Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d658008cfdae8c7d23365aa2047feba21cb9074d.cer
File:                     d658008cfdae8c7d23365aa2047feba21cb9074d.cer (raw, json)
Hash identifier:          OPayv31s2h3HxYd5+bDIhmQ6wlSO5ndaIklrD5UYSfQ=
Subject key identifier:   F4:74:11:E5:A7:10:20:3B:2B:2D:A9:29:49:78:12:D5:18:3F:B9:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA62B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d658008cfdae8c7d23365aa2047feba21cb9074d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16409271 (0xfa62b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=d658008cfdae8c7d23365aa2047feba21cb9074d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:0f:49:f8:62:5d:70:12:71:2b:29:17:c2:
                    ee:0a:20:ac:d7:d0:a0:07:93:23:e4:7f:1b:10:d8:
                    67:3c:15:86:1e:2d:6c:b3:e3:bb:0a:47:65:74:78:
                    50:4b:7e:25:f6:0c:3d:49:8f:34:d8:55:22:56:ed:
                    3f:34:d3:e2:f5:e0:82:5a:3c:4a:ad:3b:da:f3:37:
                    77:79:0a:0d:a2:dd:1c:05:3a:78:7e:88:6e:0e:0e:
                    7a:e0:8e:47:49:eb:97:35:f8:24:e5:58:5c:58:98:
                    fa:39:93:c5:92:08:85:9b:99:fe:91:32:83:fd:3c:
                    b0:fc:73:68:19:96:48:a7:80:d3:c1:7e:30:f4:3b:
                    ba:f9:b7:fb:46:c9:2e:6a:5c:5e:d5:36:55:f3:dd:
                    72:9e:17:25:93:57:c1:d2:70:cb:02:40:ac:44:4d:
                    ea:e4:d6:70:4b:9c:32:ec:e8:5c:74:6b:23:f7:e6:
                    9c:9c:70:0d:c9:83:3a:7f:2d:32:61:63:31:3d:58:
                    81:ae:9e:e4:d5:5b:f5:53:b0:e1:87:bf:ce:ee:49:
                    24:ec:d8:61:b7:9b:3d:57:a1:4e:97:11:80:fa:3f:
                    9a:85:69:63:3a:b0:60:68:57:0a:e3:36:6c:30:04:
                    9a:7c:95:47:82:ab:ca:c3:e5:ae:ce:28:a4:9c:70:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:11:E5:A7:10:20:3B:2B:2D:A9:29:49:78:12:D5:18:3F:B9:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d658008cfdae8c7d23365aa2047feba21cb9074d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:35:86:c5:9f:8a:a4:15:91:b1:7c:dc:bc:1c:01:30:59:
         56:1b:c4:4b:b9:ca:04:a8:15:8f:33:97:df:d4:ec:d4:85:0b:
         53:5c:bb:9b:bb:ec:38:15:82:6a:9d:fd:5a:e4:03:ea:77:9a:
         3e:e1:f8:84:a5:1d:82:3a:e2:8f:ee:73:f7:f7:e8:5d:c8:d0:
         43:94:fe:8a:4b:38:ce:e8:49:a4:42:2c:d0:94:96:de:30:04:
         d7:df:60:b8:44:8b:bd:c5:51:9b:4c:47:ac:28:72:af:f7:0e:
         a8:4d:27:5e:10:f6:6a:c7:35:51:96:53:4c:c0:a3:fa:7b:ee:
         af:fa:b5:be:5a:95:ce:e9:22:ca:44:f0:8c:01:8e:df:30:7f:
         e2:7f:9a:ef:fd:2a:83:17:ed:52:c2:64:15:b9:27:6a:11:a0:
         99:1d:7f:da:98:0f:af:1e:a4:3b:f4:97:a7:0f:e9:57:14:f5:
         74:2e:fd:98:fe:99:42:3b:89:53:c6:ae:44:21:35:5a:08:45:
         10:9c:f9:b0:81:25:e9:9f:ed:df:71:f6:1a:b2:54:3c:d7:a8:
         32:b4:f9:96:57:dc:c9:87:ef:cd:7e:8c:2d:76:18:de:c5:7c:
         87:bd:0e:72:31:57:be:e4:a8:50:7b:1b:68:70:b8:e7:18:33:
         f6:53:08:f4
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAPpitzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcyODE4MTA0OFoXDTI1MDUyNzE1MTYz
NVowMzExMC8GA1UEAxMoZDY1ODAwOGNmZGFlOGM3ZDIzMzY1YWEyMDQ3ZmViYTIx
Y2I5MDc0ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJZ2D0n4Yl1w
EnErKRfC7gogrNfQoAeTI+R/GxDYZzwVhh4tbLPjuwpHZXR4UEt+JfYMPUmPNNhV
IlbtPzTT4vXgglo8Sq072vM3d3kKDaLdHAU6eH6Ibg4OeuCOR0nrlzX4JOVYXFiY
+jmTxZIIhZuZ/pEyg/08sPxzaBmWSKeA08F+MPQ7uvm3+0bJLmpcXtU2VfPdcp4X
JZNXwdJwywJArERN6uTWcEucMuzoXHRrI/fmnJxwDcmDOn8tMmFjMT1Yga6e5NVb
9VOw4Ye/zu5JJOzYYbebPVehTpcRgPo/moVpYzqwYGhXCuM2bDAEmnyVR4KrysPl
rs4opJxwW1kCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBT0dBHlpxAgOystqSlJeBLV
GD+5RTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYzc4YTY4Yi0yNjgy
LTQzMDgtYjc2ZS0wYTVjMzU2ZDAwMjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGM3OGE2OGItMjY4Mi00
MzA4LWI3NmUtMGE1YzM1NmQwMDI1L2Q2NTgwMDhjZmRhZThjN2QyMzM2NWFhMjA0
N2ZlYmEyMWNiOTA3NGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAWUAADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEKpcwDQYJKoZIhvcNAQELBQADggEBAILPNYbFn4qkFZGxfNy8
HAEwWVYbxEu5ygSoFY8zl9/U7NSFC1Ncu5u77DgVgmqd/VrkA+p3mj7h+ISlHYI6
4o/uc/f36F3I0EOU/opLOM7oSaRCLNCUlt4wBNffYLhEi73FUZtMR6wocq/3DqhN
J14Q9mrHNVGWU0zAo/p77q/6tb5alc7pIspE8IwBjt8wf+J/mu/9KoMX7VLCZBW5
J2oRoJkdf9qYD68epDv0l6cP6VcU9XQu/Zj+mUI7iVPGrkQhNVoIRRCc+bCBJemf
7d9x9hqyVDzXqDK0+ZZX3MmH781+jC12GN7FfIe9DnIxV77kqFB7G2hwuOcYM/ZT
CPQ=
-----END CERTIFICATE-----