e-431920020f02/bbe528ecdadd740d45fc8ec771b1e26370ac30d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/47a0e1ef-3eb7-4455-8b2e-431920020f02/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 12:41:43 +0000
Certificate not after:    Thu 06 Mar 2025 15:14:13 +0000
Subordinate resources:    AS: 271912
                          IP: 2803:d210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16334921 (0xf94049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 12:41:43 2023 GMT
            Not After : Mar  6 15:14:13 2025 GMT
        Subject: CN=bbe528ecdadd740d45fc8ec771b1e26370ac30d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:8d:df:11:a3:82:cc:87:e2:85:53:87:42:
                    77:9c:ce:e9:3f:ba:62:ff:4c:c1:29:cc:d0:22:8d:
                    22:93:5d:ec:23:01:b9:53:6e:94:14:a5:a2:86:e1:
                    5e:b1:e3:46:af:3a:4c:1c:14:1a:cf:a1:88:ef:c1:
                    aa:df:93:05:77:fc:62:6d:1f:1e:65:f5:cb:51:40:
                    d8:89:93:65:3b:92:8b:83:95:1f:81:1c:0f:e0:06:
                    74:7b:e9:f9:7f:49:e3:69:1f:2f:fb:cc:e2:b2:ee:
                    1e:34:fe:59:ae:3d:a6:b7:5c:11:35:ab:7c:24:8e:
                    20:34:30:97:fc:a8:38:e7:13:85:aa:97:a6:8e:ab:
                    83:c3:2f:e1:23:60:ef:ce:d4:7f:33:02:22:f1:99:
                    84:14:0e:f1:6d:27:c5:2f:08:84:f4:bb:84:c6:ca:
                    36:d6:c4:86:86:9e:f7:a7:66:42:2b:dd:af:93:15:
                    f8:0c:74:df:85:e8:85:eb:bf:5e:7b:b9:22:b9:50:
                    15:4e:67:60:06:3c:af:49:fa:4f:0a:73:f2:d3:f2:
                    25:45:1f:d6:cf:15:6c:8a:93:24:84:0f:c6:1f:91:
                    85:29:ba:7c:98:cb:7a:b9:fc:9a:99:4d:91:86:af:
                    08:6c:83:05:50:3b:e0:23:3f:c6:f7:6a:17:87:0f:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:08:72:A9:9D:51:2D:79:73:66:70:2D:BD:B8:2B:B3:AE:13:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/47a0e1ef-3eb7-4455-8b2e-431920020f02/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/47a0e1ef-3eb7-4455-8b2e-431920020f02/bbe528ecdadd740d45fc8ec771b1e26370ac30d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271912

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:3c:c7:50:d1:96:e3:63:78:a8:02:b2:16:3c:75:fb:d8:
         53:48:25:a0:aa:04:5b:4c:6c:21:e1:81:88:51:1b:f1:e8:c3:
         d1:bd:12:ec:b7:a7:d6:64:f3:42:b8:c9:13:85:fa:a5:03:26:
         ad:02:78:20:6f:52:3b:7f:77:7b:ad:45:0e:73:84:ef:99:b3:
         24:00:fa:8f:0d:c3:88:a6:49:2a:99:4b:9c:08:f4:1c:ce:d2:
         48:44:ce:20:4e:c3:ff:56:7f:22:62:9f:67:1b:34:46:57:c1:
         da:ed:82:4b:71:70:b8:d9:15:4b:ab:48:50:27:19:72:57:bb:
         ba:38:59:6a:c2:e3:9c:41:85:98:35:74:be:06:61:6d:01:cc:
         e9:bd:e1:ac:39:06:c2:db:10:5a:12:21:3c:91:c0:9b:a6:1f:
         60:de:6d:53:9f:46:92:3b:78:b1:7d:0e:b6:af:14:36:c2:61:
         91:ad:1b:ef:4a:ba:71:6a:be:49:9a:e6:50:3f:d8:ac:f9:10:
         38:39:c3:96:35:44:96:de:c5:4a:d0:b1:51:b1:47:93:48:80:
         f9:76:9e:60:4c:f0:9d:12:58:2a:62:35:0b:4a:29:d0:d5:41:
         f2:2f:11:fb:ed:a8:7d:bb:4f:72:f2:88:bf:29:8c:52:40:80:
         c0:0a:14:d7
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAPlASTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkxMjEyNDE0M1oXDTI1MDMwNjE1MTQx
M1owMzExMC8GA1UEAxMoYmJlNTI4ZWNkYWRkNzQwZDQ1ZmM4ZWM3NzFiMWUyNjM3
MGFjMzBkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcujd8Ro4LM
h+KFU4dCd5zO6T+6Yv9MwSnM0CKNIpNd7CMBuVNulBSloobhXrHjRq86TBwUGs+h
iO/Bqt+TBXf8Ym0fHmX1y1FA2ImTZTuSi4OVH4EcD+AGdHvp+X9J42kfL/vM4rLu
HjT+Wa49prdcETWrfCSOIDQwl/yoOOcThaqXpo6rg8Mv4SNg787UfzMCIvGZhBQO
8W0nxS8IhPS7hMbKNtbEhoae96dmQivdr5MV+Ax034Xoheu/Xnu5IrlQFU5nYAY8
r0n6Twpz8tPyJUUf1s8VbIqTJIQPxh+RhSm6fJjLern8mplNkYavCGyDBVA74CM/
xvdqF4cPVfcCAwEAAaOCAvswggL3MB0GA1UdDgQWBBSW2whyqZ1RLXlzZnAtvbgr
s64TNjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80N2EwZTFlZi0zZWI3
LTQ0NTUtOGIyZS00MzE5MjAwMjBmMDIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDdhMGUxZWYtM2ViNy00
NDU1LThiMmUtNDMxOTIwMDIwZjAyL2JiZTUyOGVjZGFkZDc0MGQ0NWZjOGVjNzcx
YjFlMjYzNzBhYzMwZDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0hAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCYoMA0GCSqGSIb3DQEBCwUAA4IBAQBHvTzHUNGW42N4qAKyFjx1
+9hTSCWgqgRbTGwh4YGIURvx6MPRvRLst6fWZPNCuMkThfqlAyatAnggb1I7f3d7
rUUOc4TvmbMkAPqPDcOIpkkqmUucCPQcztJIRM4gTsP/Vn8iYp9nGzRGV8Ha7YJL
cXC42RVLq0hQJxlyV7u6OFlqwuOcQYWYNXS+BmFtAczpveGsOQbC2xBaEiE8kcCb
ph9g3m1Tn0aSO3ixfQ62rxQ2wmGRrRvvSrpxar5JmuZQP9is+RA4OcOWNUSW3sVK
0LFRsUeTSID5dp5gTPCdElgqYjULSinQ1UHyLxH77ah9u09y8oi/KYxSQIDAChTX
-----END CERTIFICATE-----