Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.cer
File:                     6c71ac3d2906f78e7983d8c070095dde94b2ccd7.cer (raw, json)
Hash identifier:          Gji4Me3DSkhV06pVJypft1daglz3dxCQDLXEUNkDk04=
Subject key identifier:   3B:48:64:E8:69:4B:A1:DB:F8:A7:F2:44:76:B4:B8:AF:4F:AB:40:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DAF6AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 21 Feb 2021 21:24:58 +0000
Certificate not after:    Tue 30 Jan 2024 17:16:36 +0000
Subordinate resources:    AS: 28049
                          IP: 190.121.192.0/20
                          IP: 2803:c540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14349998 (0xdaf6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 21 21:24:58 2021 GMT
            Not After : Jan 30 17:16:36 2024 GMT
        Subject: CN=6c71ac3d2906f78e7983d8c070095dde94b2ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:d8:b6:02:1d:d3:63:6c:59:b0:ab:57:4d:
                    ee:6a:72:de:8a:eb:98:fa:2d:ca:38:8d:d0:12:43:
                    92:76:fc:71:0a:8d:87:7a:ff:c9:4c:20:0d:45:ab:
                    51:15:c5:c6:ff:32:8f:65:55:bd:b1:6b:2f:31:fd:
                    b9:dc:96:d8:6b:1e:34:05:f7:0d:80:fe:4b:dd:e2:
                    eb:8c:7f:05:80:b9:7f:a0:72:2c:a7:c9:15:4c:a8:
                    62:8e:33:a0:f8:a1:68:9a:a6:0c:76:88:8e:3f:80:
                    d3:86:5f:83:f9:05:fd:dc:b8:15:fc:fb:d0:07:45:
                    01:b2:63:d5:d1:a3:74:af:d5:33:08:0e:55:8c:ef:
                    fe:88:fe:ba:48:35:c9:6d:a8:fd:ed:a8:1f:23:db:
                    0e:c4:87:65:bb:c2:6e:4e:ed:39:ee:c7:76:68:e4:
                    b1:ca:29:67:a0:1b:45:d6:d2:0c:51:2a:c6:d0:b9:
                    33:77:f1:18:31:84:6f:b2:f3:15:19:a9:2e:b2:db:
                    a5:ba:eb:1b:db:a8:ba:79:9e:ca:d9:58:1e:d6:74:
                    83:f2:a3:58:94:42:91:04:42:91:17:8f:5a:eb:9c:
                    a1:d1:c2:0b:61:a2:72:23:0f:4f:f9:6d:2f:ed:34:
                    a0:70:8a:a6:c4:f6:0e:0a:98:cf:ce:58:c9:4c:ca:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:48:64:E8:69:4B:A1:DB:F8:A7:F2:44:76:B4:B8:AF:4F:AB:40:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.192.0/20
                IPv6:
                  2803:c540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28049

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:bf:80:80:c4:b0:05:17:c1:24:3f:82:5e:29:1f:56:d4:
         08:a1:dc:5c:b4:1c:38:0f:35:95:8a:5d:1b:0c:6d:be:19:69:
         a8:69:95:6e:ca:97:9b:ca:be:3c:d4:5e:8d:49:99:c1:b9:cb:
         7b:e6:27:7a:5b:51:06:35:ba:e6:8a:70:f2:8f:c8:1c:78:5e:
         34:d1:24:b9:10:a8:c0:4b:54:a4:43:3b:47:34:4a:23:fd:0e:
         bb:5b:46:c2:f9:30:5a:eb:9c:07:7d:f1:31:7e:b3:5d:83:3a:
         d2:bc:c1:e8:ae:29:a9:9a:fd:30:f1:1e:e9:5b:c6:d2:fa:b1:
         6d:44:e3:4d:e4:d7:78:6d:08:22:c7:d4:1a:67:3e:c0:53:25:
         0a:ed:e2:c9:ba:54:53:93:fc:4b:60:2c:94:90:70:8b:70:d9:
         5e:13:1c:41:7f:6d:17:c4:03:9c:65:c2:87:59:89:c4:54:67:
         f7:20:3e:df:7c:c9:c9:fb:be:3b:48:35:56:f2:54:bf:56:42:
         5e:f8:17:f8:fd:de:dc:e1:80:95:70:3a:de:1f:31:5b:b2:ba:
         d7:ff:6a:99:6b:3d:5b:76:8c:92:00:67:c3:90:1d:52:6b:72:
         75:aa:41:e3:48:22:6e:fc:f0:26:6d:3e:44:6a:0f:de:3a:33:
         05:73:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----