Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6780eb9d10b7ab18546ad32d7c475947b0f31c57.cer
File:                     6780eb9d10b7ab18546ad32d7c475947b0f31c57.cer (raw, json)
Hash identifier:          PYWKexO21KWG+++ad17uhoJRa563kiYxej4RnXsVZkY=
Subject key identifier:   53:B5:A8:46:38:01:F4:23:D9:E6:EE:2A:16:56:1E:7B:10:35:9B:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01080027
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/6780eb9d10b7ab18546ad32d7c475947b0f31c57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 20:49:33 +0000
Certificate not after:    Wed 19 Nov 2025 21:59:32 +0000
Subordinate resources:    AS: 273166
                          IP: 2803:5250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17301543 (0x1080027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 23 20:49:33 2024 GMT
            Not After : Nov 19 21:59:32 2025 GMT
        Subject: CN=6780eb9d10b7ab18546ad32d7c475947b0f31c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:b7:56:7a:a7:5c:fc:66:4c:bb:f0:1e:1d:
                    86:db:9c:35:58:0d:3c:23:c4:06:c3:45:d0:d9:3b:
                    ad:c4:6f:44:6b:96:17:b4:e6:7e:81:92:e5:ae:d8:
                    64:87:ce:87:44:b4:43:b1:61:47:3c:b1:33:32:e3:
                    f6:1d:6d:6b:2c:5b:e1:f7:55:65:53:c0:db:4c:9b:
                    98:f4:3f:65:6c:05:34:28:22:4f:b9:f4:92:04:b0:
                    9e:07:11:70:58:3e:ae:8e:26:ed:61:64:de:d8:93:
                    d9:8d:04:b4:9e:07:c1:36:84:53:9e:c5:2f:68:5e:
                    24:1c:ec:6c:c6:be:d9:22:47:be:d5:b0:13:61:c6:
                    aa:6f:2f:5c:ae:35:37:67:0e:f5:e5:7c:88:43:f4:
                    ae:14:1d:65:d9:34:22:b2:46:1f:b9:ab:59:b4:d5:
                    c6:e9:11:1a:ae:6d:d8:84:16:80:f4:f6:e7:9c:b9:
                    49:1c:07:c0:e9:16:9f:ab:71:8a:30:83:18:d7:8e:
                    ea:da:72:9e:e0:5a:25:8f:d6:a6:4a:a1:b8:76:9a:
                    2b:3d:de:51:13:c8:c7:0b:38:48:16:00:84:3b:93:
                    5c:29:53:de:d5:91:13:a8:7b:90:bd:ff:25:80:90:
                    6b:97:a0:2e:3d:d6:1b:54:66:c2:5a:00:74:8e:81:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B5:A8:46:38:01:F4:23:D9:E6:EE:2A:16:56:1E:7B:10:35:9B:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/6780eb9d10b7ab18546ad32d7c475947b0f31c57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273166

    Signature Algorithm: sha256WithRSAEncryption
         40:85:9a:3d:f9:16:61:91:98:2d:28:d6:a6:31:24:fc:02:70:
         08:a8:a0:f7:01:6c:95:9a:0a:34:5d:e8:5e:72:bc:c4:bb:df:
         42:20:b8:a0:d3:33:fb:1b:9b:f7:dd:1f:b0:cc:9f:96:02:3c:
         09:4b:d7:ed:13:fd:67:29:bb:db:a7:15:37:12:25:3d:0c:87:
         55:c5:75:db:45:be:bd:e2:65:02:ff:08:a5:10:85:c7:de:15:
         d4:20:d4:33:c3:ae:cd:a0:c8:0c:a7:d0:a4:37:a6:b5:e8:08:
         4f:49:9a:e1:6f:ef:eb:bd:2a:02:4b:9e:ad:eb:ef:cf:7f:ca:
         7e:21:5e:57:db:51:05:1d:4f:f3:bf:18:1b:c1:66:86:a6:c6:
         a0:6f:62:74:9d:88:86:a7:c4:fc:95:3b:7a:57:0f:c5:ed:d1:
         de:c2:4a:3d:ea:19:8b:3f:97:5f:3e:f8:55:70:3c:74:a1:00:
         f7:12:ed:d5:0b:fa:89:ad:30:c9:ff:9e:68:94:b3:ca:bc:8c:
         8f:e1:25:c5:32:1b:1f:ec:47:dc:df:5f:b0:8f:f0:07:42:9c:
         69:02:d4:70:d0:57:80:e4:e6:0c:1b:1d:b0:45:14:2c:38:22:
         ad:f6:87:86:da:98:f8:45:33:25:f7:26:25:b2:ae:11:8b:79:
         96:52:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----