Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer
File:                     37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer (raw, json)
Hash identifier:          0jB3NIWnJzmpn9nU8L6XMOHx2YMl2wuLJu/LUxHvjPM=
Subject key identifier:   ED:99:66:95:7A:67:06:05:3D:E7:07:DB:0D:48:5A:65:82:93:A7:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101AE36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Sep 2022 19:54:50 +0000
Certificate not after:    Fri 20 Dec 2024 16:21:17 +0000
Subordinate resources:    AS: 266735
                          IP: 45.231.224.0/22
                          IP: 2803:b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16887350 (0x101ae36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 15 19:54:50 2022 GMT
            Not After : Dec 20 16:21:17 2024 GMT
        Subject: CN=37bd7cd8964f0c9582b713bd1d719cbcfcf135e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:be:e7:84:db:bf:b9:4d:1a:d8:1b:e1:66:
                    89:cf:9e:8c:09:95:92:2b:2d:aa:4c:c0:14:ef:ac:
                    ce:3e:ea:60:98:a6:d7:bf:b3:c9:b1:e8:22:7b:c8:
                    91:a5:41:71:bc:59:d5:04:cf:67:ae:af:76:46:6e:
                    78:48:65:91:2f:77:09:a6:e3:5d:07:42:2a:12:8d:
                    19:09:3d:ae:8f:56:e2:4c:f1:46:ca:2d:18:4b:5f:
                    50:95:4d:90:85:a6:48:fc:11:65:10:26:05:20:83:
                    e0:87:84:48:e5:8e:2e:ab:72:6f:ff:82:e9:e0:29:
                    dd:a3:b7:ed:65:54:34:0c:48:5d:b5:ed:42:3d:90:
                    e7:17:e0:c4:17:19:4f:1a:05:67:c5:40:64:db:3f:
                    ca:70:4d:d5:a5:cd:ce:37:ba:7a:79:dd:ce:57:38:
                    7f:2b:7b:f3:3e:a0:8d:29:11:6a:3b:79:1a:2d:ee:
                    df:69:85:1c:0a:a5:0b:5c:c5:d3:76:03:af:1f:bd:
                    32:36:30:2d:93:29:7b:b0:74:75:79:1c:00:67:7b:
                    bd:10:02:58:5d:80:50:34:cd:85:73:09:d9:89:a1:
                    89:44:1d:b3:e2:19:96:b5:dd:b4:f1:cb:b0:3b:c4:
                    1d:bf:09:4f:ed:79:98:73:9e:7a:3b:c8:3d:e4:6a:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:66:95:7A:67:06:05:3D:E7:07:DB:0D:48:5A:65:82:93:A7:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.224.0/22
                IPv6:
                  2803:b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266735

    Signature Algorithm: sha256WithRSAEncryption
         06:9d:96:c5:af:ad:a2:88:25:f3:27:55:de:54:d1:97:28:e8:
         44:24:b4:40:a2:b7:60:24:2d:bc:d0:33:65:09:d1:70:e2:e1:
         47:e4:8f:59:96:1c:06:8f:b6:4f:8b:c2:64:5b:d9:86:ad:cc:
         53:48:fd:8b:09:7b:96:31:a6:36:f3:53:92:4c:03:b0:e9:00:
         3c:8a:6d:ac:b3:05:e9:20:18:40:ab:33:34:72:65:c2:f7:12:
         8a:9d:72:f1:0e:3e:84:8e:d7:d6:18:14:fb:1e:a2:b6:15:fc:
         57:f2:cc:e9:93:49:1e:e2:09:a8:31:d8:e9:6b:5f:7d:c4:57:
         f1:d8:b2:93:80:cf:83:e8:4e:c5:2d:ea:7f:57:1a:18:a9:7c:
         8b:0c:be:f5:07:a4:6a:42:bd:9e:f4:5c:e7:c6:0c:c2:d1:8f:
         55:8f:6d:91:ed:4a:c3:92:57:22:e5:b3:42:3e:cb:3e:18:0b:
         2b:ea:c6:18:ee:c3:8b:65:6e:c6:ed:0f:20:85:d4:b7:f5:57:
         02:c8:77:30:3e:8d:94:2d:c2:75:88:5b:28:0b:62:c8:4b:3a:
         9a:ea:b9:95:b1:d9:c0:62:74:4e:a6:98:5b:ad:0f:59:ca:c3:
         52:48:55:f2:b1:4d:5a:71:a6:ae:ec:aa:0c:18:d0:85:b4:fe:
         48:9d:37:4b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQGuNjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkxNTE5NTQ1MFoXDTI0MTIyMDE2MjEx
N1owMzExMC8GA1UEAxMoMzdiZDdjZDg5NjRmMGM5NTgyYjcxM2JkMWQ3MTljYmNm
Y2YxMzVlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW/vueE27+5
TRrYG+Fmic+ejAmVkistqkzAFO+szj7qYJim17+zybHoInvIkaVBcbxZ1QTPZ66v
dkZueEhlkS93CabjXQdCKhKNGQk9ro9W4kzxRsotGEtfUJVNkIWmSPwRZRAmBSCD
4IeESOWOLqtyb/+C6eAp3aO37WVUNAxIXbXtQj2Q5xfgxBcZTxoFZ8VAZNs/ynBN
1aXNzje6enndzlc4fyt78z6gjSkRajt5Gi3u32mFHAqlC1zF03YDrx+9MjYwLZMp
e7B0dXkcAGd7vRACWF2AUDTNhXMJ2YmhiUQds+IZlrXdtPHLsDvEHb8JT+15mHOe
ejvIPeRqHyMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTtmWaVemcGBT3nB9sNSFpl
gpOnkTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jOWYwNzBmNS1lZGRk
LTRmMWUtOWE0ZS01OTFhMGZlZDNmZWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzlmMDcwZjUtZWRkZC00
ZjFlLTlhNGUtNTkxYTBmZWQzZmVkLzM3YmQ3Y2Q4OTY0ZjBjOTU4MmI3MTNiZDFk
NzE5Y2JjZmNmMTM1ZTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3n4DANBAIAAjAHAwUAKAMLIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEe8wDQYJKoZIhvcNAQELBQADggEBAAad
lsWvraKIJfMnVd5U0Zco6EQktECit2AkLbzQM2UJ0XDi4Ufkj1mWHAaPtk+LwmRb
2YatzFNI/YsJe5YxpjbzU5JMA7DpADyKbayzBekgGECrMzRyZcL3EoqdcvEOPoSO
19YYFPseorYV/FfyzOmTSR7iCagx2OlrX33EV/HYspOAz4PoTsUt6n9XGhipfIsM
vvUHpGpCvZ70XOfGDMLRj1WPbZHtSsOSVyLls0I+yz4YCyvqxhjuw4tlbsbtDyCF
1Lf1VwLIdzA+jZQtwnWIWygLYshLOprquZWx2cBidE6mmFutD1nKw1JIVfKxTVpx
pq7sqgwY0IW0/kidN0s=
-----END CERTIFICATE-----