Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa6e6cfc843d700eab82ce6395c618e256636ffa.cer
File:                     aa6e6cfc843d700eab82ce6395c618e256636ffa.cer (raw, json)
Hash identifier:          O10jcoDVGtsE6OdaM4xKgr/FNxtoDd/RBsj8pi7wQAM=
Subject key identifier:   93:1C:44:A0:8F:B8:08:5F:70:F0:F0:B4:0A:A6:B7:6E:A3:3D:46:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF1DD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ea73d767-bb5e-4ca5-9ae9-c26edb3127a2/aa6e6cfc843d700eab82ce6395c618e256636ffa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ea73d767-bb5e-4ca5-9ae9-c26edb3127a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:25:23 +0000
Certificate not after:    Tue 11 Feb 2025 15:36:40 +0000
Subordinate resources:    AS: 266156
                          IP: 192.144.68.0/22
                          IP: 2804:3b8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16719317 (0xff1dd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 21:25:23 2023 GMT
            Not After : Feb 11 15:36:40 2025 GMT
        Subject: CN=aa6e6cfc843d700eab82ce6395c618e256636ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:f4:08:30:3d:36:80:3f:2a:0b:71:2e:22:
                    60:53:98:c6:1a:a9:ec:ec:ef:04:f9:f1:e3:e1:67:
                    9a:6f:84:1c:cd:3d:40:52:65:f5:ec:86:3a:3d:85:
                    cf:84:b6:8f:96:65:ce:ef:18:98:ca:3d:2f:1b:58:
                    9a:ec:d8:67:bb:25:1c:06:b3:18:77:31:00:f6:5e:
                    7a:ab:eb:6c:1b:70:c7:c6:dc:af:66:a3:21:5c:61:
                    8f:bb:29:8d:da:9e:87:c4:8e:73:f7:07:88:a3:5c:
                    6e:20:72:b0:29:89:c9:21:d8:eb:3a:5b:a6:09:55:
                    c0:f7:8b:4a:d5:0c:d2:ce:27:d2:29:16:61:5f:e6:
                    34:f9:c1:05:3f:c5:f3:cb:c4:23:33:e4:68:77:da:
                    8e:51:b8:44:2c:5d:59:d6:2b:96:d7:cb:b2:ab:f7:
                    eb:6e:da:ac:e0:91:ae:23:2e:55:ec:e8:f7:50:df:
                    c5:58:06:71:a5:df:ca:20:b3:47:0e:e6:a9:4a:84:
                    eb:dc:8c:66:a3:1c:3b:cc:89:c9:85:83:5e:56:d3:
                    ee:d9:96:4b:b9:64:0e:6f:aa:cc:09:a7:80:4d:4a:
                    40:0d:c1:c7:ca:00:6f:20:d8:b4:a1:a7:33:73:cf:
                    79:27:8f:3b:64:e3:b4:ec:5d:12:0d:d2:ce:95:1d:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:44:A0:8F:B8:08:5F:70:F0:F0:B4:0A:A6:B7:6E:A3:3D:46:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ea73d767-bb5e-4ca5-9ae9-c26edb3127a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ea73d767-bb5e-4ca5-9ae9-c26edb3127a2/aa6e6cfc843d700eab82ce6395c618e256636ffa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22
                IPv6:
                  2804:3b8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266156

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:35:07:b5:e3:b9:c8:4b:76:96:08:e6:6d:fd:c9:bb:8d:
         e7:3c:b0:07:64:d3:d1:20:7b:65:8d:e4:89:77:13:b2:09:3a:
         46:f5:3a:c0:17:55:4e:d0:c6:fe:90:02:11:d3:ed:2c:70:89:
         11:11:31:81:8f:1d:af:57:07:35:c3:e2:25:89:cf:f4:d8:f6:
         d3:13:7f:ef:9f:03:37:38:b0:41:50:04:c2:e0:26:4d:af:2f:
         45:8b:00:8d:c4:24:b4:6b:3f:46:47:ac:7f:f2:cb:9f:60:22:
         ea:62:c2:98:96:bc:5d:1d:fb:58:45:e1:94:08:ad:47:41:12:
         0a:e2:18:67:88:9a:d1:40:ba:c4:7f:98:d5:85:5a:e5:54:2a:
         c9:31:7a:e2:39:e9:6f:40:2d:35:9a:b7:36:01:a5:52:91:87:
         de:b9:20:d4:db:52:b5:81:0c:22:c5:68:57:6b:0d:9e:93:ec:
         6e:38:be:ac:72:cf:e5:cd:b0:44:25:ac:d1:8d:0f:f3:e2:32:
         33:ea:26:5c:d9:c1:d9:3a:0a:90:a1:64:a0:f0:39:5f:ec:6b:
         15:ed:82:17:dc:e6:86:43:11:51:6d:46:f8:fa:90:1b:14:00:
         2e:3f:f4:43:0f:d1:94:9f:f8:14:c8:12:b5:81:79:50:54:8d:
         58:74:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----