Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
File:                     231291584c896b71599d4bb8b4d15a658a7149ad.cer (raw, json)
Hash identifier:          OvnqlFh4GcPUXsTJpBh5M1WjeA5gsHKXzmrRzPkLefA=
Subject key identifier:   64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6B6E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/231291584c896b71599d4bb8b4d15a658a7149ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Sep 2021 18:34:18 +0000
Certificate not after:    Thu 26 Sep 2024 17:09:55 +0000
Subordinate resources:    IP: 138.122.128.0/22
                          IP: 181.174.172.0 -- 181.174.183.255
                          IP: 2803:cc80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16168681 (0xf6b6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 18:34:18 2021 GMT
            Not After : Sep 26 17:09:55 2024 GMT
        Subject: CN=231291584c896b71599d4bb8b4d15a658a7149ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:89:fd:33:d0:8f:09:41:81:8c:a8:46:98:42:
                    9f:86:2d:4d:0e:7f:ad:76:d4:cd:0d:e3:a2:83:0a:
                    c7:19:94:26:10:5a:14:09:54:48:93:23:78:0c:38:
                    3a:55:f3:d5:69:7c:2d:cc:c2:74:46:e2:78:fe:15:
                    6a:d8:8e:46:d3:90:97:01:65:29:13:44:c3:1e:bd:
                    ce:9e:3e:f5:a9:e6:ae:ed:05:87:fc:6c:0b:c4:25:
                    ef:5b:6b:99:ca:3c:4b:1b:85:71:8a:1e:5a:bb:45:
                    fc:af:5a:28:f5:35:97:50:fb:2a:f2:2e:15:ec:0e:
                    cc:12:a7:b1:9b:07:f3:a8:4d:08:93:74:eb:0b:0d:
                    63:0e:18:85:2b:ff:48:29:c4:8c:27:8e:c7:c1:c1:
                    97:c5:3c:27:80:98:4a:0b:4f:01:a2:69:d7:ae:69:
                    4c:f5:d7:ba:f8:56:72:20:ed:21:1a:2c:2e:8f:00:
                    82:87:18:e2:32:17:d3:53:e2:31:cc:36:3c:20:b8:
                    cd:0e:4a:e0:a1:e0:2a:ac:22:82:08:58:5b:f7:b7:
                    e6:9b:73:c9:78:78:8a:aa:76:4f:ff:b0:8d:42:6d:
                    f7:f4:61:d6:4f:f5:04:fd:e8:ca:23:7e:5c:56:72:
                    f0:a5:c7:25:38:bb:13:ea:6e:97:d7:08:b1:49:fa:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/231291584c896b71599d4bb8b4d15a658a7149ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.128.0/22
                  181.174.172.0-181.174.183.255
                IPv6:
                  2803:cc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:07:c1:93:15:1f:a9:fb:4f:66:33:f1:4f:0c:23:93:70:c8:
         a1:15:0b:71:93:cb:ab:15:d7:30:e4:b2:09:0d:ce:c3:42:2c:
         41:fb:52:5c:20:af:5f:3b:b1:74:17:02:ef:c7:53:aa:17:82:
         77:88:e9:13:7b:3c:2a:f1:2a:81:a7:ef:32:e2:b3:0f:20:e2:
         f2:38:02:01:ba:8a:92:26:34:ee:50:84:b6:ef:ab:c8:1c:a3:
         a7:14:af:6b:c6:59:92:ab:d8:26:55:65:f4:fe:51:7d:e4:89:
         97:c8:18:28:a4:86:12:57:26:8b:4e:6c:e7:24:fe:9d:d9:a1:
         75:b1:45:d2:d6:31:bd:40:4c:50:9e:3e:b9:b4:a9:22:e5:eb:
         cc:12:92:23:23:00:c7:1e:64:79:2f:c3:85:d0:9b:b5:ed:a0:
         77:5c:df:a8:27:0a:93:42:03:37:d4:61:b2:c9:97:ba:f5:3a:
         d7:05:1e:0c:7b:40:14:2b:d5:bf:f0:ea:89:be:fb:6c:86:2a:
         d7:6b:f2:a6:bf:d5:52:51:27:ad:96:4e:5a:e8:c1:18:ab:e6:
         99:8a:67:1b:a1:5b:64:f8:f2:75:41:2c:32:b2:6f:4f:db:d6:
         ca:63:b8:c6:18:64:77:00:94:66:1f:3b:99:f8:34:c9:cd:ce:
         a0:02:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----