Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bbec171df1af15102377d4faca6fbd809b04ea1.cer
File:                     4bbec171df1af15102377d4faca6fbd809b04ea1.cer (raw, json)
Hash identifier:          gFRMWYUsrkaPRXYmsL17JiWX5OL3AxkgPC0xZ3TvFz4=
Subject key identifier:   FB:39:F9:F3:E2:73:4B:8A:F2:88:D5:4D:2E:D8:A0:0F:CC:26:86:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01044CE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/4bbec171df1af15102377d4faca6fbd809b04ea1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 16 Jan 2021 15:03:58 +0000
Certificate not after:    Sat 18 Jan 2025 13:57:43 +0000
Subordinate resources:    AS: 267804
                          IP: 45.172.108.0/22
                          IP: 2803:7fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17059046 (0x1044ce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 15:03:58 2021 GMT
            Not After : Jan 18 13:57:43 2025 GMT
        Subject: CN=4bbec171df1af15102377d4faca6fbd809b04ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:d1:cf:a6:0b:5e:d2:45:02:0f:89:d0:58:
                    16:21:67:b1:14:72:3b:44:b4:cd:11:2d:fe:56:3f:
                    a4:ae:76:97:4b:67:67:26:bb:35:c3:62:82:17:2e:
                    89:40:7e:94:38:dd:b8:07:b7:d2:f7:47:92:1d:6d:
                    c6:ce:15:07:fa:d5:9e:2b:77:0d:b6:2f:c8:ac:97:
                    54:00:83:b6:38:a5:c4:03:4e:98:de:6b:80:5d:cc:
                    56:8a:bd:de:bf:5f:3d:ea:95:7e:cb:a0:f0:c3:48:
                    7e:81:39:88:07:fb:b7:31:c5:5a:e0:f8:6e:8f:43:
                    24:72:30:b6:59:9c:c8:2a:04:ba:87:b0:4c:78:02:
                    30:f2:a0:43:e8:99:cb:0d:76:cb:2e:16:09:09:db:
                    c1:9c:82:1f:3d:ed:c5:68:89:fc:b7:d1:c9:88:3e:
                    bd:54:38:ef:d6:85:b7:8e:58:07:22:30:2c:ec:d6:
                    ee:d3:4f:9f:ae:bf:9b:69:b7:2d:fc:7b:2a:71:1c:
                    c7:85:8c:c7:8c:75:9a:cb:32:5c:53:1d:c4:a3:40:
                    82:ee:c1:3f:dc:ab:51:be:61:fc:66:75:4c:d6:39:
                    de:cb:c5:e3:4e:cc:8c:cb:4a:ab:35:a9:8a:2e:c8:
                    45:79:7b:14:7c:eb:a4:9a:f9:78:65:d4:08:9d:70:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:F9:F3:E2:73:4B:8A:F2:88:D5:4D:2E:D8:A0:0F:CC:26:86:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/4bbec171df1af15102377d4faca6fbd809b04ea1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/22
                IPv6:
                  2803:7fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267804

    Signature Algorithm: sha256WithRSAEncryption
         25:ea:b5:b1:d0:a6:d7:81:e2:85:15:c6:88:7c:d8:17:fc:80:
         9a:f8:c1:26:c3:10:3f:15:10:e2:ee:6b:e2:d6:b4:f5:f5:e0:
         1f:cc:35:0f:2c:6e:11:79:22:be:73:7b:e6:7f:5d:4f:3a:d4:
         64:96:7c:3b:ad:8f:36:13:0b:2b:8b:65:16:49:ce:97:06:42:
         7c:b2:15:2e:64:e3:e1:7b:8c:94:f6:53:c5:cb:b8:0f:f5:b4:
         fa:7a:8d:96:67:ed:52:ec:72:5c:ef:a8:c6:c0:4c:6e:ef:a4:
         b9:e5:78:ff:04:70:3b:10:79:f1:09:08:9a:e5:ad:df:b5:dc:
         30:b3:73:c6:54:c7:bb:ff:bf:23:28:41:f6:b7:dd:8d:20:5a:
         8e:04:e5:83:47:31:6d:73:3b:92:16:2a:6c:6c:52:33:fe:56:
         6d:a5:73:57:f3:77:dd:52:5e:1a:fb:22:d7:50:46:e9:e0:8f:
         46:72:20:7c:7c:3a:80:ec:bf:c6:1c:77:72:ee:47:82:fc:6f:
         5e:f7:44:c7:cd:fd:6b:4c:dc:ff:4e:13:3e:12:ac:8b:7a:ff:
         19:a9:74:56:0a:bc:55:e6:af:8c:1f:a5:51:fd:55:d4:f7:4e:
         32:b6:c6:e4:4d:8a:0d:2b:6f:a6:1f:4d:14:21:33:3a:7c:8d:
         bd:44:28:4b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQRM5jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDExNjE1MDM1OFoXDTI1MDExODEzNTc0
M1owMzExMC8GA1UEAxMoNGJiZWMxNzFkZjFhZjE1MTAyMzc3ZDRmYWNhNmZiZDgw
OWIwNGVhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+t0c+mC17S
RQIPidBYFiFnsRRyO0S0zREt/lY/pK52l0tnZya7NcNighcuiUB+lDjduAe30vdH
kh1txs4VB/rVnit3DbYvyKyXVACDtjilxANOmN5rgF3MVoq93r9fPeqVfsug8MNI
foE5iAf7tzHFWuD4bo9DJHIwtlmcyCoEuoewTHgCMPKgQ+iZyw12yy4WCQnbwZyC
Hz3txWiJ/LfRyYg+vVQ479aFt45YByIwLOzW7tNPn66/m2m3Lfx7KnEcx4WMx4x1
mssyXFMdxKNAgu7BP9yrUb5h/GZ1TNY53svF407MjMtKqzWpii7IRXl7FHzrpJr5
eGXUCJ1wwmMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT7Ofnz4nNLivKI1U0u2KAP
zCaGxjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZDcxNWZkYi05Yzkx
LTQzNTMtOWQ3OC01YmZjMDYxOWM3NzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWQ3MTVmZGItOWM5MS00
MzUzLTlkNzgtNWJmYzA2MTljNzcxLzRiYmVjMTcxZGYxYWYxNTEwMjM3N2Q0ZmFj
YTZmYmQ4MDliMDRlYTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2sbDANBAIAAjAHAwUAKAN/oDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFhwwDQYJKoZIhvcNAQELBQADggEBACXq
tbHQpteB4oUVxoh82Bf8gJr4wSbDED8VEOLua+LWtPX14B/MNQ8sbhF5Ir5ze+Z/
XU861GSWfDutjzYTCyuLZRZJzpcGQnyyFS5k4+F7jJT2U8XLuA/1tPp6jZZn7VLs
clzvqMbATG7vpLnleP8EcDsQefEJCJrlrd+13DCzc8ZUx7v/vyMoQfa33Y0gWo4E
5YNHMW1zO5IWKmxsUjP+Vm2lc1fzd91SXhr7ItdQRungj0ZyIHx8OoDsv8Ycd3Lu
R4L8b173RMfN/WtM3P9OEz4SrIt6/xmpdFYKvFXmr4wfpVH9VdT3TjK2xuRNig0r
b6YfTRQhMzp8jb1EKEs=
-----END CERTIFICATE-----