Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2254719c66eac9fb222dd8a47fee609a492304b0.cer
File:                     2254719c66eac9fb222dd8a47fee609a492304b0.cer (raw, json)
Hash identifier:          GfdnQgLICYYnVEI36iAv4f88tl9+EeT0G2V8825rs3w=
Subject key identifier:   37:EA:3A:92:CB:65:A2:D3:B9:2D:3D:46:06:39:C0:34:99:36:4E:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB8DDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1d06820-6383-47c6-bff0-ccba2eaa4f5f/2254719c66eac9fb222dd8a47fee609a492304b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1d06820-6383-47c6-bff0-ccba2eaa4f5f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Sep 2020 22:44:37 +0000
Certificate not after:    Fri 28 Jun 2024 15:31:12 +0000
Subordinate resources:    AS: 271778
                          IP: 186.209.208.0/22
                          IP: 2803:d7e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15437275 (0xeb8ddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 29 22:44:37 2020 GMT
            Not After : Jun 28 15:31:12 2024 GMT
        Subject: CN=2254719c66eac9fb222dd8a47fee609a492304b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:f7:01:67:30:78:b3:45:0f:7d:24:cb:f8:
                    29:24:1c:24:f3:3b:c0:7b:44:00:a9:5a:f2:7d:c8:
                    3f:64:f2:9d:45:b7:7e:1e:76:53:42:16:b8:3f:a3:
                    7b:30:3f:e4:13:67:c1:20:e9:0c:83:69:2b:3b:fd:
                    0c:d1:b9:de:78:6e:77:bd:8b:b0:fe:3a:69:c4:fd:
                    7a:b9:3b:90:d7:48:4a:17:13:41:b5:da:ea:a8:8e:
                    47:ed:db:ea:7a:ae:e7:aa:28:e1:a1:00:fd:f9:01:
                    c7:5e:3b:c8:08:df:f1:f8:63:41:75:1a:8c:2a:77:
                    c5:43:b4:90:23:eb:b0:da:af:4c:c6:9a:7e:3f:f6:
                    7d:b5:bd:46:e9:8e:97:3c:1d:08:4a:06:d4:56:94:
                    47:e8:72:b6:33:8b:69:77:92:f0:21:8c:e3:df:96:
                    f4:16:09:74:37:38:f7:54:5b:09:1d:98:f5:af:82:
                    bc:e8:ff:81:da:01:79:8e:42:33:5b:61:6d:65:e1:
                    30:b4:b1:f7:ea:53:12:da:a3:02:70:e5:6a:8f:e7:
                    de:4d:66:89:fe:6f:72:9e:be:08:10:84:3a:f8:bf:
                    c0:fe:4b:8c:e8:6b:e4:a7:88:69:a2:02:8d:7a:d8:
                    d7:17:22:ce:e2:83:69:32:55:96:db:d9:6b:d6:d9:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EA:3A:92:CB:65:A2:D3:B9:2D:3D:46:06:39:C0:34:99:36:4E:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d06820-6383-47c6-bff0-ccba2eaa4f5f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d06820-6383-47c6-bff0-ccba2eaa4f5f/2254719c66eac9fb222dd8a47fee609a492304b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.208.0/22
                IPv6:
                  2803:d7e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271778

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:7a:3b:2f:60:6d:e2:1f:fd:4f:4f:c5:da:99:d4:f1:3c:
         31:81:30:b3:85:f2:63:b8:3b:d6:4a:c2:1e:7f:80:b8:88:26:
         0a:c3:67:6d:32:8e:3e:b0:62:00:aa:4a:2b:a0:df:c1:cc:22:
         f7:b7:dd:f5:a9:71:db:aa:89:b5:af:e9:cc:bc:a1:4f:b0:52:
         ca:16:df:6b:6e:56:f4:bc:42:b3:57:60:16:b2:27:e8:d2:a5:
         c8:cb:4a:9f:d8:e1:f5:30:70:f7:82:b6:9a:32:bf:20:0e:90:
         de:c5:a6:41:ff:0a:c8:06:de:19:3a:9d:d0:3b:0c:2f:c9:15:
         3f:19:ab:30:ad:11:1f:7c:6c:da:e6:83:67:a6:6c:a8:2c:4c:
         6a:9e:bc:78:da:79:bc:d0:aa:55:8a:2a:ef:cf:a2:77:b5:67:
         61:28:29:08:23:d6:15:46:90:de:db:dc:62:22:07:1c:b7:fb:
         1d:d5:45:ab:00:1e:ee:b5:c0:cd:0a:d0:22:43:a0:a3:4d:d9:
         b5:22:27:e1:a8:20:c7:cc:d6:2b:c6:15:f3:5c:eb:9e:cf:59:
         f6:c3:c9:d0:1c:59:85:fc:b5:dc:a0:61:99:4f:49:0a:f4:62:
         bb:67:49:26:a1:90:56:cc:1f:e4:04:09:be:26:32:27:7a:fc:
         d1:3f:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----