Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbed3506cc5c406dbc588cb67356dc32e912a5dc.cer
File:                     bbed3506cc5c406dbc588cb67356dc32e912a5dc.cer (raw, json)
Hash identifier:          nj1K3OTy95CC/j323eQu3xCYa1/Nl0xm2JVbW1usXzc=
Subject key identifier:   B9:F5:89:9D:C6:A5:FB:AF:BC:D3:84:6B:CA:3F:4A:8B:A1:5F:22:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE5823
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a6287256-314f-4a37-ad6d-006153437beb/bbed3506cc5c406dbc588cb67356dc32e912a5dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a6287256-314f-4a37-ad6d-006153437beb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 20:04:59 +0000
Certificate not after:    Tue 01 Jul 2025 13:50:59 +0000
Subordinate resources:    AS: 267554
                          IP: 201.182.164.0/22
                          IP: 2804:4330::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16668707 (0xfe5823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 26 20:04:59 2023 GMT
            Not After : Jul  1 13:50:59 2025 GMT
        Subject: CN=bbed3506cc5c406dbc588cb67356dc32e912a5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:c6:1b:5b:50:6c:81:d2:41:32:d1:01:53:
                    82:14:a6:69:34:2c:55:c2:ae:b2:d6:81:c6:a9:f3:
                    e3:97:21:74:b1:f8:03:6d:4a:f2:be:71:02:63:a5:
                    b2:b9:fd:96:b8:89:40:c1:1f:73:57:24:f7:fd:22:
                    d7:ff:c9:cd:8b:3c:ab:ff:2d:77:63:8b:aa:a6:ef:
                    7d:44:4f:74:59:b0:52:ac:b0:2b:a4:cd:a7:e7:89:
                    fa:65:5f:70:cd:1a:e9:11:65:6b:4f:30:bb:df:2c:
                    b3:c8:40:79:20:8b:76:47:32:55:2b:22:0d:2f:91:
                    5a:bf:5b:3a:eb:80:7e:81:83:f0:0a:7e:3b:3e:63:
                    61:18:10:7e:90:af:c3:f8:af:cf:e5:3f:e0:67:93:
                    a4:15:5d:0a:24:ce:cc:40:ef:0d:53:7b:2f:73:9e:
                    77:23:f4:b9:4e:63:02:97:7d:ed:1a:4f:a3:0b:0f:
                    97:61:b1:8e:b6:f0:f9:c3:e9:41:e2:2f:2e:1a:ee:
                    19:e6:3a:ec:f4:18:55:10:f8:8a:5e:4a:ee:99:70:
                    73:79:73:1d:16:86:d7:7e:9c:51:f3:12:c6:59:0a:
                    9b:39:a6:27:a4:bd:af:45:1d:34:40:c0:0e:8c:a1:
                    46:7c:ce:70:7c:58:45:0c:8d:0a:aa:f2:9a:ca:0f:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:89:9D:C6:A5:FB:AF:BC:D3:84:6B:CA:3F:4A:8B:A1:5F:22:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a6287256-314f-4a37-ad6d-006153437beb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a6287256-314f-4a37-ad6d-006153437beb/bbed3506cc5c406dbc588cb67356dc32e912a5dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.164.0/22
                IPv6:
                  2804:4330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267554

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:f7:82:7a:6e:6c:52:2d:77:40:a8:97:e8:32:5e:a3:3e:
         f6:ad:ec:e3:c8:37:ae:ff:a3:a3:fd:34:a1:2a:81:ea:50:61:
         64:eb:9d:80:f1:0b:66:fd:e1:6e:36:2a:28:c1:b7:a0:7a:63:
         4c:ae:6f:64:92:24:da:c1:2f:48:07:d1:aa:59:f0:55:2a:b8:
         d6:22:99:69:f3:2f:f7:f0:03:3c:72:80:42:70:44:47:34:5a:
         3e:81:75:e4:9d:be:29:53:a2:62:42:62:dd:2d:47:e9:5a:14:
         f4:b0:2c:9b:15:14:ae:57:2b:70:32:da:17:88:e9:01:9b:af:
         1a:35:d8:20:a6:04:04:a5:b8:9c:f6:5e:c8:6a:69:83:51:9d:
         ae:f4:9b:2f:ed:7b:8c:94:5d:f3:88:85:de:01:ef:cf:b7:8c:
         9f:12:37:f6:a7:2f:72:ba:41:c3:a1:f9:9b:67:01:c8:f7:d3:
         fe:d8:26:f3:bb:e7:90:3e:34:54:e4:4f:6c:08:f8:c5:a2:e8:
         11:db:04:34:96:0b:c8:e2:ef:aa:f7:f6:c8:63:71:7a:1a:ed:
         01:fc:2c:29:d6:d1:35:f2:79:21:fc:13:02:e4:a8:5c:50:f7:
         08:3e:e4:71:2d:2a:f1:fe:ff:43:2b:5d:af:99:79:5e:34:d9:
         8f:fa:cd:f9
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP5YIzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNjIwMDQ1OVoXDTI1MDcwMTEzNTA1
OVowMzExMC8GA1UEAxMoYmJlZDM1MDZjYzVjNDA2ZGJjNTg4Y2I2NzM1NmRjMzJl
OTEyYTVkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ03xhtbUGyB
0kEy0QFTghSmaTQsVcKustaBxqnz45chdLH4A21K8r5xAmOlsrn9lriJQMEfc1ck
9/0i1//JzYs8q/8td2OLqqbvfURPdFmwUqywK6TNp+eJ+mVfcM0a6RFla08wu98s
s8hAeSCLdkcyVSsiDS+RWr9bOuuAfoGD8Ap+Oz5jYRgQfpCvw/ivz+U/4GeTpBVd
CiTOzEDvDVN7L3OedyP0uU5jApd97RpPowsPl2Gxjrbw+cPpQeIvLhruGeY67PQY
VRD4il5K7plwc3lzHRaG136cUfMSxlkKmzmmJ6S9r0UdNEDADoyhRnzOcHxYRQyN
CqrymsoPlCMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS59YmdxqX7r7zThGvKP0qL
oV8iMzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hNjI4NzI1Ni0zMTRm
LTRhMzctYWQ2ZC0wMDYxNTM0MzdiZWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTYyODcyNTYtMzE0Zi00
YTM3LWFkNmQtMDA2MTUzNDM3YmViL2JiZWQzNTA2Y2M1YzQwNmRiYzU4OGNiNjcz
NTZkYzMyZTkxMmE1ZGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsm2pDANBAIAAjAHAwUAKARDMDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFSIwDQYJKoZIhvcNAQELBQADggEBAFxn
94J6bmxSLXdAqJfoMl6jPvat7OPIN67/o6P9NKEqgepQYWTrnYDxC2b94W42KijB
t6B6Y0yub2SSJNrBL0gH0apZ8FUquNYimWnzL/fwAzxygEJwREc0Wj6BdeSdvilT
omJCYt0tR+laFPSwLJsVFK5XK3Ay2heI6QGbrxo12CCmBASluJz2XshqaYNRna70
my/te4yUXfOIhd4B78+3jJ8SN/anL3K6QcOh+ZtnAcj30/7YJvO755A+NFTkT2wI
+MWi6BHbBDSWC8ji76r39shjcXoa7QH8LCnW0TXyeSH8EwLkqFxQ9wg+5HEtKvH+
/0MrXa+ZeV402Y/6zfk=
-----END CERTIFICATE-----