Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/711fc8dc4691872f5e628253f3f086f010538c17.cer
File:                     711fc8dc4691872f5e628253f3f086f010538c17.cer (raw, json)
Hash identifier:          W4hJMtQ/s6j9W5vhz6DgD7R/lEB489bYS6JuQ4DCyp0=
Subject key identifier:   35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5EA9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/711fc8dc4691872f5e628253f3f086f010538c17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Dec 2020 14:03:50 +0000
Certificate not after:    Tue 28 Nov 2023 19:41:07 +0000
Subordinate resources:    IP: 2801:12a::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14019228 (0xd5ea9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  9 14:03:50 2020 GMT
            Not After : Nov 28 19:41:07 2023 GMT
        Subject: CN=711fc8dc4691872f5e628253f3f086f010538c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:74:30:74:e9:22:b3:02:e4:4f:1c:20:92:
                    84:48:15:7a:16:e2:8d:56:76:bd:60:d8:ba:a3:ad:
                    e0:b8:87:db:8e:96:13:59:a3:97:bb:c5:db:8d:18:
                    cd:fb:42:90:68:49:68:f3:46:5c:4a:27:29:cd:d4:
                    ef:69:f4:7d:e5:51:5a:b4:b2:30:20:a6:30:c1:4c:
                    82:c9:63:dd:41:ef:03:ff:0b:4a:92:c0:e5:92:44:
                    df:16:ee:79:7c:85:df:08:b1:07:7a:b5:c7:67:95:
                    71:a2:87:f1:46:75:85:39:d4:d6:34:bd:7a:52:50:
                    2f:a3:ba:eb:27:03:05:b9:96:9e:90:63:4b:e7:20:
                    ca:ee:8d:34:55:e5:a5:39:2f:f0:1c:90:b7:0c:4a:
                    19:48:fd:73:0f:84:4d:18:bd:f7:8b:d1:0a:9e:b5:
                    c5:dc:82:3c:93:52:8a:b8:11:bd:5e:11:e4:4a:d7:
                    e7:6b:b8:e5:6b:ab:5f:82:48:ff:78:97:4d:b4:4a:
                    28:d1:f3:a6:fd:5f:0f:74:fc:d4:bb:4a:46:05:5d:
                    ef:a2:b0:1c:e2:0f:5b:7b:26:73:b6:f1:f7:7d:b1:
                    4e:74:52:18:14:47:17:c5:8c:22:08:6f:67:a2:c1:
                    75:52:69:1c:1d:03:82:bf:cf:af:e5:91:ba:f3:b2:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/711fc8dc4691872f5e628253f3f086f010538c17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12a::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:42:15:01:9a:91:75:29:88:42:8e:f4:16:7a:eb:e9:73:16:
         dc:8c:fc:e3:75:7a:ae:56:d6:fe:ce:00:03:82:dd:43:d7:3a:
         41:75:45:b2:fa:79:bd:fb:12:20:41:5f:9e:b3:28:97:34:70:
         f1:9d:a8:26:05:5c:e5:c4:b4:0c:4d:b5:51:0d:8b:7e:d1:00:
         bc:ae:83:e6:e2:60:e3:3a:e8:c3:b8:95:48:27:6b:db:61:30:
         c9:c4:ce:e2:07:db:61:9b:b4:31:60:3d:fa:e2:53:2e:66:0a:
         b2:01:96:a3:39:5c:da:13:a5:bc:17:09:c8:51:68:95:ca:d8:
         bc:bc:76:8a:4a:34:76:3e:8c:34:c1:5b:8a:3a:6a:dd:3c:8c:
         1d:cc:16:4d:e7:bb:51:bc:34:4f:51:a3:96:15:75:5d:8d:a0:
         84:47:76:f0:76:87:10:0f:af:86:b7:0f:75:b0:a6:32:1b:ab:
         73:ef:7f:42:21:e3:98:28:95:90:90:cf:28:75:d0:e7:c6:d7:
         09:e1:5e:f1:46:a4:ad:ce:8d:aa:03:62:23:94:2c:ed:56:fb:
         e1:2b:21:e8:16:66:86:28:c1:bb:0b:31:a8:13:76:f9:2a:28:
         13:ac:c9:cd:95:c6:60:b9:c4:e3:ef:2e:33:85:bd:b5:fb:85:
         5a:45:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----