Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.cer
File:                     d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.cer (raw, json)
Hash identifier:          IkM7aRrPYzeJNWXAD6T0cefXsEHeR43f9bqMWwknzY0=
Subject key identifier:   72:5C:F8:2C:49:D5:7B:D0:20:FF:A8:E8:5B:E6:42:D7:15:1C:21:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E57F62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 21:16:44 +0000
Certificate not after:    Sat 21 Sep 2024 06:00:00 +0000
Subordinate resources:    AS: 272916
                          IP: 2803:ee90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15040354 (0xe57f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 21:16:44 2023 GMT
            Not After : Sep 21 06:00:00 2024 GMT
        Subject: CN=d9bb9bbf7ecac2aff96b75b299c640aca9ffe830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:11:dc:df:32:67:9d:ed:2f:6f:b9:a7:89:
                    6a:dd:a9:73:89:75:e7:0c:21:54:b3:30:1e:5e:6b:
                    b1:a2:80:7f:16:65:ac:b3:2a:dc:27:34:85:d3:07:
                    5e:fa:ee:e7:d1:8f:8a:17:70:46:bc:ce:60:0b:c8:
                    fa:dd:b3:e1:9f:96:f1:a0:de:d6:37:bb:4a:fb:45:
                    18:3d:a4:a1:3c:40:42:f4:e9:46:0e:b9:35:5b:3b:
                    53:d4:e0:1d:45:56:d6:5e:ed:aa:51:44:5f:ec:e7:
                    54:1f:b0:b0:5d:e7:8b:7e:c4:f8:b7:e0:3f:38:fe:
                    b8:94:8e:d7:ec:1d:6b:4f:d0:36:92:0d:69:5d:ca:
                    ca:0b:5b:a2:cf:19:5c:1a:01:19:83:2a:43:65:4f:
                    56:65:1c:95:28:cf:0b:64:89:e1:ca:43:12:d9:78:
                    58:23:6f:20:81:18:5b:99:d6:ff:54:4a:8e:86:41:
                    9f:f2:80:f8:66:28:d8:fa:04:b0:77:b9:8b:93:81:
                    b8:af:96:62:a6:9c:f1:6f:cb:71:61:5b:28:d3:3a:
                    99:0a:62:1e:72:57:f0:ce:0b:5c:88:5f:d8:54:b6:
                    4e:12:0e:64:d8:0a:2f:b5:ff:f9:eb:2b:a6:a6:17:
                    ff:5a:0e:db:04:c1:a1:02:2f:ea:81:34:ca:dd:d7:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:F8:2C:49:D5:7B:D0:20:FF:A8:E8:5B:E6:42:D7:15:1C:21:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272916

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:6f:f3:0f:d8:89:33:01:54:2d:61:17:83:6d:0f:a4:21:
         74:62:dc:19:0d:f1:29:50:b0:8b:99:90:42:07:8f:16:07:7a:
         13:5b:86:3c:57:f1:5b:20:59:b9:f3:43:f5:f4:98:63:70:25:
         b4:5a:73:68:c0:a8:79:72:0a:b5:7d:bd:17:87:60:12:67:e9:
         0c:d5:38:76:06:be:08:b1:a2:7a:aa:cd:07:df:63:12:6f:50:
         a0:57:c9:f6:e4:b1:f2:21:3c:ef:f3:b5:cc:50:1b:58:26:bd:
         a9:d7:79:b0:1d:7d:b0:bf:11:3e:25:03:f4:07:85:59:6f:09:
         90:33:c1:41:12:96:07:21:56:fa:8f:6f:2c:3d:b4:e4:f3:d7:
         e5:60:b4:6a:d1:fc:2a:1b:b4:ed:c9:e7:cc:e3:b5:11:11:1b:
         b0:e0:5c:c5:e3:5e:e1:c3:7f:b5:3d:2c:0f:7e:fa:eb:2e:24:
         57:f3:51:bf:2b:be:11:5a:8b:00:de:6b:2c:b6:3e:11:ce:c7:
         27:56:70:34:31:0d:a3:86:6e:7c:43:14:28:55:0d:85:cf:bd:
         83:8f:4b:2c:4d:5b:d5:ed:96:66:80:c5:55:cc:03:bc:20:1e:
         ca:5a:50:34:69:0e:e2:dd:a6:19:79:7a:4c:da:25:84:7b:86:
         3a:43:35:67
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOV/YjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxMzIxMTY0NFoXDTI0MDkyMTA2MDAw
MFowMzExMC8GA1UEAxMoZDliYjliYmY3ZWNhYzJhZmY5NmI3NWIyOTljNjQwYWNh
OWZmZTgzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0CEdzfMmed
7S9vuaeJat2pc4l15wwhVLMwHl5rsaKAfxZlrLMq3Cc0hdMHXvru59GPihdwRrzO
YAvI+t2z4Z+W8aDe1je7SvtFGD2koTxAQvTpRg65NVs7U9TgHUVW1l7tqlFEX+zn
VB+wsF3ni37E+LfgPzj+uJSO1+wda0/QNpINaV3Kygtbos8ZXBoBGYMqQ2VPVmUc
lSjPC2SJ4cpDEtl4WCNvIIEYW5nW/1RKjoZBn/KA+GYo2PoEsHe5i5OBuK+WYqac
8W/LcWFbKNM6mQpiHnJX8M4LXIhf2FS2ThIOZNgKL7X/+esrpqYX/1oO2wTBoQIv
6oE0yt3X1G0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBRyXPgsSdV70CD/qOhb5kLX
FRwhDTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lODA3Y2I1YS0yYmJl
LTRhYWMtOGYzNC00MDIwMjVkOGQ2ZjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTgwN2NiNWEtMmJiZS00
YWFjLThmMzQtNDAyMDI1ZDhkNmYwL2Q5YmI5YmJmN2VjYWMyYWZmOTZiNzViMjk5
YzY0MGFjYTlmZmU4MzAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD7pAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCoUMA0GCSqGSIb3DQEBCwUAA4IBAQAO+m/zD9iJMwFULWEXg20P
pCF0YtwZDfEpULCLmZBCB48WB3oTW4Y8V/FbIFm580P19JhjcCW0WnNowKh5cgq1
fb0Xh2ASZ+kM1Th2Br4IsaJ6qs0H32MSb1CgV8n25LHyITzv87XMUBtYJr2p13mw
HX2wvxE+JQP0B4VZbwmQM8FBEpYHIVb6j28sPbTk89flYLRq0fwqG7TtyefM47UR
ERuw4FzF417hw3+1PSwPfvrrLiRX81G/K74RWosA3msstj4RzscnVnA0MQ2jhm58
QxQoVQ2Fz72Dj0ssTVvV7ZZmgMVVzAO8IB7KWlA0aQ7i3aYZeXpM2iWEe4Y6QzVn
-----END CERTIFICATE-----