Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6c35c2b3aff6f1c39d8dfefab0cf0d35524ddc2.cer
File:                     b6c35c2b3aff6f1c39d8dfefab0cf0d35524ddc2.cer (raw, json)
Hash identifier:          jZiOCAFIPpgpRi+1doP6CICDM/jTh3TiYdHomHzC+kU=
Subject key identifier:   15:E6:7A:CC:6D:85:D0:52:99:DC:3B:65:EA:42:00:04:7B:CA:4D:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF1183
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f43f53a1-7956-4dbe-8352-e4f59d300a01/b6c35c2b3aff6f1c39d8dfefab0cf0d35524ddc2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f43f53a1-7956-4dbe-8352-e4f59d300a01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:53:50 +0000
Certificate not after:    Thu 26 Jun 2025 23:00:08 +0000
Subordinate resources:    AS: 61643
                          IP: 131.100.112.0/22
                          IP: 2804:1c5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16716163 (0xff1183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:53:50 2023 GMT
            Not After : Jun 26 23:00:08 2025 GMT
        Subject: CN=b6c35c2b3aff6f1c39d8dfefab0cf0d35524ddc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:0e:51:93:43:89:38:f6:14:7c:40:65:0c:
                    03:34:9d:4d:55:38:b5:a4:21:c2:82:98:d7:d7:3b:
                    9c:f5:fc:6a:76:46:51:64:2f:77:50:4a:de:07:f6:
                    c1:bd:ed:54:b7:c7:a6:93:db:f3:16:9c:89:af:76:
                    1d:6e:39:b1:a5:00:29:d4:03:59:c1:c7:11:47:57:
                    df:98:55:fd:3b:b2:40:de:2a:ed:f5:5a:79:1a:60:
                    8c:08:17:ca:d6:b7:40:34:f0:a7:03:b4:e7:52:6b:
                    a7:fd:7f:0a:15:f3:a0:1d:0b:0c:c0:2e:bb:4b:17:
                    99:a0:11:e2:f8:88:9a:b3:58:30:77:3f:89:d3:a9:
                    8f:bc:1f:14:6d:2a:ea:a0:f7:15:fb:fe:9d:a5:9c:
                    b9:c9:ed:46:ed:35:7d:1e:5b:79:74:5f:a2:3f:c2:
                    22:03:ac:57:aa:d4:74:ad:e0:d4:03:cd:34:7f:0e:
                    40:a3:51:5b:e0:8c:35:cb:a5:52:37:b4:cf:91:c0:
                    cc:59:60:75:6a:ee:94:e2:a0:53:0c:4e:c7:6b:e7:
                    2c:6e:b5:f2:18:e2:cf:f9:14:6b:62:6a:64:cf:0f:
                    44:6c:2c:ec:e9:65:bb:80:0a:97:5b:3b:83:4e:99:
                    66:8f:cd:17:b9:16:56:fe:5c:f2:18:10:d6:3f:4d:
                    9f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:7A:CC:6D:85:D0:52:99:DC:3B:65:EA:42:00:04:7B:CA:4D:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f43f53a1-7956-4dbe-8352-e4f59d300a01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f43f53a1-7956-4dbe-8352-e4f59d300a01/b6c35c2b3aff6f1c39d8dfefab0cf0d35524ddc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.112.0/22
                IPv6:
                  2804:1c5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61643

    Signature Algorithm: sha256WithRSAEncryption
         32:19:cd:e9:09:ed:4e:2c:39:8f:b7:b2:58:60:a3:da:fb:8b:
         31:8b:61:47:26:a2:8b:39:44:d9:64:1e:5e:f2:87:3e:a4:6b:
         43:47:42:22:91:e5:2c:7d:0b:f2:80:60:8b:73:05:bc:2e:77:
         cb:77:39:9f:1d:69:8b:9a:32:c7:61:f1:25:99:fe:5e:7c:69:
         19:48:14:d8:85:09:ca:8f:7d:cd:a6:fa:ed:a2:ab:d4:cb:fa:
         c7:03:f9:0f:e9:4f:c2:e4:b6:62:4a:4b:ad:86:f3:c2:6c:61:
         ca:85:77:67:d3:da:eb:7e:0b:be:7d:91:35:8c:1c:83:d3:a8:
         ba:9d:2b:9c:81:75:5b:fa:17:3e:68:73:6c:65:ff:ba:8b:8c:
         77:e3:bc:66:08:34:27:09:80:12:30:d2:88:61:31:11:50:4a:
         40:07:be:eb:38:1c:b1:32:8b:ca:9a:b7:60:c7:c5:63:45:7b:
         8c:6f:c0:3d:3f:78:ae:10:93:10:58:59:9f:f9:86:3d:44:ab:
         30:63:29:7c:31:0a:a1:bf:a0:35:c4:28:4e:e2:51:c0:ab:ce:
         39:47:9b:a0:54:31:bb:d3:44:ae:3e:08:91:b8:b2:04:6f:3a:
         7e:bb:0b:73:95:5f:72:3a:01:7c:30:64:ee:cd:82:ac:48:bb:
         fb:07:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----