Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ebacfd7d0eebbf579e04666551a91f859c8e2c.cer
File:                     61ebacfd7d0eebbf579e04666551a91f859c8e2c.cer (raw, json)
Hash identifier:          DcC7wGO4+x/dgiBygImo6JFGk0OeWg/tBpw827tI7JM=
Subject key identifier:   D0:65:84:81:EA:EB:2A:9E:C9:35:21:30:9D:75:6C:21:5F:8D:9C:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F73A3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dcd2db09-457f-43a9-89fc-3836b15ed1bc/61ebacfd7d0eebbf579e04666551a91f859c8e2c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dcd2db09-457f-43a9-89fc-3836b15ed1bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:00:33 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.218.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16202303 (0xf73a3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:00:33 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=61ebacfd7d0eebbf579e04666551a91f859c8e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:3e:1c:91:b0:72:b9:fd:92:91:89:4f:62:
                    1b:92:5d:b3:50:9a:f4:2e:69:59:04:80:09:42:71:
                    6a:ff:b4:c4:dc:4e:11:1d:8d:d4:45:74:f9:4c:bf:
                    d2:c3:5d:19:8d:0e:a5:76:29:ee:cb:85:e7:1b:fb:
                    e7:ac:bd:70:97:0d:cf:8e:6a:98:a6:04:e2:ce:f5:
                    65:94:f1:6a:78:a3:45:ca:8e:42:d9:3a:20:8a:cc:
                    5b:75:5e:0a:22:80:b6:81:56:f9:06:d5:8e:a2:0a:
                    17:eb:10:c4:9c:0c:4f:37:b7:0e:38:80:7d:89:86:
                    42:43:bd:32:2f:93:52:64:94:7d:e4:a2:a2:4c:6a:
                    5f:20:04:f5:84:f4:e2:a9:86:37:12:80:73:b6:c4:
                    3c:99:48:95:cc:53:8f:d0:5a:80:a8:83:1f:aa:cd:
                    7b:7c:70:91:ed:34:f0:1c:17:1f:ef:e9:a2:df:b6:
                    00:79:da:e5:fc:2e:e4:a6:06:55:7d:ad:86:3a:a9:
                    e7:23:8e:0f:74:5c:82:13:e0:50:fd:dc:41:6e:63:
                    1b:c9:2c:11:39:b9:86:c3:1b:a6:87:26:ac:22:57:
                    25:9e:3c:66:ae:56:55:47:fd:ab:b5:81:4c:4d:be:
                    7b:b7:6f:62:a3:99:3a:b5:14:a1:71:ab:fa:a4:e9:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:65:84:81:EA:EB:2A:9E:C9:35:21:30:9D:75:6C:21:5F:8D:9C:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dcd2db09-457f-43a9-89fc-3836b15ed1bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dcd2db09-457f-43a9-89fc-3836b15ed1bc/61ebacfd7d0eebbf579e04666551a91f859c8e2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:6a:a5:5c:b0:8f:50:e6:4e:1d:1c:49:a7:47:bd:5b:a0:
         f3:82:9f:23:84:14:b3:bf:a1:ee:82:52:ea:3d:d6:53:e1:d8:
         87:a3:2d:72:7a:c6:ad:32:a5:3a:33:4a:fb:c1:6f:f8:4b:8d:
         78:5c:33:35:02:ba:83:39:d8:a3:b8:cf:b7:eb:29:7e:e4:1c:
         b7:f5:74:e9:63:ae:bb:60:90:ed:15:69:6a:ed:33:85:e5:e2:
         26:c8:22:2f:0f:20:97:9f:a7:07:d6:d9:5b:cf:b2:e8:1f:f9:
         f1:02:b5:7b:f0:8f:2e:a1:d8:7c:df:a8:d3:96:14:c1:fb:3b:
         8d:3f:c9:cf:61:07:b1:18:2f:e6:b8:c5:87:12:9f:5b:4b:38:
         e3:b6:4d:a9:b1:8e:b1:12:11:c7:0c:cd:f9:5a:fe:1f:ab:d2:
         85:14:6d:ff:a8:f5:7d:ae:2b:ae:65:1a:28:c1:bc:22:bb:4b:
         b0:07:16:84:2e:44:e0:c1:5b:3f:73:8e:e6:02:04:a1:bf:06:
         3a:1f:58:89:e2:56:75:56:91:32:0a:95:74:bd:df:6c:c1:1e:
         8a:43:39:52:8f:3d:3c:4d:ae:97:d0:f0:8a:9a:48:46:af:42:
         60:b6:25:92:43:1c:32:bf:12:88:4f:b1:12:d6:e5:fa:41:f0:
         23:9c:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----