Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a37794e8cfd28c9a40018349f97dc78c669a9b1.cer
File:                     6a37794e8cfd28c9a40018349f97dc78c669a9b1.cer (raw, json)
Hash identifier:          wQ1TWJLU/y1Jie6YQx8x/+7hmktuAMyiTFU5Y4gSw2w=
Subject key identifier:   FC:D5:7F:B3:78:1A:2C:24:04:C2:EB:7F:27:3A:90:04:4F:2D:55:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109EB08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4beef261-f8b5-4ec7-b849-27e52c4c02aa/6a37794e8cfd28c9a40018349f97dc78c669a9b1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4beef261-f8b5-4ec7-b849-27e52c4c02aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 16:17:46 +0000
Certificate not after:    Sat 01 Nov 2025 04:00:00 +0000
Subordinate resources:    IP: 200.3.244.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17427208 (0x109eb08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  9 16:17:46 2024 GMT
            Not After : Nov  1 04:00:00 2025 GMT
        Subject: CN=6a37794e8cfd28c9a40018349f97dc78c669a9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:44:84:ca:8a:54:8b:a6:84:a4:03:c8:0d:
                    08:ec:03:2e:16:26:1e:2c:56:01:90:fb:44:2d:8e:
                    74:00:63:d5:6d:db:79:36:2b:8d:9e:63:f3:e0:8a:
                    77:ce:5b:62:b9:9d:0e:99:8a:71:70:50:da:b0:dd:
                    b4:b3:b3:be:a5:ac:d0:c4:ba:2e:7d:48:c9:15:19:
                    c7:55:26:cd:ec:92:1b:39:b2:a9:b4:8a:18:dc:07:
                    52:87:ec:d5:0a:07:f8:9e:57:d5:46:2c:cd:9f:91:
                    fd:0a:7b:e8:d4:14:e9:2e:3a:dd:f8:90:df:a2:1d:
                    11:09:78:2a:bd:c3:b8:9f:a1:40:a0:79:2f:ef:41:
                    79:5b:a3:50:ce:6f:9d:69:fa:e6:0a:db:1b:f9:ff:
                    c7:ff:c9:71:f0:8b:ef:4e:b9:08:41:04:9a:42:3f:
                    13:cf:bd:ab:ed:1e:b9:b3:46:52:51:43:ff:7c:12:
                    63:4c:81:ca:4f:4a:e1:72:d9:1d:17:bf:c3:42:2f:
                    a1:5e:0b:30:bc:0b:f5:8e:c5:11:3c:33:32:a8:7d:
                    a4:22:ae:fa:50:34:83:e8:5d:a4:1f:41:55:2f:ba:
                    1b:af:d1:6e:e1:8c:11:37:83:68:7c:0a:67:f4:e9:
                    c5:ee:d3:df:00:f9:80:d9:ad:73:1f:27:7c:39:47:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D5:7F:B3:78:1A:2C:24:04:C2:EB:7F:27:3A:90:04:4F:2D:55:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4beef261-f8b5-4ec7-b849-27e52c4c02aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4beef261-f8b5-4ec7-b849-27e52c4c02aa/6a37794e8cfd28c9a40018349f97dc78c669a9b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:d1:2f:96:a2:10:dd:e2:1f:95:fb:43:fa:1a:64:20:5d:
         80:cd:89:1b:1d:9f:f3:cd:cb:e1:0f:77:d5:f8:78:60:8e:9b:
         3b:49:cf:6c:a7:f4:b5:d9:24:5b:45:02:84:f6:e4:6e:aa:23:
         ea:19:81:be:68:47:69:e6:60:21:35:c5:90:5e:63:33:f9:11:
         58:63:75:b9:a5:d7:fa:b6:28:4d:db:8f:ba:bf:8f:d1:a0:4d:
         e3:e0:0a:1d:f0:0d:52:70:a0:27:0a:c1:e5:da:0e:bb:2a:97:
         fa:d7:e1:98:3b:18:43:aa:af:57:a5:ae:b7:21:5f:69:09:03:
         60:b8:96:9e:f7:98:1b:a6:b7:93:a8:74:ec:01:60:85:bc:7f:
         c7:1e:6a:63:5e:8f:e2:94:53:bd:a8:03:ff:0e:19:f0:fc:75:
         68:90:36:4f:d8:99:cd:b5:5c:5f:ea:56:e4:44:2a:12:a4:20:
         03:f5:de:a4:a5:51:3f:e7:1e:d8:ec:ce:2a:fc:6e:74:35:fa:
         5f:49:bc:33:52:30:5b:76:f3:81:d8:b8:96:18:c8:44:45:fd:
         b5:94:98:fe:fe:a1:b7:f6:83:84:f3:a1:ed:e4:ff:ea:25:f2:
         2b:70:58:bf:ba:ab:0a:a0:72:f9:ab:a0:51:c4:94:30:98:42:
         90:22:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----