Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d170fa20ab91b4ab052483fd1d1a50af0baea258.cer
File:                     d170fa20ab91b4ab052483fd1d1a50af0baea258.cer (raw, json)
Hash identifier:          FXswi30pcoosiYg49g+W45dqn6GHOqSLsLwYkEQ9g8M=
Subject key identifier:   03:A2:F3:95:BA:18:1F:A0:62:B4:C8:94:F9:BC:7C:6D:37:C5:C9:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D32DAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Sep 2022 14:00:24 +0000
Certificate not after:    Sat 15 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 272881
                          IP: 2803:1a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13839788 (0xd32dac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 14:00:24 2022 GMT
            Not After : Jun 15 06:00:00 2024 GMT
        Subject: CN=d170fa20ab91b4ab052483fd1d1a50af0baea258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:2a:8d:c3:a4:33:13:de:e4:72:b5:98:c6:
                    73:b5:80:4c:62:0c:0e:c0:cd:df:2c:cd:2a:a5:8b:
                    cc:2c:2f:e8:d5:a2:cb:b5:3e:31:ba:6a:8d:83:c6:
                    75:1b:f6:4d:3a:2d:ea:2d:a4:a5:db:74:e0:a9:0c:
                    7d:b2:51:35:6d:8d:c5:57:47:7a:21:d0:45:04:18:
                    e0:34:be:2d:13:85:1f:8b:e5:ce:ef:65:94:d5:80:
                    0a:99:b5:8b:da:01:20:d8:89:ed:7f:3b:62:b7:1d:
                    a7:bc:f3:d9:3b:b3:6c:3c:3e:90:81:dc:89:79:2d:
                    27:2d:7a:27:b5:48:e0:96:c2:42:9c:55:48:83:f5:
                    cf:5c:ec:dd:04:b5:a7:25:91:42:e0:37:ac:91:0f:
                    72:53:7c:71:b5:ce:88:93:b5:0d:90:37:b2:55:ee:
                    0e:2f:8d:ab:8a:4b:3a:67:37:af:7a:41:82:fc:5f:
                    d0:1c:73:21:66:54:13:fe:30:d7:34:b0:f6:a1:e5:
                    75:0b:59:29:46:ca:6c:cc:bf:13:5a:19:1c:47:9c:
                    af:90:72:90:83:54:96:37:d7:c0:e9:ae:d9:e7:a9:
                    84:ed:b4:d7:7f:c3:72:0d:e2:15:ae:d8:bb:ab:13:
                    58:92:7e:3b:da:a5:3f:1c:31:0e:7a:3f:0b:e2:db:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:F3:95:BA:18:1F:A0:62:B4:C8:94:F9:BC:7C:6D:37:C5:C9:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272881

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:f7:ba:a0:65:59:5b:e8:07:a0:f9:e4:3e:37:a9:33:7f:
         27:53:29:13:5e:6d:92:26:c1:73:c3:60:e6:cc:61:ae:72:c1:
         86:2d:a5:74:aa:9e:4f:18:3e:28:78:df:73:47:05:6e:77:89:
         1c:ac:47:44:e4:a9:bb:b8:bb:2f:ca:b4:27:dc:39:55:71:e5:
         ad:17:7a:1e:79:0e:49:73:39:cd:5f:4c:02:b4:00:22:13:a9:
         92:03:bc:20:02:e3:b9:23:d0:b8:73:38:29:86:13:b3:f9:37:
         08:19:d3:23:10:34:7c:8e:2f:7a:c3:2f:12:f7:49:38:97:a3:
         b6:f1:8a:95:41:d6:8e:eb:37:09:00:81:6d:d8:63:c3:d0:ea:
         c6:82:a7:14:26:08:5a:25:82:d5:c1:f0:af:d0:c9:d4:16:13:
         f7:c0:de:d2:95:a5:cf:74:8a:63:27:09:17:62:4b:ed:12:31:
         bd:e3:6c:a6:59:e0:28:81:ae:90:d2:69:b4:d6:15:9e:45:6e:
         6e:b3:72:c7:e1:54:5d:8e:fe:3b:99:e5:1d:c0:18:3e:6c:47:
         5c:5c:64:7a:72:47:26:45:8b:c1:20:df:ef:54:0e:71:0e:d7:
         33:02:42:50:62:33:99:aa:6a:e4:09:e3:a8:38:38:1f:05:55:
         a9:d7:cb:b1
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEANMtrDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkyODE0MDAyNFoXDTI0MDYxNTA2MDAw
MFowMzExMC8GA1UEAxMoZDE3MGZhMjBhYjkxYjRhYjA1MjQ4M2ZkMWQxYTUwYWYw
YmFlYTI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANbqKo3DpDMT
3uRytZjGc7WATGIMDsDN3yzNKqWLzCwv6NWiy7U+MbpqjYPGdRv2TTot6i2kpdt0
4KkMfbJRNW2NxVdHeiHQRQQY4DS+LROFH4vlzu9llNWACpm1i9oBINiJ7X87Yrcd
p7zz2TuzbDw+kIHciXktJy16J7VI4JbCQpxVSIP1z1zs3QS1pyWRQuA3rJEPclN8
cbXOiJO1DZA3slXuDi+Nq4pLOmc3r3pBgvxf0BxzIWZUE/4w1zSw9qHldQtZKUbK
bMy/E1oZHEecr5BykINUljfXwOmu2eephO2013/Dcg3iFa7Yu6sTWJJ+O9qlPxwx
Dno/C+LbJY0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQDovOVuhgfoGK0yJT5vHxt
N8XJLzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yODBlMDkxYS1hNzU3
LTQ4YTUtODRmYy04ZGNmNDZhZjA5MTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjgwZTA5MWEtYTc1Ny00
OGE1LTg0ZmMtOGRjZjQ2YWYwOTE5L2QxNzBmYTIwYWI5MWI0YWIwNTI0ODNmZDFk
MWE1MGFmMGJhZWEyNTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGpAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCnxMA0GCSqGSIb3DQEBCwUAA4IBAQAMk/e6oGVZW+gHoPnkPjep
M38nUykTXm2SJsFzw2DmzGGucsGGLaV0qp5PGD4oeN9zRwVud4kcrEdE5Km7uLsv
yrQn3DlVceWtF3oeeQ5JcznNX0wCtAAiE6mSA7wgAuO5I9C4czgphhOz+TcIGdMj
EDR8ji96wy8S90k4l6O28YqVQdaO6zcJAIFt2GPD0OrGgqcUJghaJYLVwfCv0MnU
FhP3wN7SlaXPdIpjJwkXYkvtEjG942ymWeAoga6Q0mm01hWeRW5us3LH4VRdjv47
meUdwBg+bEdcXGR6ckcmRYvBIN/vVA5xDtczAkJQYjOZqmrkCeOoODgfBVWp18ux
-----END CERTIFICATE-----