Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffbc4873770e0c4d37b78f84cb48639ecbcbc102.cer
File:                     ffbc4873770e0c4d37b78f84cb48639ecbcbc102.cer (raw, json)
Hash identifier:          ljtJGyxjnKmf/rh+AK8I7kGeD+PaNFA4ve88yJcghD8=
Subject key identifier:   C4:CF:88:9F:71:04:4C:6B:B6:6A:CA:69:87:AD:82:F9:D3:7D:96:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01071AFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/06dccc63-5c9e-4237-b068-ab2d96f38427/ffbc4873770e0c4d37b78f84cb48639ecbcbc102.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/06dccc63-5c9e-4237-b068-ab2d96f38427/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 13:49:48 +0000
Certificate not after:    Wed 06 Aug 2025 18:24:28 +0000
Subordinate resources:    AS: 219814
                          AS: 273104
                          IP: 2803:f050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17242876 (0x1071afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 20 13:49:48 2023 GMT
            Not After : Aug  6 18:24:28 2025 GMT
        Subject: CN=ffbc4873770e0c4d37b78f84cb48639ecbcbc102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:15:10:5a:1d:48:3e:c1:96:b5:2a:b1:20:
                    b7:21:db:9e:f1:0c:39:bf:c8:c0:40:ea:d5:ad:bd:
                    86:8b:d1:a5:f1:ee:8d:0e:dd:30:5b:9c:d5:da:f6:
                    4c:7e:61:b7:b3:c8:ec:c6:ed:2d:d8:72:76:6b:7d:
                    51:5c:ee:f2:c1:85:cd:5f:4c:18:f7:63:03:12:e2:
                    31:3a:e8:d6:fb:e4:1e:c0:1b:d8:d7:b6:88:5b:bb:
                    f6:35:4c:12:8e:a1:f8:8e:3b:fc:ae:31:48:a2:dc:
                    e9:25:bc:79:ae:37:73:68:84:0f:a4:7d:3a:66:59:
                    bf:07:63:81:e4:6b:ae:e6:97:eb:37:b0:4f:43:14:
                    87:16:36:6f:23:93:d7:9c:59:6d:2c:c3:21:8e:77:
                    8f:84:4b:4e:0f:f2:14:48:98:de:6d:56:bd:f3:d7:
                    d8:4f:70:cd:25:af:aa:7e:ab:83:15:11:7b:b5:7f:
                    5e:20:53:5a:b1:5b:06:20:81:1d:98:7c:24:31:06:
                    a2:56:6c:32:aa:7d:1f:e9:1a:0e:e7:41:55:10:56:
                    33:e3:02:61:16:b6:c5:e4:05:80:64:f1:92:c5:ed:
                    c9:56:7a:e7:5a:76:c6:1b:2c:3d:f5:f0:8c:21:85:
                    df:f7:6e:ab:fe:72:18:a1:b7:18:f7:42:74:ae:b3:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:88:9F:71:04:4C:6B:B6:6A:CA:69:87:AD:82:F9:D3:7D:96:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/06dccc63-5c9e-4237-b068-ab2d96f38427/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/06dccc63-5c9e-4237-b068-ab2d96f38427/ffbc4873770e0c4d37b78f84cb48639ecbcbc102.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219814
                  273104

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:46:2f:bc:0d:f8:28:1b:b4:af:0b:ce:87:1c:7e:1c:d5:
         4a:11:29:68:18:61:b4:15:c7:31:56:be:ef:7d:86:7a:e4:2f:
         91:18:6f:6e:d0:b4:b9:85:5d:34:0c:b7:52:03:67:b4:49:00:
         4d:1c:f3:c5:66:3f:0b:9e:88:42:0b:e5:fa:37:66:2b:90:ff:
         ce:34:db:66:fa:c0:fb:06:d2:a2:11:e3:22:8e:71:b2:9e:c0:
         9b:74:db:33:75:df:77:6c:8f:8b:df:53:fc:d2:36:ab:9b:14:
         e4:55:b1:a8:68:7e:6c:14:3b:9c:31:38:da:f1:e9:3b:de:d9:
         43:e8:a9:db:e4:f2:e7:1f:b2:e7:f6:24:65:ef:e5:d6:f5:7f:
         df:4e:3b:94:c2:c5:48:dd:90:13:3b:4c:0d:a6:43:bf:82:ac:
         12:96:f3:38:09:26:01:3c:92:e6:83:6a:21:22:b1:a3:0e:8c:
         f6:0e:3c:88:c6:c1:8f:91:3b:e6:92:fb:24:a0:c2:70:be:ef:
         b3:9d:8b:d3:97:3f:79:c1:63:86:44:15:e3:59:3a:92:61:ed:
         76:f2:d0:83:c9:b7:da:c4:c1:e5:50:a5:1f:6d:bc:f4:09:ff:
         fe:52:6f:ae:ae:2a:fe:30:c6:6b:eb:0a:70:db:37:7d:ec:a2:
         05:33:dd:86
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIEAQca/DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyMDEzNDk0OFoXDTI1MDgwNjE4MjQy
OFowMzExMC8GA1UEAxMoZmZiYzQ4NzM3NzBlMGM0ZDM3Yjc4Zjg0Y2I0ODYzOWVj
YmNiYzEwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAImhFRBaHUg+
wZa1KrEgtyHbnvEMOb/IwEDq1a29hovRpfHujQ7dMFuc1dr2TH5ht7PI7MbtLdhy
dmt9UVzu8sGFzV9MGPdjAxLiMTro1vvkHsAb2Ne2iFu79jVMEo6h+I47/K4xSKLc
6SW8ea43c2iED6R9OmZZvwdjgeRrruaX6zewT0MUhxY2byOT15xZbSzDIY53j4RL
Tg/yFEiY3m1WvfPX2E9wzSWvqn6rgxURe7V/XiBTWrFbBiCBHZh8JDEGolZsMqp9
H+kaDudBVRBWM+MCYRa2xeQFgGTxksXtyVZ651p2xhssPfXwjCGF3/duq/5yGKG3
GPdCdK6zzaECAwEAAaOCAwAwggL8MB0GA1UdDgQWBBTEz4ifcQRMa7ZqymmHrYL5
032W+DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNmRjY2M2My01Yzll
LTQyMzctYjA2OC1hYjJkOTZmMzg0MjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDZkY2NjNjMtNWM5ZS00
MjM3LWIwNjgtYWIyZDk2ZjM4NDI3L2ZmYmM0ODczNzcwZTBjNGQzN2I3OGY4NGNi
NDg2MzllY2JjYmMxMDIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD8FAwHwYIKwYBBQUHAQgBAf8E
EDAOoAwwCgIDA1qmAgMEKtAwDQYJKoZIhvcNAQELBQADggEBAJZbRi+8DfgoG7Sv
C86HHH4c1UoRKWgYYbQVxzFWvu99hnrkL5EYb27QtLmFXTQMt1IDZ7RJAE0c88Vm
PwueiEIL5fo3ZiuQ/84022b6wPsG0qIR4yKOcbKewJt02zN133dsj4vfU/zSNqub
FORVsahofmwUO5wxONrx6Tve2UPoqdvk8ucfsuf2JGXv5db1f99OO5TCxUjdkBM7
TA2mQ7+CrBKW8zgJJgE8kuaDaiEisaMOjPYOPIjGwY+RO+aS+ySgwnC+77Odi9OX
P3nBY4ZEFeNZOpJh7Xby0IPJt9rEweVQpR9tvPQJ//5Sb66uKv4wxmvrCnDbN33s
ogUz3YY=
-----END CERTIFICATE-----