Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6bdafe928624f0620806b74abcd1ff1b00924a6e.cer
File:                     6bdafe928624f0620806b74abcd1ff1b00924a6e.cer (raw, json)
Hash identifier:          PaV4SNxAu3dxd/bs5yfCUhiRy6pat1goh28Xw3xES6U=
Subject key identifier:   E7:EF:53:FD:06:78:31:6B:C7:EA:1B:DC:82:67:4A:B7:A9:65:5D:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010078CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/73464a07-ae09-4c21-82da-563f59f5367e/6bdafe928624f0620806b74abcd1ff1b00924a6e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/73464a07-ae09-4c21-82da-563f59f5367e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:01:42 +0000
Certificate not after:    Thu 03 Jul 2025 15:04:08 +0000
Subordinate resources:    AS: 262607
                          IP: 131.108.12.0/22
                          IP: 170.150.0.0/22
                          IP: 177.85.112.0/21
                          IP: 2804:6cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16808142 (0x10078ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:01:42 2023 GMT
            Not After : Jul  3 15:04:08 2025 GMT
        Subject: CN=6bdafe928624f0620806b74abcd1ff1b00924a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:7c:4a:c7:36:25:dd:a9:d4:1e:83:7e:19:
                    97:ca:c5:86:ac:36:87:d6:ba:23:fb:5b:08:b2:5d:
                    e3:1c:61:47:b4:19:a9:ec:af:96:d5:7f:c0:67:03:
                    a1:29:3e:36:1a:a5:d6:5f:d6:50:e3:9a:59:a7:a1:
                    71:3e:60:0a:2f:ef:50:2e:8a:50:0e:14:4b:0d:78:
                    d0:9a:d1:dc:8f:30:44:d2:38:2e:3a:42:35:4e:c5:
                    d3:1c:a8:29:b6:8d:16:75:9d:3c:78:af:1d:3d:27:
                    20:39:46:ee:3c:56:7b:ba:52:8c:fc:ac:69:ba:f9:
                    1b:36:99:cb:c9:61:18:aa:e5:df:af:e1:1f:ff:ff:
                    a8:a3:d6:10:da:56:d4:ff:44:78:26:9a:15:79:fa:
                    28:82:55:1b:fb:3c:f4:23:40:ca:72:de:8f:53:0a:
                    26:e3:ad:15:9e:a8:5b:ea:eb:f7:58:a2:22:5d:c6:
                    7e:70:83:61:70:65:51:7f:bd:8e:1d:63:30:c6:aa:
                    1b:3c:7b:05:5a:41:24:89:1e:b0:b4:7a:ce:8a:0c:
                    8a:e6:5a:2c:b5:07:ea:81:7c:f7:18:1c:32:4c:67:
                    69:e6:ae:ef:13:f3:5f:b1:4c:d6:ec:49:1f:4d:83:
                    8c:7d:a7:22:fa:76:46:1d:25:c4:7b:aa:23:02:6a:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EF:53:FD:06:78:31:6B:C7:EA:1B:DC:82:67:4A:B7:A9:65:5D:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/73464a07-ae09-4c21-82da-563f59f5367e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/73464a07-ae09-4c21-82da-563f59f5367e/6bdafe928624f0620806b74abcd1ff1b00924a6e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22
                  170.150.0.0/22
                  177.85.112.0/21
                IPv6:
                  2804:6cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262607

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:33:b9:61:3c:23:cd:91:d5:8d:12:e3:5b:2b:e4:54:57:
         67:a5:e9:05:c5:6e:5d:f2:1e:24:0b:ae:c6:75:6c:03:33:10:
         7f:1d:aa:bc:c1:e1:d0:b8:95:5d:26:0e:41:e2:08:bb:e4:61:
         f2:94:6c:84:f2:40:55:d6:48:56:f6:d3:d2:fe:6f:89:2a:a7:
         a0:7d:a1:5b:29:11:f7:aa:3b:1a:29:56:99:0f:32:bc:b4:31:
         6a:50:46:90:40:da:41:5a:40:f2:af:39:4c:23:08:30:82:8f:
         96:ac:41:92:67:ab:45:59:0e:f4:3c:e5:fc:cd:e9:d6:28:f4:
         47:1d:69:16:07:04:44:dd:a4:31:36:fb:b4:43:09:9b:e3:26:
         b3:4c:d2:50:9f:b4:77:3d:fc:d5:42:f6:e1:48:c8:53:26:71:
         ec:77:d6:c0:3b:1c:d3:89:70:49:f0:28:5f:d7:92:1d:22:90:
         55:f6:b8:a5:73:f0:9c:d1:82:f0:f2:e5:ee:19:62:54:e4:90:
         65:5e:c9:67:ac:c2:58:4d:56:e9:75:a9:5a:ca:86:e4:7f:0c:
         84:65:36:8b:db:7b:dd:63:72:ad:bf:55:28:26:03:e2:f9:cd:
         03:32:b7:b8:e1:ae:ab:fd:f1:2e:dd:71:19:ab:15:88:5e:f6:
         7a:46:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----