Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc524b2452cb28cd6f8e321c639af53720106638.cer
File:                     dc524b2452cb28cd6f8e321c639af53720106638.cer (raw, json)
Hash identifier:          NfoWanl4AWItWCoqEXaiUx6Aly7NN8KmDlJFDzIrGkA=
Subject key identifier:   31:16:5C:33:AB:DD:C8:68:A3:E2:AE:7A:DF:D1:83:9D:10:A3:DE:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE458B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4353c058-5cc4-484f-a178-27275ed84d6c/dc524b2452cb28cd6f8e321c639af53720106638.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4353c058-5cc4-484f-a178-27275ed84d6c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 11:34:19 +0000
Certificate not after:    Sun 22 Sep 2024 15:39:35 +0000
Subordinate resources:    AS: 269859
                          IP: 45.189.36.0/22
                          IP: 2803:80e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15615371 (0xee458b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 11:34:19 2023 GMT
            Not After : Sep 22 15:39:35 2024 GMT
        Subject: CN=dc524b2452cb28cd6f8e321c639af53720106638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:4f:ad:f4:59:17:47:3d:b8:13:80:cd:96:
                    c2:6f:df:31:4f:e4:9e:98:b2:91:89:13:84:a5:e9:
                    d1:b2:85:e7:e8:d9:eb:14:f8:59:7c:36:37:a7:f4:
                    47:ec:dc:f0:94:41:03:e8:a4:d2:3d:59:8f:77:a5:
                    54:94:1b:39:93:98:08:c8:2d:59:c2:e2:94:ad:6e:
                    45:c0:62:37:ba:60:88:32:be:6e:93:4f:6f:dd:74:
                    4a:c0:a6:c6:60:6e:71:d1:8e:db:bf:80:74:d3:de:
                    d3:d3:5d:66:de:0e:70:23:8b:23:46:e0:90:dd:35:
                    67:2e:46:b5:e6:7e:73:d4:f3:28:5e:6f:b4:43:43:
                    39:9d:3f:d7:25:2f:de:36:60:c7:8c:36:5c:39:a5:
                    45:ed:b7:76:43:61:ec:8e:3f:71:6e:2a:18:b0:2b:
                    60:b5:d7:89:4e:92:e8:2c:2a:6d:3a:ce:0f:49:a1:
                    47:bb:1d:ea:a0:55:a1:7a:82:30:84:8e:14:17:6f:
                    b5:61:6a:7d:a6:e4:f4:65:3f:03:d4:90:82:9b:ad:
                    36:84:36:53:f5:da:10:64:fe:29:e9:e7:16:2c:5a:
                    d9:ca:82:aa:56:b2:21:d2:87:f7:c5:c8:08:3f:e5:
                    ed:e2:53:04:06:9c:d4:82:51:dd:ed:c3:2c:4d:9a:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:5C:33:AB:DD:C8:68:A3:E2:AE:7A:DF:D1:83:9D:10:A3:DE:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4353c058-5cc4-484f-a178-27275ed84d6c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4353c058-5cc4-484f-a178-27275ed84d6c/dc524b2452cb28cd6f8e321c639af53720106638.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.36.0/22
                IPv6:
                  2803:80e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269859

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:00:05:ab:20:c7:68:70:2b:07:4d:e0:73:80:cf:13:83:
         0c:7c:fa:e7:78:84:b7:27:46:43:31:7e:7f:a0:ba:a5:8f:97:
         3d:b9:39:39:76:4d:8e:e4:cb:c3:68:52:2b:31:ad:10:9b:a8:
         7b:77:a5:40:02:c9:fa:52:c4:e5:5d:67:22:34:a1:ae:1c:bb:
         87:26:63:48:c3:5f:be:48:fd:b4:c6:33:46:04:16:8f:32:22:
         f2:0f:cc:d5:00:b6:60:0e:ee:8c:e2:fd:5b:5a:11:09:f9:0a:
         71:b7:14:e6:ae:3c:3e:20:45:8b:b7:f6:e7:2d:af:e1:eb:a7:
         37:7c:29:97:bf:76:44:2f:fb:05:cc:ad:9c:b7:e8:e7:5f:50:
         5b:37:74:9e:ce:57:3a:63:19:fe:23:7e:43:c5:54:e5:cb:f7:
         b2:b5:54:b7:c0:8f:15:d4:15:4d:cb:71:00:a5:7f:43:50:59:
         71:6f:56:2f:13:a1:f6:ba:db:14:03:c2:67:d2:9b:e7:da:b3:
         d7:88:6e:e8:c4:4e:a2:8f:12:64:2f:35:64:7e:b0:51:0e:6b:
         34:20:18:7f:6b:8c:fa:12:d7:1f:c4:dc:e1:e4:ad:50:c6:27:
         8f:8d:79:26:4d:50:11:ae:6e:73:19:86:a1:7c:a7:d3:a0:f3:
         b8:18:73:09
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO5FizANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyMDExMzQxOVoXDTI0MDkyMjE1Mzkz
NVowMzExMC8GA1UEAxMoZGM1MjRiMjQ1MmNiMjhjZDZmOGUzMjFjNjM5YWY1Mzcy
MDEwNjYzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJTZT630WRdH
PbgTgM2Wwm/fMU/knpiykYkThKXp0bKF5+jZ6xT4WXw2N6f0R+zc8JRBA+ik0j1Z
j3elVJQbOZOYCMgtWcLilK1uRcBiN7pgiDK+bpNPb910SsCmxmBucdGO27+AdNPe
09NdZt4OcCOLI0bgkN01Zy5GteZ+c9TzKF5vtENDOZ0/1yUv3jZgx4w2XDmlRe23
dkNh7I4/cW4qGLArYLXXiU6S6CwqbTrOD0mhR7sd6qBVoXqCMISOFBdvtWFqfabk
9GU/A9SQgputNoQ2U/XaEGT+KennFixa2cqCqlayIdKH98XICD/l7eJTBAac1IJR
3e3DLE2aGosCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQxFlwzq93IaKPirnrf0YOd
EKPeuTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MzUzYzA1OC01Y2M0
LTQ4NGYtYTE3OC0yNzI3NWVkODRkNmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDM1M2MwNTgtNWNjNC00
ODRmLWExNzgtMjcyNzVlZDg0ZDZjL2RjNTI0YjI0NTJjYjI4Y2Q2ZjhlMzIxYzYz
OWFmNTM3MjAxMDY2MzgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi29JDANBAIAAjAHAwUAKAOA4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHiMwDQYJKoZIhvcNAQELBQADggEBAG03
AAWrIMdocCsHTeBzgM8Tgwx8+ud4hLcnRkMxfn+guqWPlz25OTl2TY7ky8NoUisx
rRCbqHt3pUACyfpSxOVdZyI0oa4cu4cmY0jDX75I/bTGM0YEFo8yIvIPzNUAtmAO
7ozi/VtaEQn5CnG3FOauPD4gRYu39uctr+Hrpzd8KZe/dkQv+wXMrZy36OdfUFs3
dJ7OVzpjGf4jfkPFVOXL97K1VLfAjxXUFU3LcQClf0NQWXFvVi8Tofa62xQDwmfS
m+fas9eIbujETqKPEmQvNWR+sFEOazQgGH9rjPoS1x/E3OHkrVDGJ4+NeSZNUBGu
bnMZhqF8p9Og87gYcwk=
-----END CERTIFICATE-----