Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/727db5d1954e4a503a874fd6f3f5a48d88a59d59.cer
File:                     727db5d1954e4a503a874fd6f3f5a48d88a59d59.cer (raw, json)
Hash identifier:          VjrgLo61ZST+FUF17aSFvHQHa0GDSU3vgboDSER/9tw=
Subject key identifier:   E7:6B:76:2D:B2:9E:C2:82:FC:6C:97:F2:D4:BB:32:6C:CE:26:E9:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5BD09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/727db5d1954e4a503a874fd6f3f5a48d88a59d59.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Jan 2021 12:48:03 +0000
Certificate not after:    Sun 26 Nov 2023 15:34:50 +0000
Subordinate resources:    AS: 271851
                          IP: 138.117.168.0/22
                          IP: 2803:c410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14007561 (0xd5bd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 27 12:48:03 2021 GMT
            Not After : Nov 26 15:34:50 2023 GMT
        Subject: CN=727db5d1954e4a503a874fd6f3f5a48d88a59d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:31:45:45:b6:29:b3:66:b4:31:2b:ab:52:
                    c1:7c:78:e4:cc:6a:94:42:b2:5f:83:ce:c5:ec:f5:
                    ba:b1:b9:fe:00:94:42:07:af:d4:60:d0:d6:97:e6:
                    a6:0e:e8:0f:e7:b8:c6:60:f4:fd:fb:1d:07:25:d7:
                    c2:bd:8f:99:b2:db:42:55:65:31:24:bf:0e:42:7f:
                    2e:ce:87:d2:5e:53:76:49:b0:c0:46:cb:21:37:57:
                    96:31:08:7a:dc:b8:20:db:6b:64:2b:b5:3b:02:de:
                    22:7e:d0:1f:e7:5b:d2:7a:5a:e8:42:e0:84:86:d3:
                    82:9a:83:68:83:e8:4a:92:4a:eb:d7:97:e6:54:45:
                    b5:f2:37:b2:71:31:f4:8b:14:78:bf:ee:c7:f8:bb:
                    4d:3a:c1:9d:80:df:71:dd:e8:39:6f:19:30:78:5d:
                    ea:f0:fe:15:a6:e4:82:57:89:f7:99:9d:af:6f:58:
                    d1:3b:da:ce:2f:18:bd:be:8a:df:42:43:ab:2b:99:
                    16:64:cb:91:70:d0:0a:99:a4:bc:3f:4e:c4:67:96:
                    fc:91:32:9f:c0:c1:b6:ef:2f:6d:5f:fb:74:64:92:
                    bb:9e:03:55:47:62:df:e8:ff:f8:2b:d7:93:2c:a1:
                    34:fa:9b:aa:bd:4f:f6:ee:b3:1c:56:ca:49:3a:60:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:76:2D:B2:9E:C2:82:FC:6C:97:F2:D4:BB:32:6C:CE:26:E9:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/727db5d1954e4a503a874fd6f3f5a48d88a59d59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.168.0/22
                IPv6:
                  2803:c410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271851

    Signature Algorithm: sha256WithRSAEncryption
         13:da:f2:d5:ef:20:4c:a8:84:7f:bd:e8:3b:1d:6c:d5:59:9d:
         df:d3:06:20:27:22:9e:30:b3:b4:24:b7:85:d0:87:6c:30:77:
         21:3a:f6:a4:27:ce:98:3b:c8:bf:e7:b8:1b:06:31:b9:82:2c:
         92:62:85:fa:66:e1:ac:6e:79:4a:b7:a6:7a:71:e2:5e:59:91:
         25:d3:37:51:5f:42:a3:2d:70:68:9c:15:39:f4:9d:d8:d8:af:
         82:4d:75:c3:f5:32:09:6a:34:b3:9e:50:c6:ed:e5:1d:cc:6b:
         70:77:4b:d1:0c:ee:d4:8e:81:3e:df:b5:95:43:57:24:3d:0a:
         25:c3:07:4c:53:30:f2:ae:08:02:81:4f:ed:4c:07:ba:97:83:
         70:3c:fd:03:b3:57:cf:04:6b:fd:5e:69:07:c7:fb:ac:b4:20:
         4a:29:98:ca:eb:b2:60:9d:1f:0a:f9:41:e4:c1:a5:16:e2:c7:
         27:49:07:5f:7f:fd:46:5f:7f:87:72:17:52:8a:81:4d:ba:af:
         3f:cd:e7:fe:de:ba:40:40:aa:5a:a3:1a:1a:86:8c:b8:b0:54:
         75:64:e0:d3:a3:da:ab:99:e5:17:12:bd:bb:0e:76:47:50:1d:
         cc:d1:24:ba:62:f8:db:28:e9:a4:1b:b4:17:94:d2:43:ae:b5:
         c9:49:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----