Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca1ab15ff4ebb3366171e185a3e27e303ed81d47.cer
File:                     ca1ab15ff4ebb3366171e185a3e27e303ed81d47.cer (raw, json)
Hash identifier:          Zxa6lqlVoJopdz6XF0LRSn9ZK9N+ADthVpiWVnO4Ick=
Subject key identifier:   A8:D5:7D:0E:07:E9:7B:F0:4F:5B:85:DD:82:01:D2:16:77:E2:11:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC9800
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1b5ede87-9de3-46c1-bcc7-7092873d9d44/ca1ab15ff4ebb3366171e185a3e27e303ed81d47.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1b5ede87-9de3-46c1-bcc7-7092873d9d44/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 16:45:16 +0000
Certificate not after:    Fri 21 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 266890
                          IP: 45.160.156.0/22
                          IP: 2803:a6a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15505408 (0xec9800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  5 16:45:16 2023 GMT
            Not After : Jun 21 06:00:00 2024 GMT
        Subject: CN=ca1ab15ff4ebb3366171e185a3e27e303ed81d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:28:f8:81:b7:9d:00:f6:75:27:ea:59:36:
                    65:60:22:f7:45:b8:4a:d2:2b:68:07:1b:5a:2b:69:
                    a9:a8:60:84:b5:fa:7b:80:71:49:d7:51:cd:36:a4:
                    fa:f6:a3:a0:82:7d:cf:21:b4:d1:a7:f6:9b:3c:f1:
                    5f:98:03:22:2a:06:e6:b7:f9:40:56:58:d0:c8:05:
                    fa:45:b9:0d:a5:42:16:f8:8f:c6:5c:56:b3:03:fb:
                    14:90:cb:88:62:29:c0:38:33:42:ad:d4:c2:ee:bb:
                    d9:90:9f:3e:6e:c5:7e:42:77:a9:d5:ff:95:0b:6f:
                    6c:42:75:9b:4d:0a:06:ee:91:03:91:8b:a3:a0:c7:
                    20:2a:f4:d1:4a:65:61:38:40:18:ef:2b:70:23:62:
                    30:40:5d:2b:15:13:ed:f4:f9:e8:33:df:fa:25:dd:
                    17:e0:68:87:68:52:0a:d2:f1:6b:e8:a1:d3:21:1a:
                    a5:5c:c1:1e:30:12:a9:22:84:0d:6c:b9:97:bd:9b:
                    d4:32:7a:31:b8:ae:39:c6:bf:58:58:28:be:b7:41:
                    14:cb:f2:24:39:e9:10:4e:7e:8f:74:9b:fd:f6:20:
                    70:15:92:56:8e:a4:73:30:5c:e2:4b:c8:d5:4f:fc:
                    12:b8:e7:22:64:00:15:e7:63:6d:23:52:4c:fe:58:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D5:7D:0E:07:E9:7B:F0:4F:5B:85:DD:82:01:D2:16:77:E2:11:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1b5ede87-9de3-46c1-bcc7-7092873d9d44/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1b5ede87-9de3-46c1-bcc7-7092873d9d44/ca1ab15ff4ebb3366171e185a3e27e303ed81d47.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.156.0/22
                IPv6:
                  2803:a6a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266890

    Signature Algorithm: sha256WithRSAEncryption
         63:a8:5f:78:29:85:1d:f8:cc:15:9a:47:7c:8b:f5:df:fe:d5:
         8d:65:6f:58:06:75:ae:70:d8:2f:f7:0c:00:7c:91:76:52:9f:
         4b:09:40:e2:fa:09:d3:27:88:84:ce:32:01:48:91:45:f0:be:
         7a:cd:a9:79:33:c2:17:d5:da:20:d8:76:51:40:51:84:27:b8:
         3b:13:26:c1:4b:cb:f8:3b:64:20:cb:68:44:b6:e9:32:cd:40:
         b9:b7:4a:7e:79:f2:93:89:4f:d0:06:37:f5:7e:a2:b1:61:03:
         24:51:94:a9:5a:06:e7:48:79:de:7a:c5:46:c1:8c:b9:9e:22:
         2c:c8:b4:0d:06:a3:81:67:b1:71:d6:b6:57:00:e2:2a:7f:35:
         a2:92:94:49:1e:00:48:ec:dc:5b:1e:52:0a:c3:49:c2:81:62:
         1c:c5:0e:a5:8b:f0:a7:fd:a0:41:b5:7e:8d:58:03:8f:13:9d:
         67:7d:a6:6f:e0:8f:63:0a:56:96:2e:7c:91:a5:40:25:de:ec:
         7d:82:f1:a8:a2:f9:08:55:bb:af:17:0e:ff:4b:a9:fe:2f:7d:
         b7:cd:d8:c0:81:cd:81:12:58:70:17:7c:14:8e:f8:c9:1a:65:
         69:79:80:f3:c3:f2:8e:db:68:8c:b7:51:99:64:76:ae:eb:3a:
         4f:fd:4a:c1
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOyYADANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYwNTE2NDUxNloXDTI0MDYyMTA2MDAw
MFowMzExMC8GA1UEAxMoY2ExYWIxNWZmNGViYjMzNjYxNzFlMTg1YTNlMjdlMzAz
ZWQ4MWQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAINvKPiBt50A
9nUn6lk2ZWAi90W4StIraAcbWitpqahghLX6e4BxSddRzTak+vajoIJ9zyG00af2
mzzxX5gDIioG5rf5QFZY0MgF+kW5DaVCFviPxlxWswP7FJDLiGIpwDgzQq3Uwu67
2ZCfPm7FfkJ3qdX/lQtvbEJ1m00KBu6RA5GLo6DHICr00UplYThAGO8rcCNiMEBd
KxUT7fT56DPf+iXdF+Boh2hSCtLxa+ih0yEapVzBHjASqSKEDWy5l72b1DJ6Mbiu
Oca/WFgovrdBFMvyJDnpEE5+j3Sb/fYgcBWSVo6kczBc4kvI1U/8ErjnImQAFedj
bSNSTP5YJxUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSo1X0OB+l78E9bhd2CAdIW
d+IRlDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xYjVlZGU4Ny05ZGUz
LTQ2YzEtYmNjNy03MDkyODczZDlkNDQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWI1ZWRlODctOWRlMy00
NmMxLWJjYzctNzA5Mjg3M2Q5ZDQ0L2NhMWFiMTVmZjRlYmIzMzY2MTcxZTE4NWEz
ZTI3ZTMwM2VkODFkNDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2gnDANBAIAAjAHAwUAKAOmoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEoowDQYJKoZIhvcNAQELBQADggEBAGOo
X3gphR34zBWaR3yL9d/+1Y1lb1gGda5w2C/3DAB8kXZSn0sJQOL6CdMniITOMgFI
kUXwvnrNqXkzwhfV2iDYdlFAUYQnuDsTJsFLy/g7ZCDLaES26TLNQLm3Sn558pOJ
T9AGN/V+orFhAyRRlKlaBudIed56xUbBjLmeIizItA0Go4FnsXHWtlcA4ip/NaKS
lEkeAEjs3FseUgrDScKBYhzFDqWL8Kf9oEG1fo1YA48TnWd9pm/gj2MKVpYufJGl
QCXe7H2C8aii+QhVu68XDv9Lqf4vfbfN2MCBzYESWHAXfBSO+MkaZWl5gPPD8o7b
aIy3UZlkdq7rOk/9SsE=
-----END CERTIFICATE-----