Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer
File:                     28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer (raw, json)
Hash identifier:          L2Hjgl/iKKZ+K7y0r+/GE6P4VUKAdBSUWfGomoiTLNw=
Subject key identifier:   9C:B8:1C:93:F1:3D:AF:49:79:00:65:67:FE:3A:0C:6C:58:EC:EE:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED4C13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Oct 2020 20:51:04 +0000
Certificate not after:    Wed 10 Jul 2024 15:34:07 +0000
Subordinate resources:    AS: 271796
                          IP: 179.51.204.0/24
                          IP: 2803:7fe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15551507 (0xed4c13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 20:51:04 2020 GMT
            Not After : Jul 10 15:34:07 2024 GMT
        Subject: CN=28411e73cb2042bb1a9c78b47807e0acd5a97e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:f3:25:08:d1:92:2f:0a:f3:d1:48:6f:62:
                    b9:34:b2:1d:0b:15:13:fa:57:59:c0:93:66:79:54:
                    89:9b:86:48:d9:60:29:11:04:59:bf:e8:17:5f:15:
                    8b:5d:2e:6c:4c:da:d1:8b:89:19:d1:4c:64:d7:8d:
                    85:51:ab:81:bc:13:a8:f3:bf:34:eb:08:b4:a8:61:
                    81:3d:aa:f3:8d:3f:64:e8:a1:45:20:97:5c:e2:38:
                    54:a1:8c:52:b9:ab:72:43:4f:e8:ef:c6:89:3e:d5:
                    31:c9:92:36:90:d6:89:74:5d:53:74:05:b2:5e:b8:
                    dc:59:b9:11:bc:98:77:e3:d1:7c:3f:eb:22:a6:c4:
                    45:8a:57:61:b8:d1:8e:96:6d:56:97:e4:de:50:b9:
                    54:03:5a:5a:93:41:06:04:52:18:f6:0d:87:64:6e:
                    e8:80:a6:84:17:25:91:d3:cd:b1:24:24:3d:33:85:
                    02:a9:1c:70:d2:3c:cd:61:04:55:ca:dd:ee:71:9f:
                    35:ff:bd:fe:4a:ac:a5:ea:8d:f9:9e:a3:d8:4c:8a:
                    42:a4:fa:72:eb:b3:c4:81:2c:1b:f7:8b:ab:83:42:
                    09:31:9c:07:53:c6:db:f9:b9:5f:22:1f:b1:7e:95:
                    a8:37:9c:33:b2:d0:aa:08:11:23:57:a0:0b:0e:6b:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:1C:93:F1:3D:AF:49:79:00:65:67:FE:3A:0C:6C:58:EC:EE:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.204.0/24
                IPv6:
                  2803:7fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271796

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:a4:71:3a:0c:65:b1:b8:cb:66:d8:cd:21:6c:a1:73:96:
         6a:ec:9d:e5:e3:dd:94:a7:77:cf:31:bc:98:7d:11:de:56:85:
         8a:72:9a:a6:3c:d7:af:be:d6:91:1f:65:e7:2a:6a:6a:09:22:
         ad:89:e4:f9:f0:7b:d6:a6:8f:61:6f:09:6c:c6:20:d2:9b:e0:
         e2:80:ef:d6:1c:d1:a4:ad:7f:f1:21:59:06:5d:a6:8e:87:81:
         37:5c:65:ba:42:34:7a:2a:a2:0a:3c:e0:26:cd:2f:11:f6:b1:
         6e:5a:9a:f2:99:9f:e9:de:40:85:ef:30:c5:18:cc:04:1e:6c:
         de:5a:b9:61:86:3f:cc:e2:41:72:8c:9d:85:a3:bc:46:a2:77:
         07:df:9a:24:a8:ab:c8:84:f2:ea:41:2a:4f:2a:b3:19:8c:ed:
         85:f3:fa:2c:a4:b6:7b:52:17:2f:96:00:e9:b3:cc:36:18:af:
         65:fd:ba:5b:2b:c8:73:62:14:ff:e2:b1:88:92:bd:39:52:4e:
         59:8a:e4:8d:f1:cb:43:c9:74:9c:96:cb:71:b3:f9:22:9c:e0:
         5c:01:a0:ec:db:08:94:cb:ce:aa:0c:c4:00:91:57:e7:fc:53:
         e8:1f:48:c6:85:ef:bc:9d:59:0d:90:9c:76:1d:b6:ae:a9:cd:
         da:9c:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----