Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer
File:                     bfa311fa695991c4b5507c099d6fea84b510979a.cer (raw, json)
Hash identifier:          A2JjTIyZcYEZbP379jvBox2H5+GJJRcwtij1qRlvSmo=
Subject key identifier:   B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4ED35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 18:45:25 +0000
Certificate not after:    Fri 24 Jan 2025 13:59:08 +0000
Subordinate resources:    AS: 272099
                          IP: 181.233.100.0/22
                          IP: 2803:2710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15002933 (0xe4ed35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 18:45:25 2023 GMT
            Not After : Jan 24 13:59:08 2025 GMT
        Subject: CN=bfa311fa695991c4b5507c099d6fea84b510979a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:cd:76:6a:7a:8b:86:f8:d1:33:95:46:df:
                    37:76:ec:6a:53:29:a0:e2:52:cd:ee:48:c0:e8:5f:
                    1d:4c:ee:10:07:a7:67:d8:14:3d:1e:74:e7:ce:13:
                    08:3b:47:e2:d8:62:55:73:e6:14:d2:c0:69:d4:bd:
                    0a:6e:69:9d:b9:36:65:f4:b2:78:5f:a6:2c:1a:77:
                    97:33:99:6a:a3:7d:a1:0b:1f:1c:f1:36:ca:6c:a4:
                    69:87:65:52:ca:60:b8:7a:52:5e:e1:3e:96:f5:ad:
                    9c:15:c8:79:15:0b:26:b9:83:87:2d:25:ac:19:76:
                    8d:e1:81:23:09:fb:62:69:ce:46:95:30:c2:ba:ed:
                    80:fa:81:4a:42:78:55:39:a5:42:71:59:38:30:96:
                    21:0f:01:83:e5:39:c0:d0:6b:42:61:da:8a:77:98:
                    1f:ea:07:23:7a:15:96:97:af:1b:9b:23:14:95:5a:
                    60:a4:f3:b5:fa:d1:7a:8d:0e:c5:5f:08:7b:8d:1f:
                    fd:85:98:44:4a:e1:79:af:5e:42:3f:1c:2e:a5:60:
                    d3:07:46:08:86:e5:40:1e:48:fa:8a:0c:21:ff:62:
                    43:06:e5:bd:34:24:41:e6:05:07:14:e1:4a:c8:8f:
                    15:50:19:62:6a:63:fc:7a:1e:8d:bc:06:b5:b5:cc:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.100.0/22
                IPv6:
                  2803:2710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272099

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:b1:ed:0a:5d:93:a8:4e:0d:4d:61:eb:91:21:85:4b:cc:
         ff:19:b4:72:97:be:58:fd:2f:81:42:86:d5:d0:8f:50:23:57:
         6d:73:61:a4:0d:ad:d6:14:61:a3:e4:7a:40:f2:0c:cd:d6:4c:
         24:89:54:33:07:19:dc:f5:d7:72:c4:bd:6c:9e:fb:32:27:05:
         a1:4b:22:74:7a:8e:8a:1b:cb:cb:ca:35:e7:81:63:51:c6:4e:
         c8:74:9d:0b:5e:33:11:29:dc:58:7f:b6:d4:59:e7:7c:03:a0:
         db:7a:ae:75:aa:53:f8:68:d0:b5:6f:da:ab:6e:be:70:6a:99:
         23:c7:86:ff:a2:72:a6:35:d3:1d:32:24:47:37:f8:d2:8b:be:
         37:f1:fc:9c:ad:c1:f7:ef:ff:d8:3f:2e:eb:aa:b1:5c:69:8f:
         1e:79:db:7a:9b:61:3a:3d:e3:69:db:c8:bd:09:eb:53:ec:5e:
         4b:2c:07:98:51:c0:48:a4:84:1c:7a:ab:7f:3b:4d:9d:d0:57:
         fb:99:5a:03:fa:92:26:8a:e2:0c:e5:7c:4e:98:77:a7:52:dc:
         00:1b:92:26:e7:31:c6:fa:9e:b0:7f:65:fd:70:0d:f0:44:5f:
         37:d0:48:de:4c:19:ff:98:b7:c9:a1:41:db:95:98:55:f8:3c:
         e6:b3:9a:d8
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOTtNTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMTE4NDUyNVoXDTI1MDEyNDEzNTkw
OFowMzExMC8GA1UEAxMoYmZhMzExZmE2OTU5OTFjNGI1NTA3YzA5OWQ2ZmVhODRi
NTEwOTc5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJtazXZqeouG
+NEzlUbfN3bsalMpoOJSze5IwOhfHUzuEAenZ9gUPR50584TCDtH4thiVXPmFNLA
adS9Cm5pnbk2ZfSyeF+mLBp3lzOZaqN9oQsfHPE2ymykaYdlUspguHpSXuE+lvWt
nBXIeRULJrmDhy0lrBl2jeGBIwn7YmnORpUwwrrtgPqBSkJ4VTmlQnFZODCWIQ8B
g+U5wNBrQmHaineYH+oHI3oVlpevG5sjFJVaYKTztfrReo0OxV8Ie40f/YWYRErh
ea9eQj8cLqVg0wdGCIblQB5I+ooMIf9iQwblvTQkQeYFBxThSsiPFVAZYmpj/Hoe
jbwGtbXM9qECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSwz/A0MKlllqkzGP/X/u7N
j0rtOTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85OThkNzQ2Zi03Zjhj
LTQ4NjMtOWJhMy0yYzE4YTFiZTg5OTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTk4ZDc0NmYtN2Y4Yy00
ODYzLTliYTMtMmMxOGExYmU4OTkwL2JmYTMxMWZhNjk1OTkxYzRiNTUwN2MwOTlk
NmZlYTg0YjUxMDk3OWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXpZDANBAIAAjAHAwUAKAMnEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJuMwDQYJKoZIhvcNAQELBQADggEBADSK
se0KXZOoTg1NYeuRIYVLzP8ZtHKXvlj9L4FChtXQj1AjV21zYaQNrdYUYaPkekDy
DM3WTCSJVDMHGdz113LEvWye+zInBaFLInR6jooby8vKNeeBY1HGTsh0nQteMxEp
3Fh/ttRZ53wDoNt6rnWqU/ho0LVv2qtuvnBqmSPHhv+icqY10x0yJEc3+NKLvjfx
/Jytwffv/9g/LuuqsVxpjx5523qbYTo942nbyL0J61PsXkssB5hRwEikhBx6q387
TZ3QV/uZWgP6kiaK4gzlfE6Yd6dS3AAbkibnMcb6nrB/Zf1wDfBEXzfQSN5MGf+Y
t8mhQduVmFX4POazmtg=
-----END CERTIFICATE-----