Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
File:                     15c457b9e4c4fb2caeebe5d784653caec339f556.cer (raw, json)
Hash identifier:          HLy9hqtkz5IYe00taXz9TJ31os7obNzpdnc+rj4tDXw=
Subject key identifier:   09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE1F43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Dec 2021 13:11:22 +0000
Certificate not after:    Wed 23 Oct 2024 13:36:41 +0000
Subordinate resources:    IP: 2801:1b:1800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15605571 (0xee1f43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 23 13:11:22 2021 GMT
            Not After : Oct 23 13:36:41 2024 GMT
        Subject: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:de:45:a6:e7:56:d2:e7:44:3b:fe:88:c8:
                    24:c1:3c:60:3a:7e:64:6b:17:b8:bc:d9:98:2d:67:
                    75:be:e5:6f:4b:d8:0e:c8:45:07:25:f1:55:42:92:
                    0f:d2:f6:4d:17:48:47:ba:91:c6:d8:84:9c:12:10:
                    1b:19:3f:ba:0a:b6:e0:bd:21:e7:e3:27:b4:a1:ab:
                    6c:5e:70:7a:e5:df:ba:66:f0:67:8a:49:77:4c:31:
                    ca:dc:dd:99:d6:0f:b0:67:7f:b0:90:66:ee:bc:b6:
                    20:f2:f6:c9:ac:56:47:ec:f6:9c:88:23:82:b3:a6:
                    a4:98:c5:e6:52:0c:68:c4:b8:13:f5:c8:17:1a:8a:
                    59:41:7b:b2:dd:31:da:3c:ed:e7:47:72:ea:66:6c:
                    35:3b:69:7f:1b:db:45:9e:f7:06:d0:cf:0c:9e:b2:
                    2e:6d:e7:e4:2f:0e:98:95:89:36:b6:b0:d0:f2:6b:
                    ea:95:10:67:6b:c6:86:c7:32:a3:b6:d1:ef:53:3a:
                    6c:8d:5c:fd:5e:11:26:37:c3:c5:a7:06:c2:92:a5:
                    88:b8:53:ed:e0:ed:c2:13:7a:be:3c:6c:31:c4:df:
                    44:74:0e:e3:b5:d1:74:48:35:98:4d:f6:45:b2:3e:
                    73:21:28:6b:3f:e1:a4:74:17:c8:b5:8c:fa:dd:4d:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:db:63:6c:89:42:08:1a:08:e2:00:a8:be:58:e0:ef:3b:51:
         23:a0:60:57:c5:99:7b:47:0c:c8:57:15:0e:08:00:cc:2c:ca:
         67:74:df:a9:df:f9:7f:d0:1b:a5:56:5e:42:cf:d8:15:e5:e2:
         aa:b8:4a:61:98:3e:17:d2:32:65:80:47:fa:53:96:db:73:46:
         8f:bc:4d:4f:85:a5:92:a6:64:e7:9a:cd:f2:48:2d:cc:b6:0a:
         86:b7:53:ab:85:ee:76:e0:2c:95:bc:d8:73:98:57:80:22:b8:
         94:93:92:a8:11:df:02:1e:a9:09:15:ad:eb:94:5b:5d:ca:5a:
         16:c6:b7:cc:50:a2:a0:1e:0a:fb:a1:7b:75:87:58:06:a2:65:
         ef:44:7c:1f:d2:08:25:2a:c3:3e:58:b0:24:25:5c:0e:f0:9d:
         a9:93:f1:17:be:3b:f0:55:a3:7d:53:72:fa:41:cd:20:ca:bb:
         4f:f5:90:40:6d:75:96:96:ca:2e:65:aa:99:d7:0e:6b:83:81:
         88:33:9f:e3:5a:b3:33:44:48:2d:03:a3:aa:af:a2:1d:50:e2:
         66:3b:4f:83:21:6b:02:f2:07:5e:60:bb:96:be:26:65:07:2d:
         88:c4:23:4d:5a:92:21:f9:5b:7f:35:20:45:c3:83:0e:75:12:
         a2:a5:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----