Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer
File:                     4ef467a028415587646ee8e311e81adea47f6ec7.cer (raw, json)
Hash identifier:          kZwnSIXcOCzJXCyaBbBlwyI8bEkGFHCqjQV5BtIhZpQ=
Subject key identifier:   90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D26721
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/4ef467a028415587646ee8e311e81adea47f6ec7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Jun 2022 02:00:59 +0000
Certificate not after:    Wed 13 Mar 2024 12:41:56 +0000
Subordinate resources:    AS: 270160
                          IP: 2806:3e7::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13788961 (0xd26721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 02:00:59 2022 GMT
            Not After : Mar 13 12:41:56 2024 GMT
        Subject: CN=4ef467a028415587646ee8e311e81adea47f6ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:1e:95:2a:c7:e7:80:4e:a6:90:33:2e:50:
                    b4:66:b3:b1:1d:ac:39:47:59:6c:66:e6:60:ad:93:
                    dd:23:4d:b1:b9:49:c9:57:65:4b:da:e5:ae:ae:f7:
                    09:db:08:bb:d3:26:93:4a:94:0d:80:8a:b6:b9:dd:
                    52:9d:9a:7a:d4:09:5a:2c:3f:8f:dc:1c:0b:e7:6a:
                    f6:13:37:93:72:90:0d:12:74:87:17:8b:0b:d7:5e:
                    64:d8:8f:cb:95:7e:1b:a0:36:24:ea:9d:9c:ae:00:
                    c1:47:97:70:5e:0b:f5:59:b6:e9:7a:ef:81:5a:16:
                    a4:31:71:d2:93:8c:89:e7:cf:a3:e3:04:37:6d:e8:
                    34:a0:c6:6f:54:cf:c1:30:97:ed:42:7c:c6:c7:17:
                    dc:b3:f4:40:39:48:99:31:19:f1:3e:f6:13:6a:1e:
                    61:22:89:42:c0:0c:6c:9c:a4:76:e6:b1:f8:6a:13:
                    8c:cd:0b:e0:5c:f0:f8:21:31:b7:a3:77:9f:71:2e:
                    f0:a6:52:0a:0a:56:d3:06:69:2e:19:41:e2:5d:a8:
                    a3:df:b6:4b:3c:d6:48:55:f6:c3:73:16:0d:16:ab:
                    5c:33:f7:63:ad:0a:7b:a9:1b:52:ac:f5:37:73:c2:
                    b7:61:6a:c1:e2:2c:1a:1e:23:b1:4a:6d:64:85:26:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/4ef467a028415587646ee8e311e81adea47f6ec7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270160

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:4f:37:50:ae:e1:13:06:8a:6c:06:ef:ec:48:a8:0f:fd:
         c2:6a:d2:36:40:dd:ed:a1:bc:d1:3f:e4:81:87:b7:42:94:48:
         dc:b6:8d:4b:fc:2b:a4:b4:c9:cc:8b:1d:e3:33:32:56:ff:98:
         3b:e6:a8:27:c0:15:45:2f:2a:c5:d7:ba:6a:a0:2c:dd:d0:ec:
         d6:6e:c0:fd:6d:c5:91:e3:d0:45:d8:41:7d:8f:3c:76:8f:26:
         ae:47:d5:04:3b:98:ac:e3:77:24:45:2f:75:09:ee:83:c7:f1:
         84:bd:7e:44:51:f0:2a:5d:38:5b:84:f2:52:f6:e6:4e:85:fc:
         11:4b:2b:2b:66:1c:42:ef:52:27:28:49:8a:48:56:a6:65:fe:
         19:8f:ba:5d:68:2d:ac:a8:49:80:24:d2:a0:84:00:e8:cc:9a:
         c5:97:32:9e:87:30:82:4a:c6:7a:a9:14:b9:27:16:d3:fa:8b:
         c9:8f:c2:bb:21:da:f9:43:28:cc:f7:ca:ba:1f:d9:a9:4d:c5:
         f8:40:e2:1f:3b:0a:00:31:95:ae:11:03:cf:e9:01:3c:5c:ac:
         6a:34:b6:77:8e:e8:e5:2b:bf:46:ba:53:b3:ed:28:be:fb:31:
         e7:88:11:ba:6d:f7:48:67:73:8c:ff:4e:b4:10:34:de:0f:90:
         c2:e2:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----