Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
File:                     3a61a7a9840080a44173f942095ac78ead239107.cer (raw, json)
Hash identifier:          siyO5XxetL52QFG2hOLtCKXB/nfO1Tm1QxHLe/IXO6A=
Subject key identifier:   33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF9155
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 Jun 2021 04:54:30 +0000
Certificate not after:    Mon 25 Mar 2024 14:45:48 +0000
Subordinate resources:    IP: 200.49.240.0/22
                          IP: 2803:8a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14651733 (0xdf9155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 04:54:30 2021 GMT
            Not After : Mar 25 14:45:48 2024 GMT
        Subject: CN=3a61a7a9840080a44173f942095ac78ead239107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:ad:df:1a:97:b3:31:9c:28:5b:3a:0c:1b:
                    51:af:91:9f:1d:57:be:15:59:6a:24:bd:4a:11:bf:
                    f1:e4:48:92:5b:04:a0:1d:3c:73:f6:f8:83:94:77:
                    44:61:d8:17:f3:e8:35:34:c3:e5:73:56:11:1e:39:
                    55:bb:46:88:90:e8:df:8d:2f:0c:be:13:bb:92:36:
                    70:0c:45:57:f6:29:e0:4a:06:f9:2f:ce:35:df:6c:
                    3c:97:0f:11:9c:d7:e3:30:1c:b2:ec:49:3f:3e:72:
                    b4:ce:0c:97:ec:47:da:67:d0:94:a8:be:ab:16:66:
                    ea:25:71:75:bc:f1:ba:64:5a:e8:6d:9c:22:73:32:
                    d6:75:78:b9:88:f0:0c:2f:7c:86:39:c7:07:eb:cd:
                    7d:cf:14:fa:db:2a:d4:c7:8c:5c:82:5b:1e:2c:07:
                    e4:eb:9a:a4:08:d4:d2:36:7f:76:b3:df:65:db:63:
                    ec:d5:8f:1a:3e:f2:d4:7d:4a:00:5a:f5:44:2a:0a:
                    4f:85:62:45:8f:6e:76:ba:65:43:15:da:db:41:65:
                    5a:a3:24:5a:31:3c:a5:3b:02:c7:26:4f:e5:66:38:
                    d1:90:ef:0b:c9:a6:18:53:b7:31:af:20:e5:aa:a3:
                    e5:ec:19:40:f1:dc:80:0a:c5:e9:95:55:78:11:0b:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.240.0/22
                IPv6:
                  2803:8a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:e6:4c:cd:9b:0c:f5:34:4e:bf:84:a0:b5:6f:16:75:55:
         79:e8:dd:11:91:d4:89:cb:ca:69:cc:a0:f6:63:85:37:df:6f:
         97:35:8c:a3:fa:07:ef:55:7b:b8:97:20:c9:01:a4:d6:2b:60:
         fa:de:06:ff:43:49:84:74:a8:0a:a2:e6:6b:e7:03:4b:c2:ea:
         3e:a2:1d:71:b7:cb:9c:78:14:0c:1c:c1:42:77:1d:cd:13:0e:
         fe:44:3c:45:45:b5:86:a1:8a:dd:34:ed:0c:68:45:f2:40:7e:
         11:68:cc:9e:69:cf:13:b7:cc:61:e8:32:0a:ac:da:1b:09:6e:
         a7:72:99:ec:40:ef:04:07:94:c6:2d:0f:3a:72:d3:ca:69:f4:
         89:b6:be:78:78:a0:b9:7b:00:7b:6c:18:b5:b0:fa:a8:5f:0d:
         fb:7c:b6:7d:75:5a:59:fa:09:4c:ba:6b:51:0f:b4:12:9c:b0:
         d4:67:23:12:3c:bb:b5:2f:ff:ef:cf:c6:6e:ae:08:58:4c:44:
         48:ba:f2:0a:30:14:4d:03:26:a0:27:b2:24:17:8b:0d:16:8d:
         af:cf:e4:4f:64:90:0a:58:0e:46:ef:45:7e:8d:d6:50:1d:af:
         fb:37:3d:83:28:67:94:87:e6:7e:58:e7:70:35:05:a5:2a:83:
         47:ca:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----