Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6eb536d357275b2b270237b554b740d0e6be7648.cer
File:                     6eb536d357275b2b270237b554b740d0e6be7648.cer (raw, json)
Hash identifier:          1Xg++WQhgblD0785rr1lXyYhI3csAT4Tpj9D1w1uShM=
Subject key identifier:   47:D3:E9:FF:1B:9D:15:5A:DE:FC:55:D5:2D:68:20:25:E4:53:F9:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8B08C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa9154d3-6c54-4f59-a603-595da371d4f7/6eb536d357275b2b270237b554b740d0e6be7648.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa9154d3-6c54-4f59-a603-595da371d4f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 18:06:08 +0000
Certificate not after:    Thu 18 Jul 2024 17:40:11 +0000
Subordinate resources:    AS: 271984
                          IP: 2803:8110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15249548 (0xe8b08c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 18:06:08 2023 GMT
            Not After : Jul 18 17:40:11 2024 GMT
        Subject: CN=6eb536d357275b2b270237b554b740d0e6be7648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:37:df:ad:13:6b:0b:57:ce:29:22:48:7d:
                    12:ee:5e:1e:be:43:c0:0d:74:8a:fe:1b:a6:8e:af:
                    e8:c0:94:b4:50:22:fa:c5:fd:08:03:74:2f:07:ce:
                    0e:af:ab:3b:b3:7c:a8:bc:17:5e:21:4a:97:b5:ef:
                    e8:96:5a:39:87:3b:1c:be:36:ab:f9:00:a0:ff:9a:
                    0d:93:4c:8c:16:41:99:b4:73:77:32:3b:3b:e2:9f:
                    31:04:12:82:b0:98:29:ac:72:d5:31:c1:5a:49:dc:
                    6a:db:ea:69:5f:28:85:3f:bb:bd:c4:6f:6e:a4:d6:
                    f0:8a:17:c8:b4:c6:01:e5:cc:09:5c:82:33:b2:63:
                    62:ad:e5:fc:1f:87:90:3f:17:e3:ec:a6:e3:03:1a:
                    53:24:2c:b8:c0:a0:f3:d0:7c:b6:c6:6c:59:88:db:
                    47:51:68:08:ca:3e:31:fa:27:e2:b8:7e:f0:e2:44:
                    98:a9:94:59:2e:c3:43:f1:66:d6:f1:03:9f:40:48:
                    81:e2:33:dd:59:72:4f:83:37:99:e7:af:0c:a7:55:
                    e8:77:b3:f8:79:13:6b:aa:b7:8c:49:52:ff:93:9f:
                    1a:68:97:57:bb:bc:37:eb:7b:e6:cc:21:6d:07:d2:
                    b9:9f:7d:fb:05:ad:de:de:7d:22:d6:a3:b3:78:33:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:E9:FF:1B:9D:15:5A:DE:FC:55:D5:2D:68:20:25:E4:53:F9:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa9154d3-6c54-4f59-a603-595da371d4f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa9154d3-6c54-4f59-a603-595da371d4f7/6eb536d357275b2b270237b554b740d0e6be7648.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271984

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:d0:c2:3a:99:1d:fb:ed:c0:11:b5:97:35:0f:ba:a6:ae:
         22:76:cc:27:59:e3:1a:41:ee:0b:2f:99:2d:fd:78:eb:14:12:
         8b:13:51:5d:62:29:02:6b:cd:c6:33:63:25:8c:6c:50:00:87:
         41:0e:78:c4:85:95:c0:af:69:8f:8a:d8:80:ac:1a:6a:94:6b:
         e3:be:89:ea:4d:8a:76:a5:76:2e:79:09:74:d1:5a:f7:e1:9b:
         40:82:d6:51:1c:e3:29:fe:d1:5c:cf:47:7f:48:0f:fd:e7:39:
         56:50:cf:63:e4:2d:ff:cb:cb:a2:91:0d:c4:1d:6c:15:87:9d:
         d9:6e:60:ae:2f:c4:5f:73:28:08:91:b9:aa:a3:fb:7c:ed:4d:
         9d:2f:e3:04:ef:ea:de:2a:30:18:83:65:65:1c:c4:78:aa:77:
         55:8d:03:ed:54:17:66:dd:c3:43:87:50:be:f5:06:8c:bb:a9:
         b9:b7:ea:48:9e:7c:51:0e:e0:26:ce:fb:68:c7:7b:31:57:92:
         cf:2c:c0:f0:a0:c0:31:e8:8e:0f:f6:38:35:7c:76:2a:bd:1f:
         55:19:70:04:ab:ec:52:76:49:8d:cb:67:6b:25:39:bd:66:28:
         06:59:0f:a4:5d:4b:10:41:fe:05:0f:fa:1d:50:a4:55:d4:e4:
         10:55:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----