Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21229289c57a4e5d9288cb35fdfe657f437216e.cer
File:                     d21229289c57a4e5d9288cb35fdfe657f437216e.cer (raw, json)
Hash identifier:          KvZmqpvInrXgziUo1ejNqIZ/CrZ6H0/xpUrezbESiIo=
Subject key identifier:   59:AE:DB:AB:E5:8C:86:79:FA:DE:BA:C7:F4:BA:1A:EB:B3:EE:76:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5059C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 02:21:59 +0000
Certificate not after:    Mon 10 Jun 2024 15:14:08 +0000
Subordinate resources:    AS: 272838
                          IP: 2803:9c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15009180 (0xe5059c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 02:21:59 2023 GMT
            Not After : Jun 10 15:14:08 2024 GMT
        Subject: CN=d21229289c57a4e5d9288cb35fdfe657f437216e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:12:55:ce:44:a6:37:0d:06:64:75:b4:af:
                    a0:1d:38:6d:b7:c1:3f:a8:d2:45:17:4c:09:09:7f:
                    d4:2a:25:f9:7e:0b:f2:71:14:51:04:52:ae:76:4f:
                    9c:b6:0a:18:86:05:35:d9:c5:92:9b:62:c5:b7:3f:
                    29:48:25:a5:ff:da:4f:9b:25:64:6e:fa:46:e6:4f:
                    6f:2d:43:2c:1d:1f:30:dd:d2:73:68:80:1e:5b:cf:
                    f4:1b:28:50:27:4c:c3:87:f8:e3:63:19:fc:3a:1e:
                    1f:9c:59:12:03:94:09:a4:0a:41:3c:3a:da:4d:7f:
                    76:dc:b4:4c:e3:3b:e6:87:b6:4a:67:9f:34:c0:cc:
                    90:6c:76:da:c1:ca:68:79:0d:3f:26:2a:22:cf:f0:
                    b5:58:40:64:49:c2:fb:1b:a0:d6:93:49:d6:bd:b8:
                    9a:c1:a1:b1:d7:9b:63:06:4c:a3:4c:71:54:59:87:
                    b8:82:89:65:f0:5b:d0:08:b3:90:ee:52:dc:92:09:
                    e4:9e:80:5b:fc:66:b3:25:e5:fc:dc:1a:f2:4b:35:
                    12:b1:ca:54:92:ce:80:39:3e:d5:f8:db:98:a5:0c:
                    f1:2c:78:bd:da:bc:d9:fb:21:4d:8d:96:e8:33:49:
                    41:35:c6:44:5a:bc:81:ed:29:1e:d1:f7:6a:9a:dc:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:DB:AB:E5:8C:86:79:FA:DE:BA:C7:F4:BA:1A:EB:B3:EE:76:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272838

    Signature Algorithm: sha256WithRSAEncryption
         97:f4:a9:d6:2c:1c:4f:b1:40:86:b4:f1:05:99:97:16:55:7d:
         6f:1e:4a:21:77:5e:41:63:dd:eb:09:d9:9d:f8:d1:ef:21:c4:
         bc:12:17:20:97:63:e8:42:b9:d5:e2:1f:37:72:72:2b:2e:60:
         86:8b:0e:3a:80:31:76:14:97:f0:61:41:66:98:f1:ce:3f:84:
         b1:c0:99:be:a8:95:f2:38:16:77:b3:77:51:80:84:7d:2d:35:
         71:a2:45:f3:41:21:38:2c:b4:a1:65:30:64:a2:2f:41:23:54:
         e2:38:2c:e7:0d:7e:48:31:cf:3a:31:14:45:84:d0:d1:e8:e6:
         e2:6f:de:0f:79:9b:fc:0e:ac:26:e1:f6:b4:f8:2e:fa:d6:8e:
         7a:6c:78:46:27:9f:05:94:d8:69:17:05:00:e4:ad:4b:44:d9:
         31:77:f5:75:d5:63:01:ca:5e:3d:96:05:da:04:63:ad:d5:fc:
         70:71:c6:10:83:bd:f0:8e:a9:fe:f7:d6:be:5f:97:69:25:08:
         2a:2c:c9:63:9d:5f:04:13:ea:73:b9:22:ec:c7:83:11:1c:96:
         9e:e8:44:04:ea:44:53:c0:43:2d:db:15:b4:36:ea:38:2a:75:
         18:47:d0:7e:d7:29:d1:22:01:b5:fa:dd:29:52:61:e9:d5:b5:
         29:70:da:b4
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOUFnDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMjAyMjE1OVoXDTI0MDYxMDE1MTQw
OFowMzExMC8GA1UEAxMoZDIxMjI5Mjg5YzU3YTRlNWQ5Mjg4Y2IzNWZkZmU2NTdm
NDM3MjE2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIKeElXORKY3
DQZkdbSvoB04bbfBP6jSRRdMCQl/1Col+X4L8nEUUQRSrnZPnLYKGIYFNdnFkpti
xbc/KUglpf/aT5slZG76RuZPby1DLB0fMN3Sc2iAHlvP9BsoUCdMw4f442MZ/Doe
H5xZEgOUCaQKQTw62k1/dty0TOM75oe2SmefNMDMkGx22sHKaHkNPyYqIs/wtVhA
ZEnC+xug1pNJ1r24msGhsdebYwZMo0xxVFmHuIKJZfBb0AizkO5S3JIJ5J6AW/xm
syXl/Nwa8ks1ErHKVJLOgDk+1fjbmKUM8Sx4vdq82fshTY2W6DNJQTXGRFq8ge0p
HtH3aprcwNsCAwEAAaOCAvswggL3MB0GA1UdDgQWBBRZrtur5YyGefreusf0uhrr
s+52uzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82N2MxOWQ4ZC05NmZl
LTRlNDgtODU0Ny04NTJlNjdkNjcxMjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjdjMTlkOGQtOTZmZS00
ZTQ4LTg1NDctODUyZTY3ZDY3MTI0L2QyMTIyOTI4OWM1N2E0ZTVkOTI4OGNiMzVm
ZGZlNjU3ZjQzNzIxNmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnJAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCnGMA0GCSqGSIb3DQEBCwUAA4IBAQCX9KnWLBxPsUCGtPEFmZcW
VX1vHkohd15BY93rCdmd+NHvIcS8Ehcgl2PoQrnV4h83cnIrLmCGiw46gDF2FJfw
YUFmmPHOP4SxwJm+qJXyOBZ3s3dRgIR9LTVxokXzQSE4LLShZTBkoi9BI1TiOCzn
DX5IMc86MRRFhNDR6Obib94PeZv8Dqwm4fa0+C761o56bHhGJ58FlNhpFwUA5K1L
RNkxd/V11WMByl49lgXaBGOt1fxwccYQg73wjqn+99a+X5dpJQgqLMljnV8EE+pz
uSLsx4MRHJae6EQE6kRTwEMt2xW0Nuo4KnUYR9B+1ynRIgG1+t0pUmHp1bUpcNq0
-----END CERTIFICATE-----