Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/309dae9bb504b6387b7f44347b2931723572b161.cer
File:                     309dae9bb504b6387b7f44347b2931723572b161.cer (raw, json)
Hash identifier:          /TfVemFyHvc+XrnkoV87vLBQyEPbnXThOOkgEEDe5MU=
Subject key identifier:   DC:C2:D1:27:C2:E0:0D:AF:00:46:61:34:85:E3:E4:7E:D3:0A:53:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0F4A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/82500ff0-8d42-48c6-95bc-0acb2b407481/309dae9bb504b6387b7f44347b2931723572b161.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/82500ff0-8d42-48c6-95bc-0acb2b407481/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Dec 2020 17:50:22 +0000
Certificate not after:    Mon 08 Apr 2024 16:13:11 +0000
Subordinate resources:    IP: 45.236.228.0/22
                          IP: 2803:a4a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14742690 (0xe0f4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  1 17:50:22 2020 GMT
            Not After : Apr  8 16:13:11 2024 GMT
        Subject: CN=309dae9bb504b6387b7f44347b2931723572b161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:67:77:8e:e8:c7:70:ab:c2:af:d0:10:3b:
                    c4:db:58:44:c9:5f:ce:3f:36:2a:78:1c:7e:e9:60:
                    b2:bf:ac:78:28:02:db:06:3b:81:a9:01:e2:b1:e6:
                    6f:a5:5d:e9:5d:e4:86:74:9b:7e:78:ef:a0:c1:1c:
                    be:f2:72:89:ab:50:14:88:2e:6b:38:b0:f9:56:ff:
                    64:04:1b:6e:af:55:a5:64:9f:59:20:df:ad:a7:80:
                    aa:ad:92:53:fa:39:4e:d1:d2:76:c4:b2:d5:4c:87:
                    7e:b8:70:44:bf:ba:cc:70:58:46:5e:de:2a:6c:73:
                    ed:02:41:8a:65:0b:0e:fa:17:c5:17:52:4c:ce:e9:
                    7f:87:50:cf:17:6c:b1:5e:9d:ff:87:12:99:ab:c9:
                    45:c2:ff:df:a0:18:63:74:d7:d7:9e:5c:3d:ec:81:
                    7f:fc:65:5b:82:41:98:01:af:46:f0:82:6b:be:35:
                    20:b1:78:b4:b3:c8:ef:68:48:53:24:aa:be:aa:0e:
                    67:5b:a1:45:12:77:b4:76:15:f1:3f:7a:2e:97:04:
                    a7:a3:eb:79:72:0a:31:26:41:a3:06:c3:0e:19:1c:
                    02:08:aa:b7:61:48:c9:f5:c1:e4:2c:06:63:57:78:
                    bb:22:78:08:61:12:8e:10:92:39:9f:e1:d4:9f:0b:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:D1:27:C2:E0:0D:AF:00:46:61:34:85:E3:E4:7E:D3:0A:53:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/82500ff0-8d42-48c6-95bc-0acb2b407481/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/82500ff0-8d42-48c6-95bc-0acb2b407481/309dae9bb504b6387b7f44347b2931723572b161.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.228.0/22
                IPv6:
                  2803:a4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:97:49:d1:25:5d:49:6a:e5:d1:79:cf:02:d7:5d:b5:78:
         72:b6:07:9e:35:5b:5e:22:d6:3b:6b:3a:6f:76:51:bd:bb:a1:
         67:94:5c:f9:c0:56:40:3c:45:2e:f0:6e:52:9c:17:a6:3a:f3:
         c6:07:b8:41:21:b2:86:20:9d:be:fc:b8:ee:33:4e:0a:be:31:
         0d:eb:33:2a:8f:67:9e:2a:45:e1:a0:bf:b3:47:25:8b:2e:8c:
         f2:2d:76:0f:d0:15:7f:22:6b:3a:26:8c:f1:0d:86:ca:67:a2:
         61:c8:29:5b:de:c1:86:a2:6f:ab:fe:53:c5:2b:ec:3e:08:05:
         b4:6f:3b:e9:1d:e9:16:4c:0e:99:72:24:d5:59:72:82:65:84:
         f1:f2:f5:9a:5a:ba:d7:72:83:3c:37:b6:cf:51:ae:3a:e4:31:
         77:32:d1:12:2b:46:fe:7a:ad:13:6e:aa:4e:c6:b2:bc:eb:1d:
         5f:52:5b:cf:62:42:b9:58:df:7e:c0:17:d2:75:f4:f6:be:5b:
         3d:18:03:e6:fc:3e:67:d8:e2:82:8e:70:7d:07:e3:cb:b4:d9:
         0f:d8:cf:48:3f:66:40:32:5b:91:e0:f9:60:70:ed:9a:35:6f:
         c8:2a:2f:49:38:80:1b:ae:53:25:4a:fc:40:c6:12:2a:75:21:
         d8:22:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----