Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc28cdf2b5514587ac43cce4fee3fd44f59abaa3.cer
File:                     fc28cdf2b5514587ac43cce4fee3fd44f59abaa3.cer (raw, json)
Hash identifier:          Ottd5xFGAEvHXFhnJvd7YQcDCKbvTl0M98fjnAGfZ2A=
Subject key identifier:   0D:57:88:9C:D5:C7:DE:CB:D4:89:46:AC:4A:34:5B:02:B1:B2:65:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4A919
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/412ce9d1-c357-4c9d-8ad3-42ab4b5c0a53/fc28cdf2b5514587ac43cce4fee3fd44f59abaa3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/412ce9d1-c357-4c9d-8ad3-42ab4b5c0a53/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 19:06:33 +0000
Certificate not after:    Wed 11 Dec 2024 22:12:02 +0000
Subordinate resources:    AS: 265625
                          IP: 200.124.160.0/22
                          IP: 2806:3a6::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16034073 (0xf4a919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 10 19:06:33 2023 GMT
            Not After : Dec 11 22:12:02 2024 GMT
        Subject: CN=fc28cdf2b5514587ac43cce4fee3fd44f59abaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:ce:02:22:e8:d7:8b:98:b6:8b:8b:b2:fb:
                    56:81:dc:89:eb:a8:90:0a:05:3a:b0:1c:e7:62:c3:
                    78:b5:da:4d:b7:2a:42:b1:a4:d6:7d:9d:21:14:88:
                    c7:b0:3e:7c:57:2b:fc:f8:3f:8e:ae:ff:34:c6:7a:
                    49:2e:02:12:03:a2:e0:25:3e:6e:96:ee:54:ff:1f:
                    b5:eb:36:4a:90:ce:f3:6d:d8:da:76:f4:18:e5:0b:
                    3c:56:12:94:ea:0a:70:98:07:d4:0c:d4:a9:1f:83:
                    8b:8d:91:0d:ad:30:0d:5c:ce:15:31:89:94:49:9d:
                    3e:d1:41:27:b6:4f:57:e1:1d:05:0a:94:2d:1f:87:
                    1d:d0:db:96:28:56:e5:26:29:19:ef:3a:bc:01:f9:
                    fa:63:a9:50:22:22:e4:98:c1:b1:56:8a:4b:7d:e4:
                    3f:13:3e:d6:8d:17:d8:d9:08:3b:64:2a:c0:26:d8:
                    52:b3:52:25:2c:fd:1f:2e:cf:fd:1e:07:89:56:c2:
                    7d:06:a9:32:6f:69:6e:61:04:f4:ae:f4:ba:db:24:
                    15:f6:f8:38:eb:2e:fb:09:9b:24:e9:e4:da:b5:db:
                    28:41:65:9c:d3:51:1e:ef:09:50:3d:8e:9f:05:cb:
                    18:44:d8:ba:c1:bc:fd:5e:70:a3:a9:6f:b5:7b:5f:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:88:9C:D5:C7:DE:CB:D4:89:46:AC:4A:34:5B:02:B1:B2:65:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/412ce9d1-c357-4c9d-8ad3-42ab4b5c0a53/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/412ce9d1-c357-4c9d-8ad3-42ab4b5c0a53/fc28cdf2b5514587ac43cce4fee3fd44f59abaa3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.160.0/22
