Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ca141578b36e92a727858f4d62234e0409392cc.cer
File:                     0ca141578b36e92a727858f4d62234e0409392cc.cer (raw, json)
Hash identifier:          7S8C608PHmXoHVEWTJcKYYczUPrNdJlBjBCHBUuE8CY=
Subject key identifier:   D3:90:A8:E6:AB:52:B2:6B:E4:9E:05:B8:E0:74:1A:C2:6C:21:C0:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4C6CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/0ca141578b36e92a727858f4d62234e0409392cc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Dec 2020 14:54:08 +0000
Certificate not after:    Wed 11 Sep 2024 15:31:00 +0000
Subordinate resources:    IP: 177.53.212.0/22
                          IP: 2803:2810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16041678 (0xf4c6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  2 14:54:08 2020 GMT
            Not After : Sep 11 15:31:00 2024 GMT
        Subject: CN=0ca141578b36e92a727858f4d62234e0409392cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:97:b4:ab:e1:a1:1f:15:fe:68:7b:b8:7e:
                    97:cc:97:04:7d:c6:bd:cc:0b:51:fe:a3:05:55:2b:
                    47:45:4a:69:31:31:8a:ea:33:02:c1:59:aa:e3:d4:
                    ef:a7:ce:af:ff:1c:c6:c8:8d:05:31:c6:eb:c6:e4:
                    48:bd:d0:fb:da:03:bd:a9:d8:50:ca:6f:8b:ff:e7:
                    23:d5:25:3c:2b:af:1b:9d:c0:cd:ef:cf:53:0e:e4:
                    2e:dc:2b:8c:1f:88:4c:e3:74:56:b7:57:ba:e3:d7:
                    94:2b:6a:31:75:9e:da:eb:a5:c6:dc:15:50:f9:d3:
                    86:93:11:a6:46:c4:59:96:b6:7e:1e:51:1a:9b:df:
                    19:68:db:20:3f:36:7d:ed:85:45:5b:da:89:4e:fe:
                    94:43:05:7a:e6:6b:55:de:0d:2f:2c:8a:d5:e0:ec:
                    ba:98:7a:ba:67:4a:7f:f1:49:91:b7:a1:b2:52:fc:
                    89:db:fc:b5:6a:53:38:fc:33:7b:a0:a8:e3:86:9c:
                    76:d8:a1:06:d3:66:cb:e7:4f:53:17:90:e2:64:7f:
                    a6:5f:79:14:32:a7:64:12:91:25:f2:38:26:08:e7:
                    23:ac:78:0d:24:e0:7a:ca:db:1b:9e:d2:12:93:94:
                    d5:96:12:d1:b8:37:9e:db:cd:cb:af:45:f1:da:60:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:90:A8:E6:AB:52:B2:6B:E4:9E:05:B8:E0:74:1A:C2:6C:21:C0:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/0ca141578b36e92a727858f4d62234e0409392cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.212.0/22
                IPv6:
                  2803:2810::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:35:d1:d8:b6:90:dc:c2:00:15:6d:3d:90:a8:a2:d7:42:
         d2:61:5f:d7:06:5d:7a:de:ee:f5:bb:22:61:a0:af:86:dd:6f:
         16:2a:21:0c:68:32:70:84:98:66:8d:8f:37:4d:a1:d4:78:93:
         ee:74:29:65:b0:f2:f6:6a:20:47:14:7f:74:64:33:c8:69:10:
         8f:7c:44:6b:08:0a:4b:8d:b3:ea:0d:0c:02:9e:bb:c2:58:e3:
         4c:2d:dc:7f:b9:43:f4:99:94:3d:bd:42:7e:92:28:b6:ad:9d:
         c6:85:b9:e0:0f:7e:74:bf:29:c5:f6:3e:3c:e9:9c:5f:4e:04:
         62:6b:4e:ae:5f:be:c0:97:77:3e:b9:9d:95:9f:60:05:5d:21:
         bb:31:71:6f:f5:40:6a:82:bb:ef:31:25:07:c5:84:ae:b2:5d:
         4d:2a:bb:91:86:fa:0b:cc:47:a7:88:1e:44:9e:ab:4c:19:e4:
         1c:12:b3:91:95:94:c4:05:a9:93:16:c9:9c:14:24:48:de:d3:
         b8:45:fd:5f:83:80:fe:c3:6c:fe:6f:95:9b:c3:3c:05:61:f3:
         9d:ed:ff:ec:34:2b:bd:03:bb:c8:67:36:4e:f9:57:55:dd:7c:
         63:a7:bd:d3:8b:3c:d9:00:a5:43:f3:eb:43:ea:a5:19:55:b6:
         ba:dc:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----