Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6087ed016c8d61d5269c0d5bff0f89bfaebd3213.cer
File:                     6087ed016c8d61d5269c0d5bff0f89bfaebd3213.cer (raw, json)
Hash identifier:          QvaIn0/Houv7omrmN7BaqPmtTpK6CqcZgM10dTKjLYM=
Subject key identifier:   C0:F7:E4:DD:B0:A9:90:05:48:27:FE:97:F4:94:68:30:64:CA:A8:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F85010
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e69ccd6e-8c4b-4082-ae7d-3d1c3edbe214/6087ed016c8d61d5269c0d5bff0f89bfaebd3213.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e69ccd6e-8c4b-4082-ae7d-3d1c3edbe214/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 16:42:03 +0000
Certificate not after:    Sun 15 Dec 2024 02:17:02 +0000
Subordinate resources:    AS: 265624
                          IP: 200.108.184.0/22
                          IP: 2806:3a5::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16273424 (0xf85010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 16:42:03 2023 GMT
            Not After : Dec 15 02:17:02 2024 GMT
        Subject: CN=6087ed016c8d61d5269c0d5bff0f89bfaebd3213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:aa:65:15:d0:bf:ce:16:62:44:4a:24:54:
                    2e:d8:23:c6:33:81:13:85:b4:36:a5:c0:d8:1d:da:
                    d3:90:1e:d4:bf:73:60:77:b0:42:2c:c7:31:85:4c:
                    2a:bb:6d:f6:51:65:cd:9a:d1:3d:9c:a3:78:9a:16:
                    0c:8f:cd:f7:30:e3:72:4d:cd:1d:60:1c:99:9f:77:
                    c6:0e:c6:9c:91:30:32:d7:4f:07:e4:3f:fc:77:f0:
                    a6:8d:d2:39:01:02:6e:06:c7:9b:fe:be:07:81:6e:
                    43:d1:42:e6:03:78:97:97:56:7c:ea:d8:0f:b8:1f:
                    4a:e8:0d:5c:ff:f0:b0:56:2a:9a:26:a0:22:29:8c:
                    a1:02:ed:cb:eb:0d:12:b5:86:40:6d:8f:34:f3:be:
                    45:5b:cf:f1:31:a0:b3:42:78:7c:af:a2:9c:a5:58:
                    c9:d6:de:96:c4:6b:15:a9:f7:39:c1:3c:d4:d1:77:
                    d4:02:b4:31:4c:6f:bb:c1:0d:ff:31:b7:ec:73:85:
                    70:0e:70:99:03:f6:05:85:92:cd:2d:07:d4:fc:6b:
                    43:b7:7c:6a:ce:48:77:24:ee:01:3c:48:84:65:e9:
                    fe:cd:f5:47:ca:ff:cc:93:c4:2b:03:e0:c6:96:2a:
                    fa:45:ab:76:a6:2a:24:05:25:86:34:7d:2b:91:20:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:E4:DD:B0:A9:90:05:48:27:FE:97:F4:94:68:30:64:CA:A8:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e69ccd6e-8c4b-4082-ae7d-3d1c3edbe214/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e69ccd6e-8c4b-4082-ae7d-3d1c3edbe214/6087ed016c8d61d5269c0d5bff0f89bfaebd3213.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.184.0/22
                IPv6:
                  2806:3a5::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265624

    Signature Algorithm: sha256WithRSAEncryption
         c4:bf:64:0d:ef:b2:fa:17:66:4a:77:13:a8:49:08:8e:12:83:
         13:7c:29:32:56:02:b1:75:9a:e4:00:02:a8:53:49:68:30:60:
         8a:3f:a9:83:35:53:35:53:f4:b6:ff:c3:0e:58:d0:2a:78:9e:
         aa:1d:0a:25:e4:fa:96:86:02:4e:d6:6a:3e:09:e3:9b:f1:75:
         c7:fa:39:df:e6:ec:86:a1:17:7f:70:b3:7b:53:ce:e3:8f:12:
         64:69:31:e9:f5:31:33:68:4c:c0:68:b6:d2:fe:11:18:88:2e:
         35:c2:0a:e7:dc:d4:f9:9c:8d:d4:64:9c:53:7e:e6:f9:12:38:
         05:d3:af:db:ab:04:ee:d1:f3:f4:8a:db:4c:40:a9:03:2f:2d:
         79:39:6a:62:c4:00:13:e6:d8:61:50:98:b3:a6:34:bc:91:e6:
         1d:06:ac:1d:22:c9:24:73:a6:47:c8:28:45:34:c1:a0:b8:9a:
         cb:e7:8b:80:99:98:b7:8b:1a:eb:26:5c:6a:6f:de:41:e3:e7:
         87:66:d1:bc:52:55:19:3a:29:9b:1b:e8:22:dc:ab:50:b2:c3:
         b4:43:fe:ae:3f:f9:a2:dd:3a:03:01:f7:89:4a:4f:00:02:c6:
         a6:f2:7a:eb:d8:73:e6:50:98:06:35:10:54:44:23:35:4d:ee:
         19:82:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----