Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78d746cd1ab17108db004476c73f2612541ac8d6.cer
File:                     78d746cd1ab17108db004476c73f2612541ac8d6.cer (raw, json)
Hash identifier:          vy8ROlFCAr3umr8QDvP9A0adtcZC2IA2k8res3Ol9Xk=
Subject key identifier:   DD:04:88:C0:6D:85:B7:AE:EC:0A:EF:85:B5:92:35:F7:28:2C:29:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDB693
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/26f370e7-460b-4c06-a496-97b3dbbcc3db/78d746cd1ab17108db004476c73f2612541ac8d6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/26f370e7-460b-4c06-a496-97b3dbbcc3db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 15:28:09 +0000
Certificate not after:    Sun 14 Jul 2024 15:29:29 +0000
Subordinate resources:    IP: 2801:1a:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15578771 (0xedb693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 14 15:28:09 2023 GMT
            Not After : Jul 14 15:29:29 2024 GMT
        Subject: CN=78d746cd1ab17108db004476c73f2612541ac8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:f7:24:3a:ba:75:46:84:de:3f:dc:48:0c:
                    3f:50:be:df:28:7f:49:7e:49:f1:5e:1a:e5:05:84:
                    dc:72:ae:ad:ed:3e:d6:13:eb:5e:5b:b7:cd:23:b0:
                    af:0c:35:b9:57:8d:ec:b5:c7:d6:7e:32:4d:1d:c1:
                    ac:59:82:b8:a0:ab:31:d7:e4:6a:9a:98:b3:ce:20:
                    73:ad:24:d2:6b:06:80:cf:28:91:e8:c2:ae:8f:a6:
                    ea:93:db:41:ae:cb:9b:6d:27:83:66:1e:2a:56:21:
                    8f:e6:6f:53:4a:02:80:28:f8:a0:fd:20:4f:22:3d:
                    e3:a1:75:8f:d5:c9:7a:13:af:6f:05:35:f3:1f:5a:
                    c0:dc:29:5e:e6:cf:e1:36:9b:03:81:ca:05:94:f0:
                    3f:5e:7e:26:a2:3f:29:39:f8:ee:db:96:60:d8:76:
                    67:49:1b:30:10:88:60:ea:07:a2:c1:40:d0:83:79:
                    7d:24:00:45:ad:36:69:61:9f:27:61:aa:30:0b:61:
                    56:60:eb:6b:7c:56:4d:36:f9:16:77:4e:66:d0:dd:
                    c7:0c:01:95:d8:eb:c2:96:48:06:ae:30:ed:81:66:
                    75:37:6a:8d:2b:8c:ef:a6:df:4d:0d:2e:8f:73:fe:
                    2a:de:18:ed:4f:2d:73:fa:39:c3:04:ba:e1:ca:ce:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:88:C0:6D:85:B7:AE:EC:0A:EF:85:B5:92:35:F7:28:2C:29:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/26f370e7-460b-4c06-a496-97b3dbbcc3db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/26f370e7-460b-4c06-a496-97b3dbbcc3db/78d746cd1ab17108db004476c73f2612541ac8d6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:35:af:5e:0d:dc:90:d4:45:d2:74:d8:74:aa:36:e1:77:80:
         ae:21:08:4a:bc:00:10:62:fe:89:7a:cc:a0:d3:20:f0:31:2d:
         bd:c9:6a:b4:4e:b1:d4:c8:d4:16:06:f9:5f:94:a1:e0:38:67:
         6e:c8:4a:c4:05:40:6a:4e:4e:98:0d:66:6f:a5:cd:de:6d:a7:
         14:28:13:09:57:a6:2b:c3:17:5c:68:27:48:c3:d7:2a:20:0a:
         9d:c5:55:77:3f:0e:4f:9a:58:fa:b7:9f:95:18:61:a5:80:55:
         e3:b7:bb:ab:25:2a:e4:1e:f3:97:03:22:c5:39:d4:ff:be:11:
         06:68:6a:e5:b0:cb:7e:9c:88:f0:69:84:5f:57:d9:8d:60:e3:
         17:48:45:12:cb:c0:81:6d:2b:f5:f7:f7:8a:31:60:57:42:05:
         0a:70:d3:4d:06:43:d9:b5:46:82:3f:2e:6d:66:11:35:f7:dc:
         03:fa:ad:b3:04:86:bd:fe:d5:bf:bd:c6:7a:06:56:0d:eb:a8:
         d8:38:9b:79:2c:ad:f5:95:5f:3c:97:c8:c0:bf:05:dc:d8:21:
         c1:b4:c5:df:98:f3:27:72:44:7b:39:a9:a5:58:17:80:dc:44:
         ba:e4:60:4f:8e:51:f3:73:6b:b0:e4:1e:a7:66:c3:99:d6:81:
         26:33:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----