Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0a5bf2a5328643f1d2d18258ecc892718a8a35.cer
File:                     da0a5bf2a5328643f1d2d18258ecc892718a8a35.cer (raw, json)
Hash identifier:          ptKibzBRZX9RArb0gGkeUlw3fnmDRWxumr47uHlJ+Zs=
Subject key identifier:   0A:F2:B9:BA:95:A4:D2:3B:95:3C:B3:67:5C:8D:FC:38:95:EF:6F:DE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE81C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/da0a5bf2a5328643f1d2d18258ecc892718a8a35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Feb 2021 18:18:20 +0000
Certificate not after:    Wed 13 Mar 2024 14:49:22 +0000
Subordinate resources:    AS: 267851
                          IP: 45.174.204.0/22
                          IP: 2803:dc60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14582214 (0xde81c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 18:18:20 2021 GMT
            Not After : Mar 13 14:49:22 2024 GMT
        Subject: CN=da0a5bf2a5328643f1d2d18258ecc892718a8a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:14:01:fe:3d:7e:39:10:0f:86:b1:90:ff:
                    df:22:23:7d:fc:7e:b9:a6:6e:13:d8:c9:c6:08:32:
                    aa:af:fe:75:90:db:9c:20:dd:f7:a7:2b:dd:8c:44:
                    04:bc:3e:03:cc:26:bf:b7:98:fa:59:22:a2:f4:2a:
                    bb:36:d0:1a:e8:fb:c3:7d:1f:e7:28:58:3f:f2:ec:
                    e6:3e:71:dd:4e:70:71:b4:cf:35:5b:e3:78:c1:1b:
                    9e:66:18:37:b7:64:22:e0:c7:16:6e:64:fb:19:d9:
                    46:ba:a3:1c:5c:fc:91:6e:d5:bc:d9:2f:cd:d4:29:
                    d7:6e:d8:13:2e:b0:1a:58:15:a8:17:44:c5:c1:f3:
                    83:bc:ac:46:bc:e3:67:13:40:9f:6e:be:47:20:2d:
                    0e:75:59:69:54:91:be:37:36:22:fd:49:f1:31:9c:
                    a5:09:c8:4d:01:ba:16:02:00:98:ec:33:e7:64:bd:
                    45:82:49:48:2f:31:74:9c:f1:c2:ca:ab:18:3e:55:
                    49:8e:1d:e6:56:91:07:48:d8:a5:2c:1f:e4:2f:50:
                    c5:3d:59:1a:50:45:b6:e8:9c:9a:e4:1c:b9:a7:25:
                    eb:73:5d:ac:40:24:e1:56:94:4b:50:83:73:53:c2:
                    ad:29:27:be:a2:33:a2:dd:13:bc:f3:66:7d:87:c9:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:B9:BA:95:A4:D2:3B:95:3C:B3:67:5C:8D:FC:38:95:EF:6F:DE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/da0a5bf2a5328643f1d2d18258ecc892718a8a35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.204.0/22
                IPv6:
                  2803:dc60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267851

    Signature Algorithm: sha256WithRSAEncryption
         af:d6:5f:e0:e4:dc:07:01:9a:b0:5b:60:b0:1c:eb:41:13:79:
         a1:db:3f:64:8e:e7:27:eb:69:08:90:62:e2:3f:5c:df:5c:3a:
         64:c1:85:ba:ff:cd:e3:c1:2a:e9:b6:34:43:a2:49:33:6f:8c:
         fc:8e:27:7e:29:a2:5b:5a:7b:b1:67:72:23:55:d7:7f:b3:e6:
         d1:c2:ed:1e:57:6b:6c:29:52:4b:00:98:a7:d3:4a:ae:23:4b:
         ca:ec:8f:5a:e6:33:f4:7d:16:6a:42:8b:f1:f9:4a:c9:dc:d2:
         eb:06:83:e7:2d:1f:4c:d7:e2:c7:ef:a3:d1:00:60:31:0a:c6:
         50:46:f8:39:78:93:6f:8e:48:93:f7:c8:6f:3e:63:91:a8:3a:
         21:54:09:12:33:1c:10:c0:0d:12:f2:b3:2a:7d:d2:70:35:38:
         4f:06:1c:81:80:fe:db:a1:7b:cb:c6:17:e2:c6:b3:5f:c2:62:
         5f:d4:ef:8e:56:f5:66:62:01:f0:0e:27:55:56:20:f1:51:64:
         97:ac:64:e1:b1:4a:55:8f:ef:cf:64:89:10:60:09:4c:d2:ce:
         b3:be:f4:9b:7a:fb:22:2c:e5:fe:03:38:52:85:18:c1:9b:a3:
         6c:c2:fb:08:f9:55:af:3a:3d:11:46:b2:42:29:4a:50:78:1b:
         8c:a8:18:b7
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN6BxjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIyNTE4MTgyMFoXDTI0MDMxMzE0NDky
MlowMzExMC8GA1UEAxMoZGEwYTViZjJhNTMyODY0M2YxZDJkMTgyNThlY2M4OTI3
MThhOGEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJNqFAH+PX45
EA+GsZD/3yIjffx+uaZuE9jJxggyqq/+dZDbnCDd96cr3YxEBLw+A8wmv7eY+lki
ovQquzbQGuj7w30f5yhYP/Ls5j5x3U5wcbTPNVvjeMEbnmYYN7dkIuDHFm5k+xnZ
RrqjHFz8kW7VvNkvzdQp127YEy6wGlgVqBdExcHzg7ysRrzjZxNAn26+RyAtDnVZ
aVSRvjc2Iv1J8TGcpQnITQG6FgIAmOwz52S9RYJJSC8xdJzxwsqrGD5VSY4d5laR
B0jYpSwf5C9QxT1ZGlBFtuicmuQcuacl63NdrEAk4VaUS1CDc1PCrSknvqIzot0T
vPNmfYfJ3o8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQK8rm6laTSO5U8s2dcjfw4
le9v3jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNTg4OGRjZi04ZjY1
LTQ3NTEtOWI3ZS1kYmI2MTc2NjU3MDcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjU4ODhkY2YtOGY2NS00
NzUxLTliN2UtZGJiNjE3NjY1NzA3L2RhMGE1YmYyYTUzMjg2NDNmMWQyZDE4MjU4
ZWNjODkyNzE4YThhMzUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2uzDANBAIAAjAHAwUAKAPcYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFkswDQYJKoZIhvcNAQELBQADggEBAK/W
X+Dk3AcBmrBbYLAc60ETeaHbP2SO5yfraQiQYuI/XN9cOmTBhbr/zePBKum2NEOi
STNvjPyOJ34poltae7FnciNV13+z5tHC7R5Xa2wpUksAmKfTSq4jS8rsj1rmM/R9
FmpCi/H5Ssnc0usGg+ctH0zX4sfvo9EAYDEKxlBG+Dl4k2+OSJP3yG8+Y5GoOiFU
CRIzHBDADRLysyp90nA1OE8GHIGA/tuhe8vGF+LGs1/CYl/U745W9WZiAfAOJ1VW
IPFRZJesZOGxSlWP789kiRBgCUzSzrO+9Jt6+yIs5f4DOFKFGMGbo2zC+wj5Va86
PRFGskIpSlB4G4yoGLc=
-----END CERTIFICATE-----