Certificate

$ rpki-client -vvf r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-3/1/B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.cer
File:                     B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.cer (raw, json)
Hash identifier:          PjNUR4agXQgfvJy1nN2LjXdd9XXKj7TU0T8J/f2FTq0=
Subject key identifier:   B9:1C:84:3B:4D:06:A8:ED:D1:FF:2F:AF:AE:90:70:57:AE:22:A5:36
Authority key identifier: 55:97:77:55:2E:70:D2:FE:B4:34:26:4E:78:43:F6:EA:10:F0:61:22
Certificate issuer:       /CN=559777552E70D2FEB434264E7843F6EA10F06122
Certificate serial:       07CFCE2D70A7809AF0D7940CB18FCABE0D11A2D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1a85654bff94a8b91890c64477b9ccf5801b875.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0/B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Mon 08 Nov 2021 14:53:52 +0000
Certificate not after:    Mon 07 Nov 2022 14:58:52 +0000
Subordinate resources:    IP: 45.231.206.0/23
                          IP: 2803:7f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cf:ce:2d:70:a7:80:9a:f0:d7:94:0c:b1:8f:ca:be:0d:11:a2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559777552E70D2FEB434264E7843F6EA10F06122
        Validity
            Not Before: Nov  8 14:53:52 2021 GMT
            Not After : Nov  7 14:58:52 2022 GMT
        Subject: CN=B91C843B4D06A8EDD1FF2FAFAE907057AE22A536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:64:7e:44:3d:63:cd:57:f3:b5:ac:74:02:
                    5b:d4:ad:d0:de:56:2a:b9:a9:f9:07:b4:94:84:3b:
                    d5:a5:b2:3d:11:59:77:56:2a:e7:29:60:23:73:c0:
                    b4:3c:ab:ea:5e:99:fa:00:f7:79:f2:13:a6:95:01:
                    44:92:2d:c6:0d:c4:f0:9e:f8:8a:fd:78:c6:24:76:
                    42:9c:37:e0:c2:12:1a:2b:b3:3c:02:c3:ef:01:2f:
                    c8:1d:47:c8:39:e1:16:ff:c2:0d:98:91:e9:bd:b3:
                    54:bc:3a:4a:cd:9d:e1:16:b7:87:f8:62:0d:88:2f:
                    50:b8:3a:7f:db:57:c6:39:ec:a6:79:fc:4b:43:11:
                    7d:2e:49:92:b3:62:c3:dd:d6:c1:3b:be:8c:75:40:
                    27:3e:37:9b:88:f2:ce:d2:2b:44:73:98:2b:bd:19:
                    a5:a6:fb:e7:7a:56:de:0d:7e:97:2d:84:ba:59:16:
                    18:92:a1:01:e0:8f:58:29:a5:32:b6:27:13:5d:d6:
                    33:72:13:a6:3e:e8:fb:2d:ce:6b:56:e2:77:a8:77:
                    1f:2b:ad:1e:1a:44:1c:9d:75:bd:0d:15:40:43:7e:
                    cc:4d:56:4b:ae:76:44:f7:35:cf:0a:88:c1:83:38:
                    b4:02:02:7d:7a:1e:37:62:8e:72:4e:8f:42:60:6d:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:1C:84:3B:4D:06:A8:ED:D1:FF:2F:AF:AE:90:70:57:AE:22:A5:36
            X509v3 Authority Key Identifier:
                keyid:55:97:77:55:2E:70:D2:FE:B4:34:26:4E:78:43:F6:EA:10:F0:61:22

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-3/1/559777552E70D2FEB434264E7843F6EA10F06122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1a85654bff94a8b91890c64477b9ccf5801b875.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0/B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.206.0/23
                IPv6:
                  2803:7f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:03:c4:5a:16:9f:9d:97:bc:87:03:65:bd:8a:86:c4:4a:
         4a:9b:7f:b1:a9:08:51:c3:5c:4c:6e:53:73:50:3b:b6:ba:69:
         bd:ef:0c:3b:5a:72:2d:b4:80:34:d3:77:97:e5:81:4c:a5:f5:
         40:4c:61:19:9a:39:8f:11:0c:fe:45:ce:eb:87:9d:92:3e:5c:
         f5:b4:0c:bc:c7:01:a6:2f:f4:f6:a1:5a:51:f8:f1:5b:1f:25:
         ad:19:c5:4e:9e:a3:86:c7:c7:eb:b2:71:ba:54:84:a4:f9:c8:
         67:e3:e4:bc:fb:12:57:15:6f:a2:7b:a2:cb:25:a1:99:4c:b7:
         ce:cf:de:33:90:77:e9:a1:3e:ec:f2:cf:7b:c5:64:f0:60:2e:
         c9:61:7a:9e:1c:ac:be:bd:c1:6e:48:8f:b6:6d:5f:23:fa:4d:
         3c:4b:58:18:23:40:5a:5e:8d:40:e4:ed:01:54:d3:41:c4:67:
         32:f5:06:dc:a5:4c:f3:d6:f8:c3:b4:17:12:79:c9:98:b8:7b:
         0e:76:71:12:49:a4:f5:b1:ba:d4:5e:6a:0f:64:eb:ac:6f:21:
         a1:84:96:ed:ec:cf:1b:34:a8:a4:ad:75:1f:62:ba:99:15:52:
         bd:1f:ac:8e:7f:5f:a2:05:f4:00:d0:0d:fd:1a:9d:7f:6a:32:
         0b:d9:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----