Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a54ea6bae840309436b3490b67389679c74ccdf.cer
File:                     6a54ea6bae840309436b3490b67389679c74ccdf.cer (raw, json)
Hash identifier:          dwiY6Ib7/hlKxZhykAtX7pkmHDjp8fANtuKr/PwZyis=
Subject key identifier:   13:E4:F8:28:CE:DD:7C:0B:2B:63:72:32:D0:D1:73:46:66:BF:E7:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E74170
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4f3318e-9969-41f9-943e-b32e7f9d3938/6a54ea6bae840309436b3490b67389679c74ccdf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4f3318e-9969-41f9-943e-b32e7f9d3938/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Apr 2023 19:28:15 +0000
Certificate not after:    Wed 20 Nov 2024 15:43:14 +0000
Subordinate resources:    IP: 2801:15:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15155568 (0xe74170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 19:28:15 2023 GMT
            Not After : Nov 20 15:43:14 2024 GMT
        Subject: CN=6a54ea6bae840309436b3490b67389679c74ccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:8c:0d:33:e2:4d:df:86:c5:2f:b0:27:27:
                    81:92:20:e8:bc:7d:33:7e:89:7d:ac:65:1f:79:0a:
                    5b:59:31:e3:aa:0f:34:a1:0e:6b:7d:40:85:cc:11:
                    f2:70:62:29:30:4e:1b:1f:74:c0:64:b4:56:33:f7:
                    d6:a8:7e:31:eb:96:9a:d7:5c:5f:09:4f:02:ab:57:
                    9d:42:1e:33:f2:5d:d6:38:ab:7a:ac:03:1e:0f:50:
                    13:fa:07:6f:00:da:e3:45:bb:43:1a:af:01:c8:a0:
                    9e:b4:36:84:b5:57:31:77:0f:38:48:8a:81:c6:6a:
                    19:bc:b9:0e:3b:f1:28:d1:76:f4:a5:06:99:4a:e4:
                    ae:38:1b:8f:3d:b6:2f:15:ca:28:90:e9:a6:33:73:
                    49:2f:49:36:55:3d:17:73:d8:42:9a:f1:47:7f:1d:
                    ec:1c:89:68:fa:b0:45:31:74:37:fc:1e:56:fe:f2:
                    1a:f7:7c:19:45:01:5f:77:eb:89:f2:13:d4:16:a7:
                    5c:4e:0f:22:06:80:71:56:0c:5f:d2:83:78:12:59:
                    7b:7b:52:23:de:e0:5a:b5:07:7f:40:bd:36:74:0c:
                    7d:0c:95:3f:d2:09:78:22:f9:65:04:e6:fa:05:b7:
                    b8:99:81:a5:79:63:58:a3:f1:93:d7:23:34:8c:b0:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:F8:28:CE:DD:7C:0B:2B:63:72:32:D0:D1:73:46:66:BF:E7:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4f3318e-9969-41f9-943e-b32e7f9d3938/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4f3318e-9969-41f9-943e-b32e7f9d3938/6a54ea6bae840309436b3490b67389679c74ccdf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:bc:95:a4:5e:b1:46:96:09:e7:f7:33:d8:1a:db:bd:7c:
         17:7f:15:e1:11:7f:25:bc:9e:7f:f8:a8:45:0a:48:97:4a:b6:
         89:e7:1b:69:e9:37:3c:4e:c6:6e:78:07:28:0c:ed:57:8f:ca:
         a0:da:a1:9f:ff:70:4a:8e:e7:44:6e:41:4f:ac:47:c4:e5:40:
         25:03:d0:20:da:ac:2f:a4:86:57:a3:27:f1:72:35:0c:43:5f:
         05:ce:db:54:f2:3d:76:5b:2b:4e:63:24:58:75:ec:f5:ac:8d:
         83:b7:56:8a:c3:a9:d4:7f:60:b7:2f:e7:c5:7d:25:b4:78:9a:
         66:bd:b4:aa:f1:46:29:bb:7c:80:fd:11:08:d5:c6:ad:6f:17:
         08:04:84:ab:9f:fa:1c:dc:a8:30:62:f3:fd:ed:33:62:b4:4b:
         89:60:f2:5f:7c:6f:93:d2:e6:f8:5e:c8:af:98:9f:b6:07:2d:
         b5:87:c1:c7:b9:30:8d:b0:f6:18:79:cd:47:6c:88:d2:7d:35:
         e1:07:56:ae:e5:a6:b4:23:82:2f:d6:78:29:97:53:05:85:15:
         02:f1:fd:e4:04:5c:6e:d2:28:92:9b:cf:1e:d4:b8:25:0a:e2:
         df:bc:2f:b0:57:59:43:7c:a9:3d:31:f5:89:f8:99:11:aa:1e:
         ce:90:b5:b1
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAOdBcDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQyNTE5MjgxNVoXDTI0MTEyMDE1NDMx
NFowMzExMC8GA1UEAxMoNmE1NGVhNmJhZTg0MDMwOTQzNmIzNDkwYjY3Mzg5Njc5
Yzc0Y2NkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7CjA0z4k3f
hsUvsCcngZIg6Lx9M36JfaxlH3kKW1kx46oPNKEOa31AhcwR8nBiKTBOGx90wGS0
VjP31qh+MeuWmtdcXwlPAqtXnUIeM/Jd1jireqwDHg9QE/oHbwDa40W7QxqvAcig
nrQ2hLVXMXcPOEiKgcZqGby5DjvxKNF29KUGmUrkrjgbjz22LxXKKJDppjNzSS9J
NlU9F3PYQprxR38d7ByJaPqwRTF0N/weVv7yGvd8GUUBX3frifIT1BanXE4PIgaA
cVYMX9KDeBJZe3tSI97gWrUHf0C9NnQMfQyVP9IJeCL5ZQTm+gW3uJmBpXljWKPx
k9cjNIywb3ECAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQT5Pgozt18CytjcjLQ0XNG
Zr/nyDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mNGYzMzE4ZS05OTY5
LTQxZjktOTQzZS1iMzJlN2Y5ZDM5MzgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjRmMzMxOGUtOTk2OS00
MWY5LTk0M2UtYjMyZTdmOWQzOTM4LzZhNTRlYTZiYWU4NDAzMDk0MzZiMzQ5MGI2
NzM4OTY3OWM3NGNjZGYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABXYADANBgkqhkiG9w0BAQsF
AAOCAQEArQy8laResUaWCef3M9ga2718F38V4RF/Jbyef/ioRQpIl0q2iecbaek3
PE7GbngHKAztV4/KoNqhn/9wSo7nRG5BT6xHxOVAJQPQINqsL6SGV6Mn8XI1DENf
Bc7bVPI9dlsrTmMkWHXs9ayNg7dWisOp1H9gty/nxX0ltHiaZr20qvFGKbt8gP0R
CNXGrW8XCASEq5/6HNyoMGLz/e0zYrRLiWDyX3xvk9Lm+F7Ir5iftgcttYfBx7kw
jbD2GHnNR2yI0n014QdWruWmtCOCL9Z4KZdTBYUVAvH95ARcbtIokpvPHtS4JQri
37wvsFdZQ3ypPTH1ifiZEaoezpC1sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-ams.rpki-client.org