Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19d34285ba628172d8175ee1905c3b599e21efd6.cer
File:                     19d34285ba628172d8175ee1905c3b599e21efd6.cer (raw, json)
Hash identifier:          6ELlZ3SEFXpbE4G4QFDqk86RtelcZ8TdLjEHqEQNfb4=
Subject key identifier:   E0:3B:40:48:08:BC:04:2F:ED:50:56:A9:62:2F:E4:75:3E:28:8F:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA7CFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/19d34285ba628172d8175ee1905c3b599e21efd6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Apr 2022 18:18:35 +0000
Certificate not after:    Wed 23 Oct 2024 04:00:00 +0000
Subordinate resources:    IP: 138.0.12.0/22
                          IP: 2801:1b:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16415997 (0xfa7cfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 18:18:35 2022 GMT
            Not After : Oct 23 04:00:00 2024 GMT
        Subject: CN=19d34285ba628172d8175ee1905c3b599e21efd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:f0:5f:85:49:41:b5:d9:c4:5e:bc:28:31:
                    e7:76:5a:72:b8:e3:3e:10:2e:cd:64:fc:0b:ee:87:
                    40:e3:b4:3b:c6:30:ed:f1:bd:aa:bb:41:d2:af:eb:
                    60:f7:e3:a1:e4:8a:0c:1f:8c:75:5b:8a:9d:bb:75:
                    06:b2:eb:c7:fb:9d:16:ca:51:6d:38:ee:b3:5c:a8:
                    53:ad:a7:6e:40:82:46:e2:3a:dc:57:b9:20:98:b7:
                    8b:ec:c8:37:74:05:9f:8e:b9:af:b7:b6:56:6d:06:
                    1b:0b:01:ac:d7:58:e1:86:66:4a:97:24:ee:97:0f:
                    76:11:b3:aa:f1:75:92:44:c2:c0:30:7f:9c:cd:9e:
                    12:86:df:18:d0:49:5a:79:15:5e:8c:f2:9a:79:fd:
                    3b:7d:b3:ec:e6:5c:8e:5d:13:ec:a3:c1:eb:ab:d4:
                    5d:68:bf:0a:48:80:19:28:5f:1b:5b:b5:7d:4c:83:
                    b9:4c:c1:4e:69:92:f0:ae:ae:f9:9c:04:84:75:98:
                    a3:9f:3f:7f:b0:f1:78:9c:57:67:57:d6:8c:68:e0:
                    83:25:3f:5b:00:e2:e2:bf:71:3a:99:7d:4a:25:d8:
                    93:da:19:d4:1c:16:fb:b2:57:1d:3c:21:9c:f2:5e:
                    e1:29:30:75:b7:69:c3:bd:f4:f1:03:9e:58:c4:da:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3B:40:48:08:BC:04:2F:ED:50:56:A9:62:2F:E4:75:3E:28:8F:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/19d34285ba628172d8175ee1905c3b599e21efd6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.12.0/22
                IPv6:
                  2801:1b:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:df:d5:3e:7c:2f:ce:05:b4:82:b9:a3:21:5a:e1:f3:03:a4:
         2b:92:94:f3:5f:6a:eb:80:63:8a:88:54:38:ed:a8:42:fb:6a:
         6b:9c:44:35:c6:02:02:49:b1:76:c0:af:f7:22:7a:5d:07:44:
         2b:71:78:28:c3:42:b6:26:11:ac:ed:71:e3:f5:48:19:0f:06:
         e4:0a:ed:94:33:6a:45:5f:99:ef:0f:f4:98:e6:47:e3:d1:57:
         15:2c:13:78:17:ca:80:66:78:1a:f0:f8:5f:a0:c9:48:ed:dd:
         88:f3:db:bf:fe:e5:17:03:bd:5b:56:67:19:92:a0:60:eb:74:
         1d:c3:b2:26:8b:bb:52:92:d4:6a:d1:9f:96:a4:f1:c8:5b:e0:
         f3:3e:6d:1b:de:3f:62:73:10:43:a4:f6:cc:e2:ea:0e:ee:8a:
         10:3d:6e:fb:f4:68:35:51:36:79:04:8b:83:57:46:07:3d:d5:
         79:dc:cd:72:40:e8:1f:26:5f:6c:38:cd:5d:a4:07:b0:9f:a0:
         4a:02:07:55:50:ff:79:f1:94:33:39:7d:0d:b6:12:86:f5:1e:
         7a:9e:43:3e:f1:01:bf:37:26:75:ed:c8:8c:6a:2a:78:69:e6:
         fb:c2:39:98:ca:9b:c3:85:27:2a:fe:8a:8b:7d:57:37:1f:a1:
         a1:f3:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----