Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bbec171df1af15102377d4faca6fbd809b04ea1.cer
File:                     4bbec171df1af15102377d4faca6fbd809b04ea1.cer (raw, json)
Hash identifier:          aG7epMPnc9+OJ5x2v3Cq9qJhlAsZJVMzMh+V+9JbLYQ=
Subject key identifier:   FB:39:F9:F3:E2:73:4B:8A:F2:88:D5:4D:2E:D8:A0:0F:CC:26:86:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8650C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/4bbec171df1af15102377d4faca6fbd809b04ea1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 16 Jan 2021 15:03:58 +0000
Certificate not after:    Thu 18 Jan 2024 13:57:43 +0000
Subordinate resources:    AS: 267804
                          IP: 45.172.108.0/22
                          IP: 2803:7fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14181644 (0xd8650c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 15:03:58 2021 GMT
            Not After : Jan 18 13:57:43 2024 GMT
        Subject: CN=4bbec171df1af15102377d4faca6fbd809b04ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:d1:cf:a6:0b:5e:d2:45:02:0f:89:d0:58:
                    16:21:67:b1:14:72:3b:44:b4:cd:11:2d:fe:56:3f:
                    a4:ae:76:97:4b:67:67:26:bb:35:c3:62:82:17:2e:
                    89:40:7e:94:38:dd:b8:07:b7:d2:f7:47:92:1d:6d:
                    c6:ce:15:07:fa:d5:9e:2b:77:0d:b6:2f:c8:ac:97:
                    54:00:83:b6:38:a5:c4:03:4e:98:de:6b:80:5d:cc:
                    56:8a:bd:de:bf:5f:3d:ea:95:7e:cb:a0:f0:c3:48:
                    7e:81:39:88:07:fb:b7:31:c5:5a:e0:f8:6e:8f:43:
                    24:72:30:b6:59:9c:c8:2a:04:ba:87:b0:4c:78:02:
                    30:f2:a0:43:e8:99:cb:0d:76:cb:2e:16:09:09:db:
                    c1:9c:82:1f:3d:ed:c5:68:89:fc:b7:d1:c9:88:3e:
                    bd:54:38:ef:d6:85:b7:8e:58:07:22:30:2c:ec:d6:
                    ee:d3:4f:9f:ae:bf:9b:69:b7:2d:fc:7b:2a:71:1c:
                    c7:85:8c:c7:8c:75:9a:cb:32:5c:53:1d:c4:a3:40:
                    82:ee:c1:3f:dc:ab:51:be:61:fc:66:75:4c:d6:39:
                    de:cb:c5:e3:4e:cc:8c:cb:4a:ab:35:a9:8a:2e:c8:
                    45:79:7b:14:7c:eb:a4:9a:f9:78:65:d4:08:9d:70:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:F9:F3:E2:73:4B:8A:F2:88:D5:4D:2E:D8:A0:0F:CC:26:86:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/4bbec171df1af15102377d4faca6fbd809b04ea1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/22
                IPv6:
                  2803:7fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267804

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:a3:eb:b5:61:18:7c:87:1a:4b:28:9d:61:21:af:8a:ac:
         70:fb:8f:5b:40:2f:96:4d:a4:d4:8a:68:7e:94:85:ea:4b:bb:
         00:74:3a:7e:80:bd:1c:5b:45:5f:96:75:a4:78:61:96:4c:03:
         99:e1:0b:9e:04:d1:a8:ad:d5:7e:44:5a:4b:53:68:f5:63:ab:
         66:1d:cb:00:3b:7f:21:21:4d:10:74:57:c6:3b:b3:38:ea:95:
         a2:c3:0e:21:34:eb:68:8c:71:4f:2b:f2:f7:99:29:4f:39:18:
         39:1b:c0:bc:24:f4:c3:fc:b6:70:b8:68:26:a5:81:20:eb:4c:
         55:43:cb:4f:6b:2f:63:bc:69:59:9f:8f:d6:33:2b:c7:da:d9:
         26:2b:a6:d2:6b:43:45:64:87:3c:77:e4:ea:cb:98:39:8b:8d:
         35:57:b3:81:33:52:a3:bf:d6:b4:05:e5:7a:0c:de:b9:50:34:
         35:16:08:57:db:0e:83:6a:11:36:99:15:cf:2a:5e:be:e6:a8:
         2c:c7:26:7b:ad:53:8e:f8:fc:04:d0:eb:64:65:9a:de:fa:73:
         76:3a:1e:01:8d:59:ff:2e:c8:f4:a8:3f:51:59:fb:a9:dc:c9:
         34:d3:7e:ff:65:dc:5f:79:71:35:a0:15:ba:36:59:2f:9f:a9:
         4c:2d:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----