Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/606baf33d76c7926c4bf5942fb1c98d98b78719d.cer
File:                     606baf33d76c7926c4bf5942fb1c98d98b78719d.cer (raw, json)
Hash identifier:          h2OcvpXpW3EGJr/Rled2bCWXK94pTSpytRp0Ck0ZHJc=
Subject key identifier:   6D:36:FE:55:57:73:AA:77:D7:73:23:66:B9:6C:50:69:3C:9A:2E:CC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E59C77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10bb728b-4c0f-4257-ad24-e6791e1ce29e/606baf33d76c7926c4bf5942fb1c98d98b78719d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10bb728b-4c0f-4257-ad24-e6791e1ce29e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 16:05:39 +0000
Certificate not after:    Fri 16 Feb 2024 14:19:00 +0000
Subordinate resources:    AS: 271900
                          IP: 192.141.98.0/23
                          IP: 200.3.195.0/24
                          IP: 2803:a210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15047799 (0xe59c77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 16:05:39 2023 GMT
            Not After : Feb 16 14:19:00 2024 GMT
        Subject: CN=606baf33d76c7926c4bf5942fb1c98d98b78719d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:ff:f2:0d:cf:da:ff:20:fa:3b:75:99:b2:
                    70:d5:c6:50:60:51:91:ec:7d:f6:fe:82:90:b3:a9:
                    73:ba:a0:fa:4f:07:7c:1c:69:9e:75:e0:d0:88:e0:
                    1a:e9:36:46:bc:7f:a7:78:83:4a:25:ae:f5:c1:0b:
                    6b:91:f5:f9:ce:a4:57:89:e2:b0:19:20:2e:7c:8c:
                    32:2d:24:66:d4:cc:9d:05:7e:8a:19:de:e6:89:b3:
                    25:1f:dd:5a:06:9a:4a:ea:77:44:4f:16:f2:ee:8b:
                    6b:e9:95:e4:ce:fd:81:17:93:b1:d3:6f:81:f4:03:
                    f9:1b:06:48:c4:80:5b:b1:3c:03:a0:46:18:8a:96:
                    8b:20:1b:81:59:76:c0:fd:42:99:4d:1c:a1:e8:d9:
                    88:6c:02:88:37:e7:4d:aa:0c:26:c0:5f:c9:e4:40:
                    b9:f4:a2:9c:0a:7c:5c:7d:06:f9:61:ed:1c:6a:9b:
                    22:8e:a5:66:90:91:cd:27:e9:c8:03:ed:1b:3c:56:
                    b4:49:06:04:c1:40:95:6d:89:40:39:c5:be:22:d1:
                    3b:41:25:99:7e:dd:35:74:bc:a1:62:1f:3e:96:de:
                    ea:a2:e6:49:80:0a:aa:07:fc:f2:c8:d4:83:c5:4f:
                    f4:c0:ec:f4:b2:46:49:c7:00:0e:86:48:c8:88:0b:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:FE:55:57:73:AA:77:D7:73:23:66:B9:6C:50:69:3C:9A:2E:CC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10bb728b-4c0f-4257-ad24-e6791e1ce29e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10bb728b-4c0f-4257-ad24-e6791e1ce29e/606baf33d76c7926c4bf5942fb1c98d98b78719d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.98.0/23
                  200.3.195.0/24
                IPv6:
                  2803:a210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271900

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:df:cb:66:20:34:bf:ae:38:5c:2b:6b:96:41:e4:12:74:
         11:c0:91:c1:92:50:af:00:09:e0:e0:23:f6:ed:17:ed:ba:4b:
         7b:1f:0a:ac:a6:20:2c:69:82:ca:fd:65:b1:80:ac:05:4a:df:
         5b:78:1d:46:a8:15:6d:55:e0:ac:a3:d7:27:8f:6b:c1:3e:44:
         aa:5c:87:90:bc:af:48:79:2d:74:41:cb:00:69:13:f0:11:f0:
         8e:ae:53:62:d1:4c:5f:7c:9f:cd:a2:d4:0f:b7:54:5e:46:71:
         e0:85:26:a7:a8:a5:98:38:82:8c:5e:18:e8:56:01:91:0b:a6:
         b8:85:6b:07:d0:e1:62:fd:2e:e7:fc:e5:b2:ed:2e:d2:82:bb:
         9b:0f:aa:d5:6e:44:2d:2f:e3:b6:b7:75:14:46:77:69:87:ee:
         99:8c:14:21:92:c0:9d:3b:ec:88:af:62:d3:c3:57:b4:03:4d:
         b4:c4:57:36:9c:0f:a9:6b:c3:29:95:3e:d5:12:63:2f:64:aa:
         f2:26:ef:d5:c8:2d:79:a5:14:1c:a5:49:d5:b0:7c:d7:f5:2b:
         7a:ba:7a:58:c8:0b:e1:16:51:f1:b8:04:ba:6b:53:de:a5:4c:
         81:ff:bc:df:36:ce:11:28:f9:a9:69:e7:3b:f3:1f:8c:0b:0e:
         43:40:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----