Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6858fc8c50857d4476ea67245655829a81870394.cer
File:                     6858fc8c50857d4476ea67245655829a81870394.cer (raw, json)
Hash identifier:          ia5OK1r/Bk8hc7f1pBrkk4W3I686bycUiQwZcB1Y2aU=
Subject key identifier:   1E:BC:FD:74:D8:6F:16:00:E4:97:DF:77:E3:D4:47:BC:50:C8:31:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECBC96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/6858fc8c50857d4476ea67245655829a81870394.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 12:42:19 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.0.96.0/22
                          IP: 2803:a540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15514774 (0xecbc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 12:42:19 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=6858fc8c50857d4476ea67245655829a81870394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b6:a2:a2:21:8c:97:b7:2d:f8:d5:50:08:d9:
                    36:e7:a0:5f:18:33:dc:ed:44:1c:e0:25:34:9a:9c:
                    74:8e:d1:4a:31:97:f0:b7:ad:f0:57:0a:2f:80:57:
                    34:f9:01:2e:8c:21:55:17:97:85:75:42:9f:78:62:
                    03:9f:db:f9:ce:f8:ef:28:a4:a0:10:41:34:33:75:
                    3a:87:ac:52:e8:aa:e7:31:6e:ba:e8:51:a1:3e:a7:
                    4b:26:b7:78:78:23:65:8d:d9:be:5a:e1:57:b4:06:
                    e7:34:7d:cb:45:7a:28:a2:f2:eb:1b:42:d4:ef:b0:
                    c9:0e:cb:4e:09:ae:f0:f2:35:d2:24:f3:5e:a6:d5:
                    b7:04:f9:b7:35:29:71:81:f3:e4:a6:85:9c:24:31:
                    88:29:7c:a7:aa:cd:57:8b:e7:82:91:71:b2:1b:bb:
                    75:d5:b5:7b:17:bb:c2:d8:e2:11:2e:ca:6c:90:17:
                    f0:5b:fa:44:f3:de:7d:93:db:93:a4:fa:aa:41:b5:
                    92:40:f0:2e:8c:34:2b:d6:2b:a5:d9:1e:23:c8:2f:
                    e5:2b:bb:f5:97:4d:6d:2e:42:dd:2e:4f:5a:fd:86:
                    5c:ef:47:7a:0f:b6:84:07:3a:89:c3:ba:35:6d:45:
                    4e:ef:fb:3f:a4:15:62:21:1a:4c:f3:e6:a2:db:f7:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BC:FD:74:D8:6F:16:00:E4:97:DF:77:E3:D4:47:BC:50:C8:31:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/6858fc8c50857d4476ea67245655829a81870394.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.96.0/22
                IPv6:
                  2803:a540::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:96:4b:ab:37:8a:e5:7a:4b:66:6c:09:4d:23:c9:31:d2:
         2f:a8:02:3d:bd:3c:38:b3:c4:ab:02:1d:9f:fe:29:98:e6:62:
         7d:cb:01:3d:d5:11:39:63:24:3a:93:84:6a:17:3d:c4:4e:75:
         6a:49:fa:66:0a:1c:d2:f2:82:32:7a:61:fd:db:d1:5e:bf:35:
         81:f8:0c:53:3f:cc:1a:fe:12:c8:15:03:94:3d:a2:09:13:21:
         81:e1:b8:d7:e9:41:d0:69:a5:e6:d9:76:f0:7a:8f:02:31:2f:
         ad:27:48:69:29:9f:fb:35:30:cc:6c:4d:65:d4:58:86:fe:eb:
         e0:c0:7b:3e:6f:88:10:c4:43:66:12:d6:d7:d8:3d:49:c4:3b:
         40:87:20:44:0d:1a:4a:38:90:ea:5f:02:9a:51:4f:3d:d6:18:
         f2:c4:f8:e1:04:c1:e5:0b:51:b1:c4:ea:51:d5:a6:54:13:f3:
         cb:a4:a3:9c:2f:54:a9:a3:d1:e4:4d:ab:8e:25:8c:dc:03:4f:
         67:c0:91:c4:e4:be:21:e6:78:93:17:5c:b5:4a:f2:09:6d:91:
         fe:b2:9d:50:b2:9b:da:37:a1:25:11:80:ce:8c:f0:8d:c1:40:
         58:94:6a:1f:18:be:98:37:df:c1:37:bc:94:13:64:f4:09:fa:
         ec:ee:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----