Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10414523dc5e73739c593d7cdb4e9a5952afc416.cer
File:                     10414523dc5e73739c593d7cdb4e9a5952afc416.cer (raw, json)
Hash identifier:          03aztnvqOKtIg7pXuaT5HYHuycjowIwAOcwRWBGOJTM=
Subject key identifier:   F3:1D:ED:E1:71:40:E5:7A:E1:73:56:DF:BF:97:BD:23:74:36:A0:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9C3BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/10414523dc5e73739c593d7cdb4e9a5952afc416.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Apr 2021 13:13:06 +0000
Certificate not after:    Fri 14 Jun 2024 15:38:53 +0000
Subordinate resources:    AS: 269757
                          IP: 45.182.143.0/24
                          IP: 45.182.186.0/23
                          IP: 2803:4560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15319998 (0xe9c3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 22 13:13:06 2021 GMT
            Not After : Jun 14 15:38:53 2024 GMT
        Subject: CN=10414523dc5e73739c593d7cdb4e9a5952afc416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:e7:4a:09:49:a0:bc:cc:15:0d:01:22:31:
                    b5:cd:4a:97:ad:5e:c9:5d:5e:58:bb:fc:3c:d4:11:
                    e1:1b:30:a2:24:e8:70:75:34:c6:48:34:f3:0a:ab:
                    9f:71:2d:53:1b:4e:dc:40:31:f3:20:09:7e:42:76:
                    bc:ef:8e:4b:55:59:6e:a5:9c:b9:c8:01:d1:5b:b3:
                    c7:7c:be:ad:1f:a3:8d:26:71:22:88:47:fe:9c:62:
                    f1:b0:ca:a9:ce:a0:27:2a:50:09:61:98:58:4d:f2:
                    f8:54:fd:61:43:56:0b:0b:87:49:3b:10:4e:15:00:
                    a1:12:7f:40:81:b5:f5:2c:29:00:69:7e:90:c6:8a:
                    77:4b:b1:bb:ef:bb:ea:04:ce:11:34:05:00:55:a6:
                    f1:b9:fd:30:48:1f:b4:d1:16:47:e9:0a:fb:6c:df:
                    1b:82:af:77:10:ad:98:68:e4:78:34:6b:33:b7:11:
                    56:e0:b8:6a:4c:b4:1d:47:19:54:4b:4e:5c:d3:8c:
                    d3:5e:56:48:ab:89:a0:b6:1f:75:c2:d0:c5:f8:76:
                    ba:9c:e8:58:18:e4:d8:93:e7:94:78:f9:63:cf:47:
                    36:78:c1:1c:40:4a:30:e6:70:79:f0:0c:76:2e:89:
                    cb:85:38:2e:72:b6:d6:e0:fa:a8:14:31:69:b8:0f:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:ED:E1:71:40:E5:7A:E1:73:56:DF:BF:97:BD:23:74:36:A0:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/10414523dc5e73739c593d7cdb4e9a5952afc416.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.143.0/24
                  45.182.186.0/23
                IPv6:
                  2803:4560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269757

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:16:43:c2:96:76:9b:42:60:6e:69:83:be:2f:21:ca:03:
         0e:17:e8:79:35:6f:4f:1f:87:7e:f2:59:6f:2e:bc:ed:34:a3:
         17:51:c4:2c:d8:30:b1:d2:29:7b:21:52:80:e5:92:48:6b:f8:
         65:b4:8c:59:b9:5e:ce:f3:8d:4a:21:5a:9e:c8:31:48:11:2b:
         53:fd:81:f8:f7:bb:02:bb:cf:93:ae:81:fe:53:a6:b2:75:05:
         1a:69:9f:13:7f:50:69:2f:1d:83:6e:0d:fe:da:17:6f:65:ad:
         1d:82:b8:a1:95:32:d7:d8:17:d3:f5:a2:42:a2:6c:99:5b:9c:
         49:58:0d:de:d6:3c:2b:58:5a:53:eb:b0:71:ff:7d:46:02:5f:
         28:a2:8e:fd:8c:cd:e2:44:8d:b5:df:fd:5a:22:52:b6:88:93:
         e1:9b:3a:f3:2e:50:4a:f2:41:11:9a:54:07:21:a0:f8:d8:d3:
         3d:82:fc:84:2b:a3:02:9e:e4:e0:83:ee:e9:24:39:81:ed:17:
         d8:bb:98:7f:10:53:b3:ab:39:0d:d6:9b:ff:6b:8b:f9:67:f2:
         f5:cc:43:f0:b1:e5:c5:55:93:be:6a:92:08:54:da:74:13:9f:
         8e:1d:d6:d1:00:93:da:18:f0:38:90:7f:4e:13:6b:cd:8f:50:
         49:a5:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----