Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e186d3ed78d73b347c1e85f1ffa4bcd8f7b5d4a5.cer
File:                     e186d3ed78d73b347c1e85f1ffa4bcd8f7b5d4a5.cer (raw, json)
Hash identifier:          57vCy1lO+H3wHu5zQrJJjRFMpyEdfkCR7zR0As1iGWg=
Subject key identifier:   F4:02:1A:F5:60:28:01:4F:03:8D:96:B9:82:D8:56:AD:5C:21:F7:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEFE27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a4e5d1c-2b77-4539-a0bc-baeab0ee7cef/e186d3ed78d73b347c1e85f1ffa4bcd8f7b5d4a5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a4e5d1c-2b77-4539-a0bc-baeab0ee7cef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 18:10:26 +0000
Certificate not after:    Fri 28 Mar 2025 13:42:05 +0000
Subordinate resources:    AS: 268989
                          IP: 45.177.168.0/22
                          IP: 2804:1f46::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15662631 (0xeefe27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 18:10:26 2023 GMT
            Not After : Mar 28 13:42:05 2025 GMT
        Subject: CN=e186d3ed78d73b347c1e85f1ffa4bcd8f7b5d4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:56:a8:13:13:bc:11:c4:b7:c6:7c:4c:35:
                    ed:0b:01:89:c3:3d:e4:8b:8b:85:ee:09:5d:82:f5:
                    94:ee:b1:11:9f:a6:b4:a5:23:8f:65:61:c9:54:1a:
                    34:7f:7d:a9:55:81:27:e9:ba:06:91:3b:fb:b8:a2:
                    c1:a7:82:4c:3c:43:c4:58:45:83:a3:52:b3:b3:08:
                    98:86:b4:61:ca:1f:22:2c:38:dd:43:ea:b8:6f:3c:
                    c5:b2:2c:c0:47:1d:30:8a:66:2d:b0:4e:91:29:f7:
                    bf:8c:d6:10:e2:c8:56:a0:49:35:c6:78:43:df:64:
                    02:9a:7c:bb:57:77:87:9b:49:95:c4:13:b5:2f:9c:
                    6a:40:62:07:8f:06:3c:07:a7:90:32:09:2c:6e:ce:
                    72:81:28:83:e4:19:63:94:e3:8e:74:65:21:c7:46:
                    29:7b:12:a7:b3:c7:4c:5c:0a:3b:7e:00:07:07:14:
                    13:a0:e7:ae:e1:46:da:75:b4:83:66:7e:fa:56:32:
                    43:91:51:fb:0f:46:bb:94:70:e8:b2:a0:b7:74:55:
                    ea:80:97:f1:b9:65:b6:7f:16:1c:70:65:09:c4:61:
                    4b:e3:07:3f:79:67:cb:18:1f:68:de:2f:20:21:36:
                    84:24:84:96:ab:01:43:15:96:ef:c6:6e:32:17:1e:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:02:1A:F5:60:28:01:4F:03:8D:96:B9:82:D8:56:AD:5C:21:F7:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a4e5d1c-2b77-4539-a0bc-baeab0ee7cef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a4e5d1c-2b77-4539-a0bc-baeab0ee7cef/e186d3ed78d73b347c1e85f1ffa4bcd8f7b5d4a5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.168.0/22
                IPv6:
                  2804:1f46::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268989

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:17:41:61:6f:d5:cc:35:19:43:a8:6f:e1:1e:ea:86:d5:
         18:5e:34:49:cf:42:79:6a:00:9d:83:58:08:f3:6d:4a:33:2a:
         9a:9d:6e:1f:2a:93:e9:9c:d6:73:e3:2d:b4:e8:8e:63:59:b7:
         72:ce:b7:4b:5b:ae:63:a4:de:58:92:44:ac:dd:d7:7b:43:e2:
         cc:60:c3:49:45:8b:47:72:c8:de:e2:ab:84:2e:a5:da:57:0f:
         74:a7:5a:59:69:d2:9a:13:33:e2:4b:46:ca:80:6c:2f:b5:8b:
         54:9c:b0:80:fe:da:87:13:d7:b7:f6:56:e4:4f:ae:10:28:15:
         86:3f:ef:17:d4:f9:91:32:ac:4b:ab:f9:92:56:08:93:6b:72:
         75:13:62:45:b4:e8:24:57:4e:20:a0:cd:57:38:46:e4:f4:20:
         8a:3b:ae:27:7a:f1:b1:af:20:74:9a:e9:cb:f1:15:af:ce:c2:
         25:aa:62:fe:f6:e0:c9:99:39:80:05:fd:d4:94:f2:e6:92:16:
         61:79:84:36:01:06:15:03:a9:67:73:1c:1b:33:f1:49:8d:d7:
         d7:0b:f5:b4:72:99:bc:44:60:61:2a:04:9f:fa:c7:c4:15:ad:
         53:40:8f:60:62:f5:14:5c:b2:93:6c:87:1a:03:5c:9e:36:7e:
         64:cd:af:e7
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO7+JzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyMTE4MTAyNloXDTI1MDMyODEzNDIw
NVowMzExMC8GA1UEAxMoZTE4NmQzZWQ3OGQ3M2IzNDdjMWU4NWYxZmZhNGJjZDhm
N2I1ZDRhNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMGkVqgTE7wR
xLfGfEw17QsBicM95IuLhe4JXYL1lO6xEZ+mtKUjj2VhyVQaNH99qVWBJ+m6BpE7
+7iiwaeCTDxDxFhFg6NSs7MImIa0YcofIiw43UPquG88xbIswEcdMIpmLbBOkSn3
v4zWEOLIVqBJNcZ4Q99kApp8u1d3h5tJlcQTtS+cakBiB48GPAenkDIJLG7OcoEo
g+QZY5TjjnRlIcdGKXsSp7PHTFwKO34ABwcUE6DnruFG2nW0g2Z++lYyQ5FR+w9G
u5Rw6LKgt3RV6oCX8blltn8WHHBlCcRhS+MHP3lnyxgfaN4vICE2hCSElqsBQxWW
78ZuMhce8mkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT0Ahr1YCgBTwONlrmC2Fat
XCH3DzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYTRlNWQxYy0yYjc3
LTQ1MzktYTBiYy1iYWVhYjBlZTdjZWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2E0ZTVkMWMtMmI3Ny00
NTM5LWEwYmMtYmFlYWIwZWU3Y2VmL2UxODZkM2VkNzhkNzNiMzQ3YzFlODVmMWZm
YTRiY2Q4ZjdiNWQ0YTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2xqDANBAIAAjAHAwUAKAQfRjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGr0wDQYJKoZIhvcNAQELBQADggEBAIj5
F0Fhb9XMNRlDqG/hHuqG1RheNEnPQnlqAJ2DWAjzbUozKpqdbh8qk+mc1nPjLbTo
jmNZt3LOt0tbrmOk3liSRKzd13tD4sxgw0lFi0dyyN7iq4QupdpXD3SnWllp0poT
M+JLRsqAbC+1i1ScsID+2ocT17f2VuRPrhAoFYY/7xfU+ZEyrEur+ZJWCJNrcnUT
YkW06CRXTiCgzVc4RuT0IIo7rid68bGvIHSa6cvxFa/OwiWqYv724MmZOYAF/dSU
8uaSFmF5hDYBBhUDqWdzHBsz8UmN19cL9bRymbxEYGEqBJ/6x8QVrVNAj2Bi9RRc
spNshxoDXJ42fmTNr+c=
-----END CERTIFICATE-----