Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer
File:                     cd16539c52bd19701a219cb7f91b852671af6b16.cer (raw, json)
Hash identifier:          O9KKK/2oy27ul7hsZsRgNr5wcTsusRb5+URt1mZienk=
Subject key identifier:   65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F61211
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Mar 2022 19:27:31 +0000
Certificate not after:    Sat 21 Sep 2024 20:05:52 +0000
Subordinate resources:    AS: 267729
                          IP: 45.167.220.0/22
                          IP: 2803:e5a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16126481 (0xf61211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 25 19:27:31 2022 GMT
            Not After : Sep 21 20:05:52 2024 GMT
        Subject: CN=cd16539c52bd19701a219cb7f91b852671af6b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:31:ee:a3:46:97:5c:bd:d9:7b:37:01:c3:
                    4e:66:7c:db:f9:36:b0:38:e2:21:02:82:4f:48:af:
                    5c:1b:b6:65:e2:87:ed:13:7a:4e:22:bb:20:46:69:
                    95:b8:d7:43:ad:db:be:c1:6d:ec:29:df:d8:0b:9c:
                    14:64:eb:66:1f:3a:a1:90:c8:ec:84:ac:50:b8:b4:
                    13:10:39:e4:a3:46:15:04:70:53:68:8d:a4:f3:14:
                    9b:26:e1:31:05:bb:b4:2e:b4:3c:ca:32:4c:3c:5f:
                    7d:18:fa:78:97:0a:17:3b:71:c1:90:c7:98:54:4a:
                    4d:84:65:b6:01:10:06:fb:0e:cf:f4:79:72:ce:84:
                    d3:5d:51:bc:ed:f1:24:54:f2:30:6d:74:db:77:d1:
                    4f:e9:29:57:3d:0c:36:ca:ba:6b:ac:65:a0:95:32:
                    51:5a:e7:ad:66:53:8d:0f:8f:f3:45:ff:ff:29:4b:
                    0a:ed:eb:87:47:39:f3:34:5c:eb:3d:10:98:97:5f:
                    f2:2e:c4:67:eb:a9:bc:db:52:5c:01:50:ed:84:a6:
                    cb:bc:54:c6:da:b1:ed:81:0a:b0:4e:25:f1:0d:48:
                    1c:7c:c5:eb:6a:91:af:05:f5:e4:a6:b2:9f:ae:cd:
                    de:16:77:9d:d7:74:92:d3:3b:e7:a1:6b:2e:91:09:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.220.0/22
                IPv6:
                  2803:e5a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267729

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:90:a9:09:4d:d6:26:da:0d:d8:97:10:56:eb:0a:1e:f0:
         70:d4:e7:ba:4e:da:d9:7e:54:1b:ae:4f:06:08:0c:32:c3:cc:
         81:d3:89:c9:08:6d:13:4a:1c:d6:f6:42:23:e1:06:bb:d1:b3:
         e8:82:95:46:78:8e:b2:9a:ea:63:a4:07:2e:a6:cc:93:c1:80:
         b9:f2:c8:d4:42:82:16:ff:2c:91:2e:98:60:ac:b9:53:5f:db:
         8a:2a:51:6b:87:f2:47:33:f3:3f:f2:c8:57:1c:4a:69:42:ec:
         a8:c7:0c:9f:9e:7a:87:46:12:9b:c8:96:61:40:b2:32:05:de:
         2a:3d:14:07:9a:63:b8:d7:a4:e3:d2:84:6f:76:3e:ff:fc:de:
         be:fc:ba:57:a3:16:6b:63:39:3c:31:5b:5f:96:8d:4e:9f:06:
         7b:7b:b4:9c:0c:11:b1:72:c7:e7:2d:a3:86:33:be:26:1f:9e:
         36:31:81:b7:3c:db:66:ba:07:05:b1:f2:d3:4a:11:46:8a:ca:
         20:ca:f0:ed:3c:be:69:db:0f:6a:59:0c:ce:d2:bd:7c:55:da:
         9e:51:f5:32:5b:c7:61:f1:4f:09:29:1f:7f:6e:61:35:d5:b5:
         f2:49:04:95:57:1d:b6:51:b9:6a:c5:12:7d:a3:8a:60:e2:c6:
         89:4b:ae:4d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPYSETANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDMyNTE5MjczMVoXDTI0MDkyMTIwMDU1
MlowMzExMC8GA1UEAxMoY2QxNjUzOWM1MmJkMTk3MDFhMjE5Y2I3ZjkxYjg1MjY3
MWFmNmIxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRBMe6jRpdc
vdl7NwHDTmZ82/k2sDjiIQKCT0ivXBu2ZeKH7RN6TiK7IEZplbjXQ63bvsFt7Cnf
2AucFGTrZh86oZDI7ISsULi0ExA55KNGFQRwU2iNpPMUmybhMQW7tC60PMoyTDxf
fRj6eJcKFztxwZDHmFRKTYRltgEQBvsOz/R5cs6E011RvO3xJFTyMG1023fRT+kp
Vz0MNsq6a6xloJUyUVrnrWZTjQ+P80X//ylLCu3rh0c58zRc6z0QmJdf8i7EZ+up
vNtSXAFQ7YSmy7xUxtqx7YEKsE4l8Q1IHHzF62qRrwX15Kayn67N3hZ3ndd0ktM7
56FrLpEJLvUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRlTvglA+5P1DkPCCjiNW+u
WYLQNjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNTY3NzliOS03NGU3
LTRmYzMtODFmNi0zMjY0YWI5ZmM5ZmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDU2Nzc5YjktNzRlNy00
ZmMzLTgxZjYtMzI2NGFiOWZjOWZjL2NkMTY1MzljNTJiZDE5NzAxYTIxOWNiN2Y5
MWI4NTI2NzFhZjZiMTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2n3DANBAIAAjAHAwUAKAPloDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFdEwDQYJKoZIhvcNAQELBQADggEBALHF
kKkJTdYm2g3YlxBW6woe8HDU57pO2tl+VBuuTwYIDDLDzIHTickIbRNKHNb2QiPh
BrvRs+iClUZ4jrKa6mOkBy6mzJPBgLnyyNRCghb/LJEumGCsuVNf24oqUWuH8kcz
8z/yyFccSmlC7KjHDJ+eeodGEpvIlmFAsjIF3io9FAeaY7jXpOPShG92Pv/83r78
ulejFmtjOTwxW1+WjU6fBnt7tJwMEbFyx+cto4YzviYfnjYxgbc822a6BwWx8tNK
EUaKyiDK8O08vmnbD2pZDM7SvXxV2p5R9TJbx2HxTwkpH39uYTXVtfJJBJVXHbZR
uWrFEn2jimDixolLrk0=
-----END CERTIFICATE-----