Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer
File:                     1a4d699082fbffcb821d7f10efc5a80a2237b902.cer (raw, json)
Hash identifier:          aAa+xJMk3XmDC/x/AU5hRd4feKEjA6ZAI/iThah8eFk=
Subject key identifier:   A9:95:98:04:0E:5B:ED:D3:15:36:F8:EF:5B:31:4A:DC:D7:AD:7E:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5B8E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Feb 2021 18:06:05 +0000
Certificate not after:    Thu 16 May 2024 09:02:02 +0000
Subordinate resources:    IP: 190.123.124.0/22
                          IP: 2806:3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15055077 (0xe5b8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 18:06:05 2021 GMT
            Not After : May 16 09:02:02 2024 GMT
        Subject: CN=1a4d699082fbffcb821d7f10efc5a80a2237b902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:29:44:f1:82:93:4b:bf:95:3d:b9:9a:cf:
                    70:f7:d5:28:85:3d:42:4e:04:3d:9e:59:cb:fa:5c:
                    8e:5f:a7:f8:a7:31:09:61:af:90:25:73:58:f7:1c:
                    2a:fe:3c:0b:57:c1:23:1e:26:24:3f:64:0e:f9:fd:
                    ef:37:ef:45:23:c8:0b:a7:00:df:5a:ea:b1:01:e9:
                    96:e9:9a:94:65:17:b2:e5:47:90:a2:ef:1f:4d:86:
                    15:a2:dc:91:9f:ab:1a:94:1a:53:63:31:7b:77:db:
                    75:b8:53:da:05:65:f4:f2:15:ec:f0:91:36:ff:19:
                    a1:80:d0:76:dd:a8:f3:c9:6a:62:bd:b3:21:a1:f2:
                    4b:bb:ea:8b:c0:d7:d8:7f:20:09:09:a5:cb:2a:bf:
                    27:ef:7a:65:76:d9:68:a1:0a:41:f4:b3:a7:85:2c:
                    94:43:84:ac:58:49:e2:a6:07:7a:b8:d3:3b:32:9f:
                    3b:fd:ce:36:1a:23:52:a0:f1:a3:cb:89:19:a8:e9:
                    f1:b9:e7:85:2c:8f:a4:21:a4:c5:96:aa:85:39:89:
                    bc:4c:bb:a4:e9:8c:1c:1d:bf:0a:26:a0:f5:73:43:
                    c0:24:12:d1:5e:e5:10:99:a0:e8:5b:df:cb:5b:48:
                    27:50:7a:04:1b:e5:a2:95:0d:f8:4e:b3:b5:9e:52:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:98:04:0E:5B:ED:D3:15:36:F8:EF:5B:31:4A:DC:D7:AD:7E:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.124.0/22
                IPv6:
                  2806:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:83:bb:b8:59:ef:42:33:91:64:e5:d8:2b:26:fe:a1:f1:
         49:5e:9f:d0:e5:00:59:79:2f:79:04:5b:a1:82:3f:d2:c9:83:
         e8:05:a8:e8:c0:33:9b:ca:0c:0c:cc:2a:36:29:44:da:7a:02:
         71:76:fb:01:12:e3:7f:29:f1:4d:b8:a4:85:7f:a1:b7:95:55:
         7b:4a:80:86:e0:2a:3d:ac:e3:7a:b0:25:b2:92:f8:74:0d:98:
         33:eb:97:53:d9:c2:56:bc:8f:fc:03:1a:8b:82:a1:3b:2b:89:
         de:40:71:61:3f:17:25:34:9d:d7:de:ad:c4:01:c2:07:d8:bf:
         1d:66:e5:cd:e0:dd:7d:f7:6d:02:27:ce:e4:68:73:b2:d6:58:
         07:f8:4d:c8:22:53:ba:0c:f8:55:b5:7b:59:d0:de:ac:07:c7:
         e1:40:ce:b5:41:21:8f:0e:2f:f2:f0:ce:ea:d8:9c:63:c6:1f:
         d1:a7:dc:b0:e1:9e:d4:c0:bf:2c:88:50:9a:2a:87:e9:01:1a:
         60:e5:c8:d4:9a:47:16:9b:9b:29:2b:1c:32:74:24:8f:fb:03:
         26:ae:b5:8b:70:80:62:1d:06:29:3e:1f:f8:43:bc:b1:4d:51:
         7f:11:23:7a:07:cc:dd:23:d7:dd:10:28:4c:ac:30:18:d8:c4:
         bd:36:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----