Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a7aeab549c4c7f5093e9034bfb143044e85aee1.cer
File:                     7a7aeab549c4c7f5093e9034bfb143044e85aee1.cer (raw, json)
Hash identifier:          jwt9JXDOLw6S67V76+KblcgUn4dbvanY8HkYCU/s45w=
Subject key identifier:   6A:72:69:80:83:DB:60:84:9E:D0:DE:A8:92:D7:A8:F2:B0:B0:EA:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CBD64B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6689b76f-0b6b-4682-b9d2-1dbb367df16a/7a7aeab549c4c7f5093e9034bfb143044e85aee1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6689b76f-0b6b-4682-b9d2-1dbb367df16a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jul 2022 18:46:47 +0000
Certificate not after:    Wed 24 Apr 2024 15:46:32 +0000
Subordinate resources:    AS: 272815
                          IP: 168.205.196.0/22
                          IP: 2803:c490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13358667 (0xcbd64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 18:46:47 2022 GMT
            Not After : Apr 24 15:46:32 2024 GMT
        Subject: CN=7a7aeab549c4c7f5093e9034bfb143044e85aee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:50:67:03:a2:c4:09:30:c1:df:cd:bd:80:da:
                    fa:6d:3c:90:6c:c9:73:fc:dd:78:1b:e8:72:d1:bd:
                    cc:16:d5:20:63:35:3d:60:a1:34:77:b7:c9:1f:71:
                    6f:b7:2c:fa:55:b2:78:26:9c:c1:55:61:ba:ef:9f:
                    db:c3:55:ae:65:ba:fc:33:e4:d8:92:1d:f5:a7:9e:
                    69:b4:2e:ac:29:1a:64:15:f3:95:67:76:06:91:11:
                    27:27:59:8a:7d:7c:0f:6d:68:9f:3a:69:ba:c6:15:
                    d1:79:37:76:d9:cf:42:21:ab:bb:db:36:2e:65:07:
                    58:5a:d2:40:85:8b:7e:8b:46:6b:20:43:19:8e:50:
                    69:46:2a:be:12:fd:c9:ec:ad:4f:9c:db:4b:ae:59:
                    f0:e8:2c:a5:3c:6d:6c:41:e3:23:c5:16:48:28:c5:
                    e0:30:b0:fb:ac:55:fc:fe:f4:c8:98:0b:58:8e:d9:
                    a5:f7:c4:e2:24:cc:1b:90:2b:a1:4b:af:44:40:8f:
                    6b:e7:59:1b:ea:dd:42:fb:98:a6:d8:49:35:f8:08:
                    6a:94:86:4b:59:bb:1d:e0:6f:e7:93:ee:6e:9b:de:
                    ae:91:17:cf:24:2d:4b:e1:aa:4d:82:69:6b:9d:0d:
                    64:16:42:4a:e2:40:8e:fb:12:fe:58:3d:16:c3:d1:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:72:69:80:83:DB:60:84:9E:D0:DE:A8:92:D7:A8:F2:B0:B0:EA:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6689b76f-0b6b-4682-b9d2-1dbb367df16a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6689b76f-0b6b-4682-b9d2-1dbb367df16a/7a7aeab549c4c7f5093e9034bfb143044e85aee1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.196.0/22
                IPv6:
                  2803:c490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272815

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:9c:dc:35:e8:39:a8:5d:e0:e7:60:85:18:8a:e5:39:0c:
         0b:8c:c2:9d:77:3a:61:0d:f7:33:06:a4:40:29:76:07:7f:43:
         4c:ea:a3:d1:a1:e1:39:cc:75:35:02:05:50:9b:9c:33:09:f9:
         71:11:24:97:d5:7b:35:ab:98:80:66:20:bb:59:7a:fa:2b:25:
         2a:ee:0e:72:a4:2e:4b:dd:2d:49:1e:ab:48:b2:c5:00:33:47:
         84:f5:ec:8e:0c:cc:3d:49:b8:0f:65:47:d9:40:49:ec:07:7c:
         de:30:43:b3:bd:b2:c9:f2:c3:34:df:30:b0:04:8a:6c:05:f4:
         51:f8:f8:1d:93:cd:a3:e9:eb:f3:9d:45:b3:cf:86:15:81:f5:
         ec:13:af:2b:ee:6d:b9:a6:ee:9a:c3:81:48:2f:6c:5e:e4:bc:
         30:7d:1b:e2:19:0a:71:b9:6f:d7:31:a3:e7:41:26:e0:f4:67:
         8b:fe:96:c6:ca:54:d3:65:9a:57:aa:88:15:73:5e:6c:0b:41:
         00:70:e2:39:a9:73:e1:a1:96:d7:cb:eb:26:fb:97:39:35:49:
         45:69:76:77:00:ef:61:8b:cf:c1:d0:ba:4d:61:58:b6:0d:f3:
         58:65:a6:93:fc:8c:4b:b5:c8:e1:cf:94:f1:2d:ce:47:0b:bd:
         23:b0:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----