Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6944bf4b01f4a85c483f4542c6caef7ff935ca6.cer
File:                     c6944bf4b01f4a85c483f4542c6caef7ff935ca6.cer (raw, json)
Hash identifier:          3tjNCqEJM4QBZR1iLayTMBvPo3GIulqn8uB5RctT/DM=
Subject key identifier:   B8:79:C6:3B:E1:E8:EF:BF:88:42:5C:D4:B1:58:1F:11:DA:8D:08:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5ED07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ee39de1a-0a0e-4fd4-8665-1e103017e254/c6944bf4b01f4a85c483f4542c6caef7ff935ca6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ee39de1a-0a0e-4fd4-8665-1e103017e254/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 15:51:01 +0000
Certificate not after:    Mon 23 Sep 2024 14:16:57 +0000
Subordinate resources:    AS: 270200
                          IP: 190.9.108.0/22
                          IP: 2806:3f7::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15068423 (0xe5ed07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 15:51:01 2023 GMT
            Not After : Sep 23 14:16:57 2024 GMT
        Subject: CN=c6944bf4b01f4a85c483f4542c6caef7ff935ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:64:5d:fb:14:64:dd:4f:b1:74:93:0a:60:42:
                    2f:1a:b9:76:3b:86:d8:fe:4d:c1:ed:de:8a:a2:c9:
                    48:3a:67:bd:b2:d4:d4:d6:e4:a4:06:56:ec:31:0b:
                    69:49:c8:e8:da:ff:d0:89:53:56:dc:ab:d5:75:27:
                    c4:af:58:e5:cc:2a:ad:e5:37:a0:06:e2:e4:3c:d0:
                    d5:5e:7d:58:cd:aa:af:0d:99:23:cb:ba:8d:c2:7c:
                    6e:24:dd:11:d8:cc:04:8a:3d:1f:54:d9:3f:49:92:
                    28:10:ad:34:96:cf:c5:51:94:11:db:7c:f1:49:2d:
                    5f:44:18:94:11:51:7a:2d:94:a9:fd:28:1c:59:6c:
                    fd:a0:a1:f2:18:15:1c:fe:0b:d1:ed:b4:c1:55:ad:
                    5a:b8:a6:13:69:cb:8a:7f:5a:0f:44:09:56:7c:98:
                    14:46:3c:8b:ea:6c:df:6a:04:69:10:a3:a6:b4:b0:
                    ec:84:03:54:78:f2:87:fc:c8:c3:41:31:30:3a:f9:
                    86:0b:ae:af:f2:76:d1:54:2b:3e:19:cf:88:fd:da:
                    2a:fe:b6:69:73:87:4d:54:2f:b5:fb:b7:71:a9:70:
                    9c:a0:85:f1:11:75:63:4b:e0:7c:4c:b0:d4:af:88:
                    18:10:cd:6b:e1:d5:0e:b6:e9:0d:14:a4:31:5c:2d:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:C6:3B:E1:E8:EF:BF:88:42:5C:D4:B1:58:1F:11:DA:8D:08:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ee39de1a-0a0e-4fd4-8665-1e103017e254/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ee39de1a-0a0e-4fd4-8665-1e103017e254/c6944bf4b01f4a85c483f4542c6caef7ff935ca6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.108.0/22
                IPv6:
                  2806:3f7::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270200

    Signature Algorithm: sha256WithRSAEncryption
         56:19:88:2e:54:32:49:3d:9a:4d:62:4b:81:6a:2d:4e:16:af:
         f8:1a:2b:bd:85:0b:3c:7c:61:87:ab:e4:7c:2b:62:55:6b:93:
         de:c9:98:4a:cf:90:1e:20:3c:d3:f0:5f:68:78:20:22:5c:d3:
         ce:c1:0e:f4:a7:c4:9f:f3:e5:fa:e3:52:b5:37:ad:7f:ea:fb:
         2f:22:7d:7d:fc:4d:65:ff:03:09:ac:0b:42:c6:04:bd:3c:13:
         25:9c:c4:8e:e8:77:cd:88:bc:30:d8:d8:d0:0a:57:5b:1d:2e:
         1b:e2:05:b9:bd:71:09:52:55:b7:9c:e4:27:bd:f4:34:d5:9c:
         f6:53:d3:8a:c0:bc:4e:4c:57:ea:3a:85:b3:53:8e:74:ee:79:
         19:8c:53:e2:fd:73:7d:8f:dc:aa:e2:71:a1:54:df:7c:b0:92:
         77:e3:d8:1d:06:ba:46:a0:b7:3c:25:63:9f:c9:c1:39:3c:1a:
         4b:19:58:eb:56:df:50:7e:4f:64:88:d4:ba:b8:e2:9e:4a:50:
         3b:bc:fe:dd:03:db:7c:60:38:da:f8:fa:1a:11:88:82:50:bc:
         62:87:90:f9:21:b4:94:b7:bf:68:7c:7b:67:b6:8d:37:c8:95:
         21:86:c5:91:33:ef:fb:26:30:e1:bb:4c:65:2e:1f:4c:00:14:
         e7:2f:66:33
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOXtBzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxNzE1NTEwMVoXDTI0MDkyMzE0MTY1
N1owMzExMC8GA1UEAxMoYzY5NDRiZjRiMDFmNGE4NWM0ODNmNDU0MmM2Y2FlZjdm
ZjkzNWNhNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI5kXfsUZN1P
sXSTCmBCLxq5djuG2P5Nwe3eiqLJSDpnvbLU1NbkpAZW7DELaUnI6Nr/0IlTVtyr
1XUnxK9Y5cwqreU3oAbi5DzQ1V59WM2qrw2ZI8u6jcJ8biTdEdjMBIo9H1TZP0mS
KBCtNJbPxVGUEdt88UktX0QYlBFRei2Uqf0oHFls/aCh8hgVHP4L0e20wVWtWrim
E2nLin9aD0QJVnyYFEY8i+ps32oEaRCjprSw7IQDVHjyh/zIw0ExMDr5hguur/J2
0VQrPhnPiP3aKv62aXOHTVQvtfu3calwnKCF8RF1Y0vgfEyw1K+IGBDNa+HVDrbp
DRSkMVwteQcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS4ecY74ejvv4hCXNSxWB8R
2o0IdDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZTM5ZGUxYS0wYTBl
LTRmZDQtODY2NS0xZTEwMzAxN2UyNTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWUzOWRlMWEtMGEwZS00
ZmQ0LTg2NjUtMWUxMDMwMTdlMjU0L2M2OTQ0YmY0YjAxZjRhODVjNDgzZjQ1NDJj
NmNhZWY3ZmY5MzVjYTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr4JbDANBAIAAjAHAwUAKAYD9zAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH3gwDQYJKoZIhvcNAQELBQADggEBAFYZ
iC5UMkk9mk1iS4FqLU4Wr/gaK72FCzx8YYer5HwrYlVrk97JmErPkB4gPNPwX2h4
ICJc087BDvSnxJ/z5frjUrU3rX/q+y8ifX38TWX/AwmsC0LGBL08EyWcxI7od82I
vDDY2NAKV1sdLhviBbm9cQlSVbec5Ce99DTVnPZT04rAvE5MV+o6hbNTjnTueRmM
U+L9c32P3KricaFU33ywknfj2B0GukagtzwlY5/JwTk8GksZWOtW31B+T2SI1Lq4
4p5KUDu8/t0D23xgONr4+hoRiIJQvGKHkPkhtJS3v2h8e2e2jTfIlSGGxZEz7/sm
MOG7TGUuH0wAFOcvZjM=
-----END CERTIFICATE-----