Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75e49783f7005bb71953b52a712defdb46de8f36.cer
File:                     75e49783f7005bb71953b52a712defdb46de8f36.cer (raw, json)
Hash identifier:          3BJCBnYONWDb+STWPYg0FotgtYa6oYxJDP7aWMYQkW4=
Subject key identifier:   85:86:EF:FA:E8:7E:88:30:DE:DC:86:CB:C0:78:E1:80:D0:4A:4C:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB5C29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/75e49783f7005bb71953b52a712defdb46de8f36.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Oct 2021 18:29:39 +0000
Certificate not after:    Tue 06 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 52322
                          IP: 190.14.156.0/22
                          IP: 191.97.32.0/20
                          IP: 2803:f200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14375977 (0xdb5c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 13 18:29:39 2021 GMT
            Not After : Feb  6 05:00:00 2024 GMT
        Subject: CN=75e49783f7005bb71953b52a712defdb46de8f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:37:c7:3d:d0:a1:7d:ec:01:a1:db:35:d0:
                    b9:b5:26:1b:0e:96:7d:0f:ac:6e:23:83:3b:c5:d6:
                    3e:30:04:90:21:c5:6f:2e:1c:28:d0:c5:bb:cd:19:
                    28:a0:33:d8:5a:ad:2d:b5:ca:f0:2a:64:79:46:54:
                    cb:3c:5b:18:0b:33:72:2b:2d:6c:d9:f6:03:19:79:
                    b3:c7:e3:b7:e7:8e:27:2d:32:38:60:5a:d6:a6:14:
                    a5:fe:2c:b7:56:13:ba:9c:29:4e:c3:4b:43:80:40:
                    29:70:a1:d5:32:34:99:86:f4:5a:95:ce:5c:a4:b0:
                    d9:6d:5c:f2:44:47:95:9a:f5:a3:68:6f:c0:e1:76:
                    5d:38:c3:ca:14:04:92:88:a3:48:b0:2d:05:ad:08:
                    07:e0:33:4a:c7:9f:e3:9b:23:6f:1f:50:e8:b9:84:
                    7e:cd:fd:c9:68:7b:38:17:e2:3b:35:48:48:ed:b0:
                    38:e7:10:24:e3:c3:37:0d:b5:16:7a:65:c1:07:0d:
                    4a:ae:70:0b:c1:f3:43:bd:7e:19:20:b0:8f:51:1b:
                    2e:33:28:df:c2:e7:95:c2:b6:03:1e:02:0a:50:a8:
                    43:23:09:89:8b:c4:f1:26:27:06:14:6c:fe:07:e6:
                    8a:63:6c:56:6f:36:dc:eb:75:4f:23:f8:5f:a1:6e:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:EF:FA:E8:7E:88:30:DE:DC:86:CB:C0:78:E1:80:D0:4A:4C:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/75e49783f7005bb71953b52a712defdb46de8f36.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.156.0/22
                  191.97.32.0/20
                IPv6:
                  2803:f200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52322

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:1b:72:fc:13:30:40:72:43:e6:2c:a8:2d:a1:b5:2a:32:
         70:4e:e3:08:3d:b7:d3:f7:59:2c:ad:dc:c8:f6:97:e6:1f:c4:
         f2:f4:b0:a3:1a:80:ef:b8:d9:9f:14:88:da:53:80:2d:08:7f:
         5b:c6:dd:77:47:f0:d2:69:6e:a3:31:fd:bf:d6:a5:f0:53:eb:
         f4:2f:16:ec:e6:3b:11:e9:a3:c9:bc:52:c7:67:ca:16:c9:ac:
         de:73:5e:87:d0:f7:95:d5:ee:04:71:d6:00:7c:21:50:09:39:
         66:0a:8d:c5:14:d8:44:09:14:69:6e:7c:ac:a7:11:eb:69:16:
         87:0c:11:47:bd:6b:b2:6c:38:3c:c2:23:e7:52:73:ba:70:63:
         33:54:d7:a4:90:c9:4c:22:6d:79:09:0e:07:b0:62:90:50:a4:
         dc:e9:4e:58:51:da:15:fb:51:a6:e1:16:81:5a:37:83:0e:16:
         52:51:31:35:9d:ba:d8:c2:28:7d:5e:81:95:29:47:98:bc:3d:
         b8:41:9e:74:04:fe:05:60:ae:1d:53:80:f2:36:4a:7d:ab:c5:
         69:96:39:89:6c:1f:d0:1f:1f:25:fd:b2:c3:46:aa:35:fe:1b:
         5d:6a:85:06:6f:0e:e9:ba:63:de:39:ed:5a:d3:6c:c9:58:6d:
         96:f8:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----