Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/151939fc96650e9ed90e8be5070013a08273ea09.cer
File:                     151939fc96650e9ed90e8be5070013a08273ea09.cer (raw, json)
Hash identifier:          Zul5i4sxEKtDv0199ufPxjf4lp2hpF2q8MKoGky+Xbk=
Subject key identifier:   F0:6A:90:B8:97:2B:5C:D8:DF:FE:38:96:C6:00:E1:3A:89:C6:D5:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F409BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Jun 2022 21:42:27 +0000
Certificate not after:    Thu 05 Sep 2024 15:00:00 +0000
Subordinate resources:    IP: 200.90.144.0/21
                          IP: 200.110.48.0/20
                          IP: 2803:5c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15993274 (0xf409ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  7 21:42:27 2022 GMT
            Not After : Sep  5 15:00:00 2024 GMT
        Subject: CN=151939fc96650e9ed90e8be5070013a08273ea09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:1f:a9:5d:1e:e6:4c:60:21:3d:dc:de:3c:
                    74:8b:25:c1:a8:55:88:aa:14:33:ab:b6:90:b3:19:
                    d7:04:5d:8b:d8:55:54:9c:de:f8:06:70:b0:88:94:
                    1d:69:98:1c:13:29:1d:f1:13:2d:e3:53:6e:59:11:
                    09:73:05:58:3f:bf:2c:f9:82:69:f0:87:93:9b:b4:
                    63:59:7c:81:37:24:36:5c:59:a3:53:55:84:dd:f5:
                    6b:79:99:2c:1b:3c:8d:3f:0b:12:ac:42:fd:06:d2:
                    ca:9e:fa:e9:98:e6:aa:fc:af:f3:79:81:fd:58:54:
                    e7:02:77:cd:34:e6:d9:3f:7b:3d:12:2b:78:92:e1:
                    40:04:36:1e:57:a2:ca:f7:9f:07:18:c3:75:18:29:
                    83:91:98:a2:79:a3:75:58:90:b5:19:4e:9c:84:7b:
                    0d:62:68:1a:e5:e9:c9:ed:3a:c3:6e:88:b8:bd:62:
                    b1:d7:57:93:01:eb:fe:47:91:9f:73:24:bc:8b:b5:
                    35:7d:6e:bf:8d:64:9b:67:aa:39:a5:f4:e1:b5:f0:
                    04:68:dc:9e:5f:77:97:67:9f:b0:06:14:94:18:39:
                    e3:76:8a:91:d5:3b:3b:f8:bf:09:c9:e8:ec:82:a9:
                    4b:1d:9c:88:d4:72:00:bb:5b:98:f0:da:60:5e:ad:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:90:B8:97:2B:5C:D8:DF:FE:38:96:C6:00:E1:3A:89:C6:D5:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.144.0/21
                  200.110.48.0/20
                IPv6:
                  2803:5c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:fb:e3:b7:87:be:63:ab:0e:3b:50:a5:ad:28:4f:46:b0:df:
         03:e0:a1:85:93:57:c4:31:de:8f:48:98:98:3b:1f:ad:0b:b9:
         dd:88:29:74:5d:89:22:97:de:a8:4f:a4:80:ce:3f:da:15:64:
         ee:2c:52:cb:3d:70:e2:1f:b2:06:61:a6:17:59:09:c1:87:85:
         c0:e4:a2:36:a7:c7:0d:b8:5f:ca:c5:c4:7e:b5:b2:f2:e8:59:
         0a:93:dc:f8:de:6a:f5:b9:21:74:95:0f:6b:89:3b:71:74:bf:
         dd:d6:4c:ea:76:8f:a6:ae:c0:53:94:68:95:1b:21:23:59:ac:
         80:4c:9c:eb:52:c2:64:11:81:63:47:19:ff:cc:fa:39:2c:3e:
         34:b2:78:ff:50:14:bd:f0:3f:c9:32:39:00:f4:71:42:1d:29:
         19:47:57:06:11:56:4c:3c:6b:71:9e:4a:fc:77:f0:a0:96:0b:
         dd:90:17:77:6c:fe:49:3e:b0:b1:99:c5:6f:e6:b9:d4:b2:9c:
         5b:9d:fd:1e:87:d9:c2:ac:ff:25:fd:96:14:ee:b5:ed:28:21:
         0b:9d:73:4b:25:a8:44:e4:8f:a1:17:86:01:4c:3d:24:29:a8:
         9d:33:fe:3c:21:a1:ff:c3:cc:dd:48:a7:a5:0b:ad:61:6c:a6:
         d8:3d:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----