Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7047f702e4b88509342b465e0313aa10a406121c.cer
File:                     7047f702e4b88509342b465e0313aa10a406121c.cer (raw, json)
Hash identifier:          PvoBDFqUMTcWlyLCD92wd+WGSZozGxqMpVfo9es/3Nw=
Subject key identifier:   FA:A0:86:28:B6:67:0A:83:D6:15:73:60:F2:2A:C8:8B:01:A6:51:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9F2ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/7047f702e4b88509342b465e0313aa10a406121c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 13 Oct 2020 21:11:33 +0000
Certificate not after:    Fri 19 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 28477
                          IP: 148.218.0.0/16
                          IP: 2801:c4:12::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14283501 (0xd9f2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 13 21:11:33 2020 GMT
            Not After : Jan 19 14:00:00 2024 GMT
        Subject: CN=7047f702e4b88509342b465e0313aa10a406121c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:be:9c:41:44:ad:04:15:fd:e6:f6:ce:be:3b:
                    4c:57:14:cd:35:66:fd:f7:19:be:7f:04:8e:6b:21:
                    2b:e6:c8:b8:19:1e:c9:a4:19:58:66:c1:00:69:fc:
                    25:ca:e9:05:bd:36:26:61:68:78:0c:7e:c6:68:32:
                    db:29:7c:0e:05:f3:7c:ff:d8:f6:82:49:d8:88:35:
                    b5:30:f2:87:b0:21:27:1b:47:c0:d0:dd:ab:82:22:
                    6a:b9:15:c8:7e:78:de:aa:30:35:d5:43:44:72:1d:
                    53:da:bc:cc:ca:ae:cb:ae:c2:5a:92:77:24:94:fa:
                    ed:30:ff:f5:27:62:60:f6:69:70:82:86:b8:4a:72:
                    b2:87:0b:d5:94:45:52:95:1f:45:76:d2:b0:c1:af:
                    42:2a:93:d0:66:03:33:5f:74:17:5e:2c:b0:1d:3f:
                    58:68:4a:33:02:55:2a:21:bd:05:73:d5:95:8c:3b:
                    a3:1e:2e:2c:ca:2d:43:13:9d:c4:da:d2:36:ed:24:
                    6f:5b:c3:68:d7:86:31:81:d0:00:06:97:81:8a:18:
                    9d:c0:5d:3e:bb:e7:1f:b6:c5:33:d8:8e:dd:f7:28:
                    5d:01:28:a3:7f:e0:11:8a:8c:fb:52:5b:96:42:29:
                    26:09:23:21:5d:59:4b:48:db:93:a7:70:ff:1b:89:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:86:28:B6:67:0A:83:D6:15:73:60:F2:2A:C8:8B:01:A6:51:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/7047f702e4b88509342b465e0313aa10a406121c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.218.0.0/16
                IPv6:
                  2801:c4:12::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28477

    Signature Algorithm: sha256WithRSAEncryption
         14:2a:dd:ac:ef:c2:cd:53:3a:91:d4:5f:73:b1:ac:92:55:2a:
         7f:9c:89:96:34:4b:80:a0:29:98:b0:b8:98:1c:58:96:a3:bf:
         64:2e:ec:d5:9e:60:26:79:ae:e1:96:b2:1f:41:57:fa:0f:20:
         8c:63:53:ae:d8:10:30:17:3d:d5:be:0e:23:1e:ce:7a:49:9d:
         bb:40:3f:15:de:a0:11:5e:3c:fb:5a:3f:4c:88:e4:b4:7a:50:
         a8:cd:0c:7c:cd:de:11:16:00:ee:ed:da:a0:9a:8b:bf:a5:62:
         f4:92:bf:41:ec:fd:6a:1f:68:04:db:04:1c:f7:ba:7e:41:04:
         64:22:c9:94:2f:65:5c:a4:c3:a7:c1:31:cf:09:80:4b:71:55:
         dc:45:42:ab:44:1b:a0:55:ee:0a:02:09:ec:d9:0b:0d:7d:66:
         e6:2a:ec:88:0e:a4:90:4e:f0:3b:84:ff:7a:b4:8c:19:9a:90:
         40:a3:a7:c7:c5:e9:3e:6c:c2:82:63:49:3e:98:b5:bb:7b:7a:
         f9:4d:b1:4c:47:32:c5:ed:1a:e8:fc:1b:a8:70:b0:97:f2:eb:
         72:ac:a0:6d:ed:29:25:2c:75:2c:ba:2b:95:f1:13:e5:a4:f1:
         5a:25:e4:42:61:92:cc:36:2e:7f:79:3d:f6:cd:5e:ee:46:c8:
         da:5b:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----