Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/765a09f6bc455b179b8f2f6892acf5facd9d4d21.cer
File:                     765a09f6bc455b179b8f2f6892acf5facd9d4d21.cer (raw, json)
Hash identifier:          MR4sxC7tX1XwSExnYbCJAaRrJb6rxRUCmD9OHAp+dPY=
Subject key identifier:   C4:67:C6:37:DA:9B:17:39:51:E7:71:35:B5:B3:C2:C4:1A:CB:5E:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F10C54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/765a09f6bc455b179b8f2f6892acf5facd9d4d21.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 11 Oct 2020 21:08:28 +0000
Certificate not after:    Wed 07 Aug 2024 22:54:04 +0000
Subordinate resources:    AS: 271812
                          IP: 181.232.180.0/22
                          IP: 2803:7010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15797332 (0xf10c54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 11 21:08:28 2020 GMT
            Not After : Aug  7 22:54:04 2024 GMT
        Subject: CN=765a09f6bc455b179b8f2f6892acf5facd9d4d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:52:1b:a4:07:46:a5:0c:17:b0:cc:9e:5e:
                    9e:8f:d8:f1:df:a2:06:0b:df:f9:18:03:0a:1a:c1:
                    51:4d:a6:0b:57:0d:63:48:19:1d:29:37:5e:7c:26:
                    b9:53:9c:2a:ca:f3:ea:16:17:16:e6:52:7d:87:9e:
                    c7:42:0a:a4:18:2d:fa:3f:b4:0c:b7:b5:b9:3a:e4:
                    13:c7:13:a6:2a:02:b1:e2:1b:ef:66:25:ea:01:de:
                    f4:d0:c3:58:98:07:60:d6:7a:fc:b8:42:13:a2:4f:
                    e2:57:48:1f:fa:c6:67:02:c7:25:4f:43:e3:cb:bc:
                    59:8a:00:db:1e:aa:90:c2:98:cb:1e:14:6c:8d:a2:
                    88:80:4f:df:81:39:08:58:5f:ec:87:58:de:45:86:
                    97:0f:eb:a1:28:3b:43:8a:a1:78:9d:41:88:22:ab:
                    91:6a:7c:30:bc:54:9f:bf:47:4b:cd:f4:6e:12:13:
                    f6:f2:fc:ca:fe:ff:83:f9:11:cf:37:bc:b7:e5:cc:
                    52:33:c2:90:a8:cd:44:22:1c:d2:79:8b:d8:dd:21:
                    9e:a6:bb:57:7a:2f:9a:a7:47:49:2f:f0:bc:f1:70:
                    8b:cd:83:b2:9f:dd:d2:2a:7d:25:da:4f:cf:70:10:
                    f9:a6:78:9f:df:42:6e:f8:d9:42:b8:75:01:56:b9:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:67:C6:37:DA:9B:17:39:51:E7:71:35:B5:B3:C2:C4:1A:CB:5E:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/765a09f6bc455b179b8f2f6892acf5facd9d4d21.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.180.0/22
                IPv6:
                  2803:7010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271812

    Signature Algorithm: sha256WithRSAEncryption
         91:83:d8:92:70:e0:e1:2c:d7:d5:d6:22:f1:37:47:02:8d:76:
         49:59:dc:00:67:31:58:d5:6b:91:80:f4:d1:4a:91:e0:e2:05:
         05:67:ae:16:5d:7e:e5:16:8c:d5:ed:bb:13:41:31:22:3e:9d:
         58:cb:84:52:70:7f:7d:72:70:60:bd:b9:10:8a:aa:56:de:29:
         98:aa:7e:ea:35:b8:d9:db:bd:f0:e8:a5:04:fa:e3:89:24:ef:
         56:55:eb:1a:1d:e2:5f:d1:6a:8d:59:bf:ca:46:2c:e1:0d:7c:
         f7:0b:e4:16:4e:f5:9d:82:32:0b:9b:e9:d9:0f:48:59:6d:9f:
         ed:4a:31:4c:15:85:d9:ca:55:c3:5c:42:b7:8f:75:f1:fd:1f:
         c7:37:2b:7b:f2:0f:39:26:f0:eb:d0:78:eb:b2:3f:64:8a:30:
         eb:df:ca:58:68:72:ef:96:19:06:e3:2d:27:05:08:5b:8e:38:
         4e:1f:d9:e1:e1:a0:28:de:10:5e:39:0b:06:4c:83:b4:9e:37:
         00:1b:db:7b:d7:28:3f:fa:ff:ab:a5:b4:5e:67:8d:f3:d2:12:
         72:68:56:9c:aa:b8:3a:02:de:cd:0f:fb:53:cf:cd:af:75:67:
         c5:c7:b2:21:71:7a:a0:e0:cc:04:59:9e:ca:e4:a7:10:bd:1a:
         68:72:70:3c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPEMVDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTAxMTIxMDgyOFoXDTI0MDgwNzIyNTQw
NFowMzExMC8GA1UEAxMoNzY1YTA5ZjZiYzQ1NWIxNzliOGYyZjY4OTJhY2Y1ZmFj
ZDlkNGQyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKsrUhukB0al
DBewzJ5eno/Y8d+iBgvf+RgDChrBUU2mC1cNY0gZHSk3XnwmuVOcKsrz6hYXFuZS
fYeex0IKpBgt+j+0DLe1uTrkE8cTpioCseIb72Yl6gHe9NDDWJgHYNZ6/LhCE6JP
4ldIH/rGZwLHJU9D48u8WYoA2x6qkMKYyx4UbI2iiIBP34E5CFhf7IdY3kWGlw/r
oSg7Q4qheJ1BiCKrkWp8MLxUn79HS830bhIT9vL8yv7/g/kRzze8t+XMUjPCkKjN
RCIc0nmL2N0hnqa7V3ovmqdHSS/wvPFwi82Dsp/d0ip9JdpPz3AQ+aZ4n99CbvjZ
Qrh1AVa5D0kCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTEZ8Y32psXOVHncTW1s8LE
GsteuTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mYWQzMWM0ZS04YWJk
LTRkMTQtYmFlMC00NDMyZDVhZWI2YTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmFkMzFjNGUtOGFiZC00
ZDE0LWJhZTAtNDQzMmQ1YWViNmE2Lzc2NWEwOWY2YmM0NTViMTc5YjhmMmY2ODky
YWNmNWZhY2Q5ZDRkMjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXotDANBAIAAjAHAwUAKANwEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJcQwDQYJKoZIhvcNAQELBQADggEBAJGD
2JJw4OEs19XWIvE3RwKNdklZ3ABnMVjVa5GA9NFKkeDiBQVnrhZdfuUWjNXtuxNB
MSI+nVjLhFJwf31ycGC9uRCKqlbeKZiqfuo1uNnbvfDopQT644kk71ZV6xod4l/R
ao1Zv8pGLOENfPcL5BZO9Z2CMgub6dkPSFltn+1KMUwVhdnKVcNcQrePdfH9H8c3
K3vyDzkm8OvQeOuyP2SKMOvfylhocu+WGQbjLScFCFuOOE4f2eHhoCjeEF45CwZM
g7SeNwAb23vXKD/6/6ultF5njfPSEnJoVpyquDoC3s0P+1PPza91Z8XHsiFxeqDg
zARZnsrkpxC9GmhycDw=
-----END CERTIFICATE-----