Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78b6e1e732ea99cd68cafc792dc28b9b936f4f99.cer
File:                     78b6e1e732ea99cd68cafc792dc28b9b936f4f99.cer (raw, json)
Hash identifier:          LhoVRXZeO5RwDMZLzDgTSw/Rwf3EhDfk0S95XOSWXFE=
Subject key identifier:   D6:EB:1B:61:3E:29:37:11:3F:5C:70:29:34:85:39:E8:52:E5:1D:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CD6A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3289bfce-2545-444f-a7bf-f116dfe908d1/78b6e1e732ea99cd68cafc792dc28b9b936f4f99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3289bfce-2545-444f-a7bf-f116dfe908d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 16:31:17 +0000
Certificate not after:    Mon 20 Jan 2025 05:00:00 +0000
Subordinate resources:    IP: 160.20.218.0/23
                          IP: 2803:2720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17618601 (0x10cd6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  5 16:31:17 2024 GMT
            Not After : Jan 20 05:00:00 2025 GMT
        Subject: CN=78b6e1e732ea99cd68cafc792dc28b9b936f4f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:1e:4b:e4:33:2b:cd:58:c5:45:93:c0:eb:
                    d5:c2:af:2a:9c:d0:d8:26:67:90:e0:9a:4b:fb:4e:
                    0d:3d:7d:39:8b:31:bc:b0:58:5b:26:81:75:18:2b:
                    4e:b1:e6:e5:d1:b5:59:98:99:10:2e:74:70:c8:ed:
                    a5:f7:64:09:ab:ef:c6:d9:43:65:8f:8e:e1:7c:9d:
                    a7:6c:3e:56:94:c9:cb:a2:86:41:5e:7c:ed:f3:f1:
                    9f:38:47:6c:d0:46:d9:55:9d:4d:e0:36:81:e8:aa:
                    37:1a:01:ae:39:00:9f:7b:4b:d8:3f:0f:a8:22:99:
                    3a:3f:64:b8:2d:b0:be:3d:d5:6b:a2:b9:16:ba:aa:
                    25:e1:7a:03:32:34:95:37:02:5b:83:14:e0:e2:8f:
                    da:05:8c:e3:1e:c0:94:df:c1:7d:ba:03:0d:c6:41:
                    b0:34:c0:93:08:e9:bf:e8:77:d2:43:8c:35:14:be:
                    26:3e:9e:40:3c:07:71:d0:27:8c:8f:a5:86:04:20:
                    f4:74:04:b8:2e:e7:eb:bc:09:8e:16:ae:50:ea:bb:
                    7c:ff:6d:27:bb:5a:1f:42:a1:7e:ec:46:05:f4:22:
                    ca:7a:66:c9:df:43:62:a8:84:6b:f4:b0:1f:85:11:
                    9e:92:cb:28:fb:f0:38:af:33:2e:0c:95:42:52:9e:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:1B:61:3E:29:37:11:3F:5C:70:29:34:85:39:E8:52:E5:1D:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3289bfce-2545-444f-a7bf-f116dfe908d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3289bfce-2545-444f-a7bf-f116dfe908d1/78b6e1e732ea99cd68cafc792dc28b9b936f4f99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.218.0/23
                IPv6:
                  2803:2720::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:49:f9:1e:f2:70:42:6b:67:b8:39:27:2c:75:9f:27:4c:65:
         e3:df:f9:9c:34:03:52:19:e1:4b:4c:b4:65:71:9b:91:90:74:
         c0:12:a8:6e:be:d6:e5:94:b3:ba:69:2d:6f:48:2b:f1:ab:91:
         49:96:bf:15:f4:7b:37:1b:5b:94:e3:51:72:74:9f:9e:d3:e5:
         24:74:dc:c7:eb:f8:be:34:7c:97:94:da:f6:91:78:b8:73:5f:
         55:f9:f5:d9:19:ca:2c:07:3d:0a:fa:d4:b2:3d:c5:80:a3:d4:
         a4:98:9b:32:5d:9b:6a:6e:64:f4:f9:53:1e:81:06:31:44:1d:
         49:91:e1:07:a8:2a:ee:40:23:ae:9f:1e:83:c0:aa:9e:03:8d:
         41:93:54:1a:dd:d7:53:c0:c6:6e:db:3b:15:bd:b3:07:33:fe:
         ba:b5:9d:f6:11:27:37:99:89:27:27:2e:18:14:7c:eb:30:f6:
         ba:48:81:cb:aa:27:cf:f1:a2:6f:05:a7:4e:6b:bc:c2:d4:53:
         0c:ef:5c:6b:68:64:c5:e9:b4:7f:91:e8:2c:31:bf:01:68:26:
         3b:9c:36:8b:0c:f0:da:06:21:61:52:9e:8e:d9:97:80:6f:6d:
         1c:99:0a:d8:a5:18:f6:3e:18:ba:7a:94:10:fe:14:ab:86:79:
         cf:cf:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----