                IPv6:
                  2806:3a6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265625

    Signature Algorithm: sha256WithRSAEncryption
         c0:7f:8c:91:67:a8:ad:ec:a6:90:71:ab:ea:f2:20:dc:92:26:
         f6:36:51:18:b5:1d:b5:71:5f:69:2e:3d:b2:f3:98:42:ff:d2:
         e5:8e:29:93:75:f4:97:04:06:e1:6a:7f:e0:a2:6b:ca:b7:16:
         72:43:8b:dd:22:6b:f9:f4:99:80:e2:af:82:a1:82:73:54:ea:
         b7:ba:7d:15:d1:b6:ef:25:f3:cf:37:7b:9f:c6:a1:d7:78:46:
         9c:be:99:2a:1c:29:cf:6d:7b:b0:b4:3f:1c:ec:67:d8:a5:d5:
         15:bc:0c:2c:ac:e5:db:2c:5d:2d:e6:a7:d9:d7:2c:04:90:d3:
         b7:87:8c:9c:eb:86:2f:ae:74:09:a5:46:83:09:fa:11:38:a4:
         9a:06:57:77:06:a0:72:7b:58:e9:69:e8:dc:7a:7c:4b:1b:74:
         cb:db:83:2a:aa:f9:ac:ee:e0:48:42:71:6d:2c:d6:de:aa:43:
         ca:ad:1f:19:b0:b0:7d:60:49:72:fc:f4:4d:5a:c9:bd:41:4b:
         6d:ec:2a:dc:2b:ae:0f:0c:bd:6a:34:94:90:d6:7e:26:a6:bf:
         53:98:49:28:2b:34:ce:3e:f7:55:8d:81:c8:b8:be:51:63:72:
         67:80:1c:cd:c1:4a:0e:d3:a0:b3:53:e1:33:a6:58:e1:72:2b:
         cf:e7:bc:cb
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPSpGTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgxMDE5MDYzM1oXDTI0MTIxMTIyMTIw
MlowMzExMC8GA1UEAxMoZmMyOGNkZjJiNTUxNDU4N2FjNDNjY2U0ZmVlM2ZkNDRm
NTlhYmFhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4WzgIi6NeL
mLaLi7L7VoHcieuokAoFOrAc52LDeLXaTbcqQrGk1n2dIRSIx7A+fFcr/Pg/jq7/
NMZ6SS4CEgOi4CU+bpbuVP8ftes2SpDO823Y2nb0GOULPFYSlOoKcJgH1AzUqR+D
i42RDa0wDVzOFTGJlEmdPtFBJ7ZPV+EdBQqULR+HHdDblihW5SYpGe86vAH5+mOp
UCIi5JjBsVaKS33kPxM+1o0X2NkIO2QqwCbYUrNSJSz9Hy7P/R4HiVbCfQapMm9p
bmEE9K70utskFfb4OOsu+wmbJOnk2rXbKEFlnNNRHu8JUD2OnwXLGETYusG8/V5w
o6lvtXtfnqsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQNV4ic1cfey9SJRqxKNFsC
sbJljTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MTJjZTlkMS1jMzU3
LTRjOWQtOGFkMy00MmFiNGI1YzBhNTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDEyY2U5ZDEtYzM1Ny00
YzlkLThhZDMtNDJhYjRiNWMwYTUzL2ZjMjhjZGYyYjU1MTQ1ODdhYzQzY2NlNGZl
ZTNmZDQ0ZjU5YWJhYTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsh8oDANBAIAAjAHAwUAKAYDpjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDZkwDQYJKoZIhvcNAQELBQADggEBAMB/
jJFnqK3sppBxq+ryINySJvY2URi1HbVxX2kuPbLzmEL/0uWOKZN19JcEBuFqf+Ci
a8q3FnJDi90ia/n0mYDir4KhgnNU6re6fRXRtu8l8883e5/Godd4Rpy+mSocKc9t
e7C0PxzsZ9il1RW8DCys5dssXS3mp9nXLASQ07eHjJzrhi+udAmlRoMJ+hE4pJoG
V3cGoHJ7WOlp6Nx6fEsbdMvbgyqq+azu4EhCcW0s1t6qQ8qtHxmwsH1gSXL89E1a
yb1BS23sKtwrrg8MvWo0lJDWfiamv1OYSSgrNM4+91WNgci4vlFjcmeAHM3BSg7T
oLNT4TOmWOFyK8/nvMs=
-----END CERTIFICATE-----