Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de2fdbf6fcc2301966d1f6b825964d2021c4550.cer
File:                     4de2fdbf6fcc2301966d1f6b825964d2021c4550.cer (raw, json)
Hash identifier:          Xb6gfcWngNDz3mH6zZEAUihlqGK+7JWik5JSjecQ/Do=
Subject key identifier:   C6:21:C1:C5:7C:06:21:B6:CC:AE:25:96:22:8F:91:C9:8E:1B:44:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB5979
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4de2fdbf6fcc2301966d1f6b825964d2021c4550.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jul 2021 16:32:36 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.1.64.0 -- 200.1.103.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16472441 (0xfb5979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 16:32:36 2021 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=4de2fdbf6fcc2301966d1f6b825964d2021c4550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:05:9c:df:ed:30:44:15:98:67:ee:8f:17:
                    af:cd:3f:a4:86:ad:6a:b1:e3:16:41:ca:50:8d:b6:
                    68:5e:24:ca:82:88:61:fb:7b:3d:ce:7c:d0:a7:e7:
                    27:f8:56:6e:7c:8d:5f:73:d3:a6:7d:a4:85:f8:ee:
                    15:c5:ca:02:95:37:ac:24:8a:47:3e:65:39:72:b1:
                    97:ce:a6:01:2e:d5:06:ac:e6:fe:3b:66:af:6d:50:
                    66:6b:35:45:4f:1f:f6:b9:97:5f:00:f4:c6:7d:3a:
                    da:b5:0f:6b:8c:ec:a4:08:87:ab:f6:9c:33:a0:aa:
                    31:78:94:35:8b:e2:23:24:34:cf:11:09:06:bd:d0:
                    80:05:4f:0a:4b:f7:88:a0:46:27:b0:0b:b1:bb:b8:
                    e8:72:df:60:28:8b:7b:bc:7f:eb:5c:22:2e:40:24:
                    63:e4:a5:72:64:2c:e4:02:81:43:83:78:61:83:dd:
                    a1:e0:67:49:f3:a9:02:c0:88:e9:66:87:9c:92:45:
                    6a:16:8c:6a:02:aa:96:44:dc:25:cf:46:1f:fc:f9:
                    8b:bf:1b:36:df:5c:dd:f3:fe:b4:30:59:f3:8e:36:
                    4a:ce:e9:03:ab:0c:88:d6:1d:63:fe:26:d4:f6:d9:
                    01:92:20:40:42:d9:1d:e9:55:c9:6d:e5:94:cd:9e:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:C1:C5:7C:06:21:B6:CC:AE:25:96:22:8F:91:C9:8E:1B:44:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4de2fdbf6fcc2301966d1f6b825964d2021c4550.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.64.0-200.1.103.255

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:89:19:00:80:d8:e7:1b:1b:84:88:7d:49:21:7e:ea:96:
         78:c1:25:aa:85:3e:2f:26:81:0b:d2:94:ba:71:f1:e5:2d:75:
         23:d3:e7:ba:31:00:f6:5e:f1:27:ea:08:e8:ef:ed:e8:45:30:
         56:93:77:98:10:f6:00:d7:c9:f2:68:33:4e:f3:d4:9d:f3:eb:
         7c:b2:56:34:99:28:40:82:72:6d:19:a5:c5:0a:c3:7d:f5:a8:
         a7:a2:78:ad:39:fa:f2:50:67:b8:f2:b0:f6:26:20:67:1b:7e:
         b4:de:61:cb:1e:70:ea:73:6d:8b:51:4e:40:20:63:c2:0d:8e:
         bc:57:84:12:de:98:1a:a6:ee:90:38:73:ba:f8:23:2d:9d:e4:
         89:6f:03:f7:26:00:73:42:1a:c6:8c:03:1c:e9:6b:16:c0:74:
         c3:76:6c:56:09:dd:55:7c:8f:4e:47:29:07:fe:ac:85:f6:d3:
         cb:75:5f:8a:73:d2:8f:77:75:ba:bb:5d:e7:cc:10:0e:c5:1b:
         75:4d:90:ff:23:59:89:95:aa:4a:01:e2:b4:5e:e6:d3:8c:25:
         0c:96:bd:76:5b:25:3f:5e:06:53:0a:d0:8b:ff:f7:f8:ab:ce:
         b3:48:c6:b8:73:a0:10:19:06:2c:0e:6b:5d:c9:cc:99:d1:c6:
         87:8a:72:25
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIEAPtZeTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDcwMTE2MzIzNloXDTI0MTEwMTA0MDAw
MFowMzExMC8GA1UEAxMoNGRlMmZkYmY2ZmNjMjMwMTk2NmQxZjZiODI1OTY0ZDIw
MjFjNDU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIumBZzf7TBE
FZhn7o8Xr80/pIatarHjFkHKUI22aF4kyoKIYft7Pc580KfnJ/hWbnyNX3PTpn2k
hfjuFcXKApU3rCSKRz5lOXKxl86mAS7VBqzm/jtmr21QZms1RU8f9rmXXwD0xn06
2rUPa4zspAiHq/acM6CqMXiUNYviIyQ0zxEJBr3QgAVPCkv3iKBGJ7ALsbu46HLf
YCiLe7x/61wiLkAkY+SlcmQs5AKBQ4N4YYPdoeBnSfOpAsCI6WaHnJJFahaMagKq
lkTcJc9GH/z5i78bNt9c3fP+tDBZ8442Ss7pA6sMiNYdY/4m1PbZAZIgQELZHelV
yW3llM2en60CAwEAAaOCAuYwggLiMB0GA1UdDgQWBBTGIcHFfAYhtsyuJZYij5HJ
jhtEKzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ODU4MTNlYy1lZGQw
LTQwZDItYTk3Zi03NmQ0ZTE4ZDM1MTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTg1ODEzZWMtZWRkMC00
MGQyLWE5N2YtNzZkNGUxOGQzNTExLzRkZTJmZGJmNmZjYzIzMDE5NjZkMWY2Yjgy
NTk2NGQyMDIxYzQ1NTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQGyAFAAwQDyAFgMA0GCSqGSIb3
DQEBCwUAA4IBAQCBz4kZAIDY5xsbhIh9SSF+6pZ4wSWqhT4vJoEL0pS6cfHlLXUj
0+e6MQD2XvEn6gjo7+3oRTBWk3eYEPYA18nyaDNO89Sd8+t8slY0mShAgnJtGaXF
CsN99ainonitOfryUGe48rD2JiBnG3603mHLHnDqc22LUU5AIGPCDY68V4QS3pga
pu6QOHO6+CMtneSJbwP3JgBzQhrGjAMc6WsWwHTDdmxWCd1VfI9ORykH/qyF9tPL
dV+Kc9KPd3W6u13nzBAOxRt1TZD/I1mJlapKAeK0XubTjCUMlr12WyU/XgZTCtCL
//f4q86zSMa4c6AQGQYsDmtdycyZ0caHinIl
-----END CERTIFICATE-----