Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.cer
File:                     47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.cer (raw, json)
Hash identifier:          QHBjLRAulZR00vbPpNR/p2rodA4gaka+z3Xx4bCSefY=
Subject key identifier:   49:EF:4B:91:69:AA:53:FD:39:08:98:AC:33:76:C6:A2:AE:3B:E8:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA3666
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jul 2021 17:49:00 +0000
Certificate not after:    Sun 21 Jan 2024 17:39:46 +0000
Subordinate resources:    AS: 263764
                          IP: 167.249.216.0/22
                          IP: 190.106.80.0/21
                          IP: 2803:2400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14300774 (0xda3666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 26 17:49:00 2021 GMT
            Not After : Jan 21 17:39:46 2024 GMT
        Subject: CN=47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:d7:bf:1a:86:87:13:81:1a:d2:bb:a2:81:
                    b1:66:6a:fd:61:df:bc:c4:de:f8:a2:0d:44:2e:52:
                    28:67:0c:84:1b:c8:8d:e3:77:5c:2f:87:57:6c:a0:
                    0b:f9:8a:8d:d6:68:dc:d8:19:0b:80:ce:28:c3:d8:
                    63:6a:d0:1a:db:d5:66:7c:01:46:82:12:ad:82:f5:
                    d5:22:02:cc:54:a3:b1:e4:97:71:17:cf:89:58:a4:
                    7e:ee:a1:13:ce:e3:c6:c6:86:cb:33:b1:dc:75:41:
                    a8:4e:d5:0b:38:c8:50:ab:b8:65:6c:c8:dc:9e:25:
                    f4:1c:b5:c9:fc:bf:45:c5:c2:20:bd:2e:07:ae:67:
                    18:3e:0c:be:4a:83:3b:d3:41:6e:30:86:6d:3e:66:
                    37:05:8a:1e:ba:dd:89:57:17:d7:3a:b8:8f:51:f5:
                    11:54:ef:5e:a3:aa:dc:b1:5c:f4:df:09:fe:7f:7e:
                    51:ba:3e:8a:d1:8c:16:e1:4d:37:5e:b1:fa:06:de:
                    aa:b0:96:f3:84:b1:fe:51:b4:17:b4:40:2c:e7:f5:
                    46:31:5c:43:c1:b6:21:99:4c:0f:c9:b2:17:2b:c7:
                    b1:62:8e:d2:a4:17:1e:ce:21:55:ca:de:86:67:89:
                    6d:11:37:a2:f8:d2:31:87:75:48:22:18:dc:f7:d2:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:4B:91:69:AA:53:FD:39:08:98:AC:33:76:C6:A2:AE:3B:E8:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.216.0/22
                  190.106.80.0/21
                IPv6:
                  2803:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263764

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:2b:03:47:e4:34:ef:1e:93:63:38:6c:41:9b:71:e7:e6:
         ba:79:ed:8c:71:d0:e1:fc:cb:6f:83:fa:c0:f7:51:cd:ba:72:
         e7:93:01:90:59:00:20:d7:91:66:c7:15:00:c4:b5:e6:52:ea:
         3d:11:42:eb:6c:d4:98:bf:58:08:e2:d6:f4:2e:9c:4b:08:33:
         43:cd:44:94:aa:89:13:e0:a1:12:04:0e:31:3e:14:9c:dd:0d:
         c4:31:ce:59:00:4a:4e:a2:7a:b1:64:54:a4:ef:3b:78:02:f0:
         96:aa:a7:71:1d:e3:09:1e:c3:f2:9f:2d:a1:2e:1d:ae:2a:9b:
         ea:e1:57:fa:f5:c1:62:6c:c2:dd:a0:be:87:94:55:ab:d8:9b:
         51:12:9a:2a:d8:ab:c1:79:7a:38:d1:7f:2c:72:64:47:76:c3:
         b9:9a:e9:83:ce:7e:13:e3:8f:dd:a7:02:6b:44:51:9e:8d:62:
         a8:0b:ee:d2:11:01:a7:65:f5:c4:d8:fd:1b:71:e7:34:d3:ae:
         54:27:a1:12:91:f9:5b:d7:ad:1c:22:4e:bc:c4:5d:92:d6:8d:
         1f:2a:73:85:d7:24:dd:3d:ef:d9:63:e4:e4:b9:a1:94:f3:ca:
         1f:f4:fd:30:cb:c2:81:2a:b6:e8:3e:67:c5:36:99:6e:eb:d5:
         cd:d8:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----