Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer
File:                     7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer (raw, json)
Hash identifier:          agwXzUpc4nalyeECmA1DAdK3HZzswqS1XO9WPkrA71Q=
Subject key identifier:   FA:C4:DA:CB:D0:88:43:CB:DC:1F:78:38:A4:7D:61:FC:B2:07:A6:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF3634
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Dec 2020 16:28:10 +0000
Certificate not after:    Wed 20 Mar 2024 18:24:10 +0000
Subordinate resources:    AS: 270007
                          IP: 177.53.152.0/22
                          IP: 2803:71e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14628404 (0xdf3634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 17 16:28:10 2020 GMT
            Not After : Mar 20 18:24:10 2024 GMT
        Subject: CN=7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f7:36:ae:cb:80:c9:94:25:8c:f5:14:07:41:
                    40:1f:39:2f:fd:8c:a1:f2:b4:6b:99:9c:46:52:59:
                    43:68:f8:c8:b6:4e:4c:73:26:a1:ee:d1:15:40:10:
                    8a:48:dd:49:eb:b7:00:a9:f6:56:be:a4:42:f4:15:
                    f9:4d:f0:30:82:75:a9:38:13:7b:a0:67:e5:dc:3d:
                    35:3e:e1:61:96:8e:48:31:72:e1:d8:37:45:cf:f1:
                    45:b2:9e:3c:9c:40:d8:4f:e3:b5:f7:cd:32:34:d2:
                    0a:a0:1d:a1:4a:a0:dd:21:fb:45:eb:5e:c8:a2:8a:
                    fa:c4:41:61:7a:57:a9:43:e6:73:69:96:c1:25:d2:
                    38:36:ad:68:a3:4e:3c:0b:33:94:d0:bd:d1:d9:2a:
                    7a:fb:88:ab:3d:e4:ef:cc:17:9f:69:ba:21:9a:6f:
                    3e:f0:5e:48:ac:29:3c:01:d5:1b:54:c8:25:16:15:
                    cc:c0:e9:8f:5a:d9:86:d5:a0:e8:8e:d7:b3:df:45:
                    ac:f6:73:fb:14:42:25:20:75:b7:27:66:94:c4:84:
                    82:bb:25:b2:00:da:c5:ef:6d:68:5b:43:00:b3:b5:
                    3a:0c:dc:9a:88:82:19:f2:50:4f:e2:c7:62:f1:bf:
                    5d:a1:1e:e6:f5:e2:bd:78:4d:6d:5a:06:4a:f3:6b:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C4:DA:CB:D0:88:43:CB:DC:1F:78:38:A4:7D:61:FC:B2:07:A6:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.152.0/22
                IPv6:
                  2803:71e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270007

    Signature Algorithm: sha256WithRSAEncryption
         b5:9a:d3:ed:e7:5a:00:bf:8e:25:0d:a5:15:4d:49:ca:ce:67:
         56:8f:9a:15:51:1d:a6:bb:e9:b7:98:f8:04:21:fd:c1:d0:12:
         05:f3:98:74:51:83:86:03:04:85:6f:ae:e5:c5:de:19:22:37:
         74:35:c4:8d:19:ec:dc:63:bc:1e:dd:14:3a:42:e6:59:8b:aa:
         87:67:7a:ab:4f:ca:59:16:36:72:17:db:5c:5f:95:0b:1e:b1:
         09:6d:3c:99:ee:19:e2:7f:b1:02:8b:83:da:80:48:26:ec:bd:
         21:eb:1d:87:32:dd:26:dd:8d:01:25:79:a8:e7:89:c4:7e:b3:
         bb:97:e9:40:b7:2b:d1:e9:0f:2b:8e:ac:9f:92:aa:17:87:69:
         4b:b0:b8:19:e4:b5:5a:7f:7a:82:e3:42:95:39:e4:9e:70:e0:
         c4:17:04:82:1b:2e:01:e1:43:d7:ca:9a:d6:7b:38:db:9a:6c:
         c3:6c:0e:da:57:a4:0f:e0:fd:b6:50:28:e3:0a:6c:4f:43:e8:
         fe:bd:ad:ea:12:5f:71:6a:c4:1a:00:93:37:2d:72:14:3b:65:
         7a:be:94:63:31:6d:24:e2:f7:e5:10:50:c1:e4:41:77:6d:44:
         d4:a9:04:a4:47:8d:11:65:e3:19:50:cf:0b:ca:1f:8c:75:63:
         4d:e9:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----