Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e168e617fc03e7fc9283be969aea24843381c3d.cer
File:                     6e168e617fc03e7fc9283be969aea24843381c3d.cer (raw, json)
Hash identifier:          5v49AdO8C1SjlRiTa+7PnbeWDuf4SQJHH1Ri4j2HNQ0=
Subject key identifier:   7D:56:BD:1A:43:FF:15:0F:55:09:56:37:F9:D9:5D:5A:83:99:17:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF79DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/297f8bf0-d4a0-4e81-be84-6a7f7c319af7/6e168e617fc03e7fc9283be969aea24843381c3d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/297f8bf0-d4a0-4e81-be84-6a7f7c319af7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:22:56 +0000
Certificate not after:    Sun 24 Aug 2025 12:59:08 +0000
Subordinate resources:    AS: 266314
                          IP: 170.238.52.0/22
                          IP: 2804:35e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16742876 (0xff79dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:22:56 2023 GMT
            Not After : Aug 24 12:59:08 2025 GMT
        Subject: CN=6e168e617fc03e7fc9283be969aea24843381c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:5a:97:bd:05:61:22:4d:41:39:ae:72:7a:
                    f2:56:11:7f:11:d6:69:a1:c3:89:d1:89:6c:50:41:
                    34:a7:6a:7e:b1:f9:db:cb:43:58:da:38:ec:0b:cf:
                    28:2f:3e:7b:c8:b5:88:7f:2a:d1:f4:67:15:6c:b7:
                    e4:d7:35:15:f9:92:ca:45:a7:b6:75:be:85:35:6a:
                    d7:f0:29:67:e5:26:a0:aa:da:ff:45:95:b9:23:47:
                    d7:a7:af:21:55:cf:c8:b8:6a:0b:b2:80:0b:94:c3:
                    92:28:4f:e0:93:b6:12:99:35:70:d7:ef:76:06:26:
                    05:81:ca:8f:8d:c8:50:3a:4e:8a:44:d6:ae:10:76:
                    79:eb:24:f8:f3:fd:4d:34:71:f1:93:83:ca:8e:58:
                    17:a1:a1:b2:9e:3b:ba:cf:bd:55:58:7e:c1:67:ab:
                    cd:ab:20:5d:70:af:4a:ae:df:e6:c9:97:0e:98:dc:
                    1a:74:62:4a:69:b9:d8:20:df:f2:a9:70:2c:58:bd:
                    a3:79:97:57:1e:9f:e0:28:77:1d:15:38:9a:ce:6a:
                    58:c3:11:8d:43:8a:84:92:bf:b8:7b:46:19:67:f0:
                    db:9f:a6:46:27:10:9d:3a:f4:72:89:a0:54:d1:b4:
                    56:a8:4b:fd:c8:e6:a0:6a:d5:5c:d5:ec:a1:75:eb:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:BD:1A:43:FF:15:0F:55:09:56:37:F9:D9:5D:5A:83:99:17:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/297f8bf0-d4a0-4e81-be84-6a7f7c319af7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/297f8bf0-d4a0-4e81-be84-6a7f7c319af7/6e168e617fc03e7fc9283be969aea24843381c3d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22
                IPv6:
                  2804:35e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266314

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:1e:ab:84:b0:da:d6:24:30:22:ba:2e:72:dd:ba:33:ae:
         d4:0d:1f:fc:a8:52:fa:08:2b:22:9d:c8:37:da:6a:93:a1:ef:
         06:9a:5e:f7:30:0f:a2:07:d5:23:52:36:eb:41:c9:c1:e3:df:
         ca:5d:fe:c2:8e:23:98:d8:a1:07:e5:06:9c:f8:3b:bd:5e:32:
         c5:f2:0b:ed:17:8a:d0:c3:14:59:9c:67:4d:1d:a7:81:6a:3a:
         d1:69:79:13:7a:27:78:31:1d:1a:40:98:7a:d1:8f:af:75:ca:
         af:10:8a:29:04:a0:a6:84:57:17:74:be:5e:d5:39:3d:1b:cb:
         3a:2e:54:dc:f8:9d:79:f7:72:23:89:34:a1:b0:ae:e8:08:a0:
         c9:94:79:93:86:cd:73:1e:88:d6:77:db:5e:a7:7c:14:df:14:
         fc:43:45:77:4a:a5:e4:a6:75:d0:4b:cd:00:26:b9:6b:81:35:
         ca:13:a5:ea:0f:a5:6e:f5:a0:50:97:18:49:6c:1e:50:4f:e2:
         ef:cc:b2:0a:c2:9a:42:2b:5b:1d:41:9b:4d:df:18:9f:d3:ce:
         fa:8f:a1:03:9b:56:69:6e:20:a6:6d:a6:61:36:26:e6:63:4f:
         28:03:43:2e:fe:f7:e3:7f:c4:b9:64:44:35:44:8e:b8:ba:48:
         28:ba:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----