Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.cer
File:                     6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.cer (raw, json)
Hash identifier:          ywWbFRN/tWmNvnXqeux7ez/ACrekwzF6vAtEW8y/Pt8=
Subject key identifier:   4D:89:D9:6B:BE:72:AE:8C:07:F6:EE:15:30:10:C4:10:0C:78:A5:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0FEC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 04:16:10 +0000
Certificate not after:    Sat 26 Apr 2025 16:05:00 +0000
Subordinate resources:    IP: 109.104.148.0/22
                          IP: 2801:18:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15793859 (0xf0fec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  7 04:16:10 2023 GMT
            Not After : Apr 26 16:05:00 2025 GMT
        Subject: CN=6c6b207acd0d793b67c78c49bfe9ffadc4c0336d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:8b:af:b0:ee:30:a4:03:d1:cb:98:4a:84:
                    54:41:e3:a8:bc:43:0c:e1:9c:d2:d1:38:75:c5:34:
                    5f:04:cc:7e:3a:12:a7:d5:a2:9e:b6:09:06:18:47:
                    c2:c0:f7:20:55:f4:6f:12:9b:0b:f6:f2:52:bf:83:
                    4f:33:d6:11:7a:59:9d:73:c0:b7:b0:d2:9b:83:dc:
                    f4:59:6e:02:a8:cb:fd:4c:51:14:9f:9d:85:8f:b2:
                    16:36:a2:c0:a2:0a:57:7d:ba:9f:d2:ae:41:4f:bd:
                    92:a4:21:e3:46:72:a6:9a:2f:1d:0e:eb:98:fa:03:
                    be:55:ea:72:da:be:f8:09:a8:e0:bc:b5:9a:e7:53:
                    46:bd:0b:16:52:26:bb:27:c4:37:d8:0d:d8:f3:2a:
                    ce:97:39:86:76:57:8c:9e:c2:17:ce:5a:29:a6:f9:
                    05:14:ea:0b:75:96:51:54:76:ba:65:f7:16:54:1c:
                    6f:2c:48:d1:35:4d:45:1a:a9:74:95:fc:78:8c:02:
                    3f:26:a0:7a:81:9f:49:dc:3b:48:43:ad:16:22:da:
                    2d:4c:a0:d0:3c:86:0d:24:7b:47:bb:65:00:0e:bd:
                    b8:fd:6e:ff:0b:fa:b5:ff:cc:ef:c5:62:97:f9:f5:
                    18:f0:68:c5:34:c9:83:ac:5b:28:bc:0a:2e:3f:e8:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:89:D9:6B:BE:72:AE:8C:07:F6:EE:15:30:10:C4:10:0C:78:A5:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.104.148.0/22
                IPv6:
                  2801:18:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:ad:9a:b4:6d:ae:53:08:75:59:a1:4a:56:4e:b8:af:21:48:
         3b:53:c8:64:c5:87:ec:ba:37:5b:ea:f4:ba:53:b5:17:e1:cf:
         d7:86:09:50:73:2f:d2:4c:50:47:38:5e:dd:8f:fb:72:96:66:
         16:c5:02:99:21:25:f1:db:0b:b9:01:93:67:af:4c:8c:8d:b2:
         db:76:13:00:e8:00:1a:be:78:e1:fd:48:40:83:af:84:6f:b6:
         e5:85:ec:21:3b:96:ea:9b:4d:43:f1:67:db:8d:69:09:47:ff:
         74:13:86:b5:26:2c:eb:e2:68:ab:1b:4a:8e:8a:ea:11:83:4f:
         a2:5e:13:57:1a:36:ab:4b:6c:90:cf:59:f9:50:60:2d:d1:de:
         5b:7d:18:f8:70:00:bc:11:9d:46:8f:d2:e9:26:60:dc:b2:0b:
         a2:39:cc:99:0e:7c:99:44:66:88:de:41:a1:0e:37:f9:96:c9:
         a0:4d:ef:28:b8:c4:16:13:de:59:9a:18:55:f5:56:0e:b7:e0:
         02:2d:a7:86:ba:85:e2:e4:d9:3b:bd:87:dc:f0:5f:d0:02:7d:
         ad:b9:da:6d:26:af:00:70:4c:45:f3:83:6b:a6:c4:5a:65:f6:
         a2:94:b5:c5:34:9b:85:22:f7:ad:1b:5a:d4:cb:9b:50:5a:4f:
         03:6f:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----