Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1f68c0822487fbab8a2d6ad5ca533d77d11829a.cer
File:                     d1f68c0822487fbab8a2d6ad5ca533d77d11829a.cer (raw, json)
Hash identifier:          JYzlCx1dpkQlxqwrmGAX7MwuR3ziasxknDn8qVMJNpY=
Subject key identifier:   9D:CA:F9:9D:C1:21:32:7C:10:97:00:8F:56:FF:34:56:D8:37:B8:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF192D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/d1f68c0822487fbab8a2d6ad5ca533d77d11829a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 13:48:59 +0000
Certificate not after:    Tue 16 Jul 2024 15:34:06 +0000
Subordinate resources:    IP: 179.42.76.0/23
                          IP: 2803:6010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14620973 (0xdf192d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 16 13:48:59 2023 GMT
            Not After : Jul 16 15:34:06 2024 GMT
        Subject: CN=d1f68c0822487fbab8a2d6ad5ca533d77d11829a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:f4:a8:ec:d3:62:f6:80:1e:44:c4:35:ec:
                    a6:af:64:db:19:7c:90:c6:40:b2:f6:65:4d:12:e7:
                    d2:66:95:b4:ef:6f:51:2a:bc:b8:19:70:46:5b:aa:
                    d0:a8:74:da:53:4e:cc:fa:9d:c0:4a:ac:58:d7:69:
                    55:cb:b1:e1:03:09:24:ce:b1:a2:0e:e8:98:e7:6d:
                    74:34:6f:8f:0c:c4:93:f8:f7:cd:77:de:ca:3f:a1:
                    fe:5b:da:26:d1:06:5a:b1:ff:61:d8:cc:4c:4e:03:
                    4b:9b:0e:46:e0:aa:06:7e:25:2e:6d:3f:c3:25:fb:
                    b1:2d:5b:2b:3d:7b:68:fb:23:7c:6a:d7:da:39:6c:
                    d5:63:fe:9f:00:19:4c:41:73:55:3c:ef:82:ed:ba:
                    08:7b:9a:f9:d6:79:42:57:ef:c2:5b:0f:bd:c7:8b:
                    c8:9e:18:89:2c:9d:f5:0c:d7:95:33:03:98:74:51:
                    40:17:1f:5d:b3:9d:c1:3f:11:a1:6c:ea:7d:ea:fd:
                    54:dd:ab:50:a8:0a:8e:ee:ce:49:f2:d7:5b:28:5f:
                    74:71:ab:31:ea:b6:98:7c:73:2e:42:a2:d9:cf:e7:
                    31:e4:10:ee:04:11:bd:0f:d3:9a:fc:41:9d:4b:11:
                    c7:b2:6f:90:f3:50:f8:81:5f:28:11:bb:2f:7f:b2:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:F9:9D:C1:21:32:7C:10:97:00:8F:56:FF:34:56:D8:37:B8:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/d1f68c0822487fbab8a2d6ad5ca533d77d11829a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.76.0/23
                IPv6:
                  2803:6010::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:02:0d:8f:72:af:ce:5d:2d:d9:a4:21:ec:e0:1a:83:1a:89:
         38:95:27:17:03:23:5c:c4:58:36:71:98:30:86:89:89:cc:64:
         69:4b:ca:24:d9:1c:34:6f:0b:76:fd:f9:fa:45:b4:3e:71:dd:
         34:b6:d2:dd:8b:1d:32:6b:c6:97:92:f8:eb:07:50:66:d7:c8:
         27:b6:e7:90:1d:8d:86:8b:71:cb:bf:b6:bf:b6:c0:77:5f:6e:
         df:57:3e:3e:6c:bf:47:fe:bf:85:5b:d5:88:6a:8b:4e:a8:83:
         cc:e5:17:7e:c7:20:f5:bf:eb:12:8b:76:41:2b:b2:29:68:df:
         c7:2c:2a:aa:15:72:1d:0e:ce:f7:e7:5f:b0:58:49:ef:31:27:
         eb:c0:78:1e:5c:f6:7b:97:cd:f1:43:98:2f:c1:37:52:80:0a:
         83:dc:14:4c:25:d1:7a:65:49:a6:2c:25:a8:67:6a:88:55:6f:
         ac:93:7d:d7:ab:64:b8:88:4f:01:35:a2:75:e5:bc:de:2e:ec:
         42:e2:3f:d3:da:74:6a:e6:bf:4b:02:0a:58:75:7a:3e:7c:94:
         26:9b:d9:62:d9:3e:be:d8:d5:93:10:71:41:59:79:45:72:9c:
         ac:ab:31:6b:ae:e2:92:82:29:9b:f7:37:8d:c5:8d:e3:6f:ca:
         7c:78:53:4c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAN8ZLTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDIxNjEzNDg1OVoXDTI0MDcxNjE1MzQw
NlowMzExMC8GA1UEAxMoZDFmNjhjMDgyMjQ4N2ZiYWI4YTJkNmFkNWNhNTMzZDc3
ZDExODI5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKIH9Kjs02L2
gB5ExDXspq9k2xl8kMZAsvZlTRLn0maVtO9vUSq8uBlwRluq0Kh02lNOzPqdwEqs
WNdpVcux4QMJJM6xog7omOdtdDRvjwzEk/j3zXfeyj+h/lvaJtEGWrH/YdjMTE4D
S5sORuCqBn4lLm0/wyX7sS1bKz17aPsjfGrX2jls1WP+nwAZTEFzVTzvgu26CHua
+dZ5QlfvwlsPvceLyJ4YiSyd9QzXlTMDmHRRQBcfXbOdwT8RoWzqfer9VN2rUKgK
ju7OSfLXWyhfdHGrMeq2mHxzLkKi2c/nMeQQ7gQRvQ/TmvxBnUsRx7JvkPNQ+IFf
KBG7L3+ybfUCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBSdyvmdwSEyfBCXAI9W/zRW
2De4QzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMGZlODkwOS1kZjFl
LTRjYzItYTJkYS0wMjMwMTk0ZjExNWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTBmZTg5MDktZGYxZS00
Y2MyLWEyZGEtMDIzMDE5NGYxMTVjL2QxZjY4YzA4MjI0ODdmYmFiOGEyZDZhZDVj
YTUzM2Q3N2QxMTgyOWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAbMqTDANBAIAAjAHAwUAKANgEDAN
BgkqhkiG9w0BAQsFAAOCAQEAOQINj3Kvzl0t2aQh7OAagxqJOJUnFwMjXMRYNnGY
MIaJicxkaUvKJNkcNG8Ldv35+kW0PnHdNLbS3YsdMmvGl5L46wdQZtfIJ7bnkB2N
hotxy7+2v7bAd19u31c+Pmy/R/6/hVvViGqLTqiDzOUXfscg9b/rEot2QSuyKWjf
xywqqhVyHQ7O9+dfsFhJ7zEn68B4Hlz2e5fN8UOYL8E3UoAKg9wUTCXRemVJpiwl
qGdqiFVvrJN916tkuIhPATWideW83i7sQuI/09p0aua/SwIKWHV6PnyUJpvZYtk+
vtjVkxBxQVl5RXKcrKsxa67ikoIpm/c3jcWN42/KfHhTTA==
-----END CERTIFICATE-----