Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer
File:                     1a218671f562f7bf310bd8da78423d60e1395e66.cer (raw, json)
Hash identifier:          hP9uYZHZeR0A1bYdU/o6gXNefOMAuAL/gznuv9R7eT8=
Subject key identifier:   5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C9BB90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Jun 2022 20:53:11 +0000
Certificate not after:    Sun 24 Mar 2024 15:28:59 +0000
Subordinate resources:    AS: 272153
                          IP: 2801:189::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13220752 (0xc9bb90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 10 20:53:11 2022 GMT
            Not After : Mar 24 15:28:59 2024 GMT
        Subject: CN=1a218671f562f7bf310bd8da78423d60e1395e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:58:4c:b8:34:73:87:51:45:35:8a:cc:c9:
                    b5:e6:7b:56:4b:f4:47:a7:68:a0:b8:2e:15:3d:7f:
                    8f:0d:a8:ed:90:93:52:f7:c2:af:78:49:68:fc:12:
                    d3:23:b6:56:83:49:28:28:ae:1e:eb:53:1b:8b:d6:
                    27:1d:ae:00:0f:ab:e2:7c:84:68:03:ff:2b:31:31:
                    93:a4:f9:69:ee:a4:3d:95:90:0e:0f:77:fe:60:67:
                    66:7d:25:cd:72:01:d0:7a:0f:fe:1b:22:a9:cb:26:
                    96:8b:9e:82:bc:b1:83:ae:88:a2:2b:88:5a:fc:c9:
                    4b:f5:57:18:4a:30:2a:8c:98:16:86:1b:16:89:83:
                    1f:08:9f:ef:a2:13:31:eb:31:b0:f9:34:8e:06:a0:
                    f1:26:0f:4e:e3:8e:9d:15:94:2b:5c:00:c5:b8:8d:
                    d8:0f:7d:71:17:d6:16:10:83:07:99:62:8c:11:b9:
                    c9:74:92:7d:16:9b:b1:f9:dd:b4:bc:e1:39:37:c9:
                    7a:0a:86:04:65:ed:07:bf:27:e1:ee:16:b9:15:ff:
                    8e:36:54:3e:f4:c9:88:9e:58:55:42:31:d6:52:ac:
                    12:a1:bc:6b:8c:44:88:7f:4e:7e:62:4c:92:19:e5:
                    8e:56:ea:6e:dc:fe:ec:c0:c9:d7:93:03:f7:65:4e:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272153

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:d7:92:8e:91:6f:ce:90:1d:15:46:9a:de:5f:21:f1:af:
         f0:ea:55:3d:b9:3e:81:35:6f:10:2d:58:4a:2e:3e:84:e7:17:
         22:d8:b0:57:10:71:4b:5a:58:87:27:ea:c4:8b:97:20:5f:42:
         f8:d8:72:38:4c:75:1f:0b:0e:d0:6e:a7:39:ea:07:f6:df:90:
         9e:37:f3:9f:db:5e:e6:0f:50:3c:6d:9c:bf:60:b9:cd:4f:ea:
         98:7b:f7:00:0a:e0:f7:e2:0f:58:f6:ee:53:ae:2c:45:db:0a:
         bf:69:db:74:4f:97:1a:36:ca:4b:2b:42:79:8a:80:ee:7e:f3:
         4f:20:d8:b8:47:e4:80:0f:4f:61:3f:a7:ee:d5:d4:5f:30:51:
         b0:74:e7:59:6e:4d:10:0c:ed:b0:43:21:49:13:c1:10:f3:76:
         0c:86:1d:0e:1f:65:29:b2:6d:75:40:52:af:4f:e0:8d:f7:ce:
         f9:d8:a6:a4:b7:10:1f:e0:c0:cb:7b:59:c0:54:6a:4b:94:e2:
         79:50:ac:b8:7a:a5:eb:2a:97:45:68:8b:0c:cd:22:9b:a6:49:
         86:57:af:7f:db:80:34:71:af:b4:a3:fa:95:58:62:fc:02:f8:
         a9:db:36:0a:52:b9:39:ac:c8:4b:b6:19:41:1f:e1:4e:77:c7:
         56:f2:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----