Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7daee1404660d04caeac4117f6572e478edbda00.cer
File:                     7daee1404660d04caeac4117f6572e478edbda00.cer (raw, json)
Hash identifier:          1Uh530VvZv89e4iE5U4HI4NfA0Va3j+kIURBDdC75h4=
Subject key identifier:   97:9A:00:E1:38:42:91:5F:D5:A8:D7:8F:92:D0:F4:95:2F:8A:D8:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD03BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/7daee1404660d04caeac4117f6572e478edbda00.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Nov 2020 15:19:51 +0000
Certificate not after:    Sat 24 Feb 2024 20:04:54 +0000
Subordinate resources:    AS: 64123
                          IP: 186.148.224.0/22
                          IP: 2803:1ee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14484413 (0xdd03bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 15:19:51 2020 GMT
            Not After : Feb 24 20:04:54 2024 GMT
        Subject: CN=7daee1404660d04caeac4117f6572e478edbda00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:f5:58:33:05:e8:59:af:3e:37:2c:e8:5a:
                    a8:98:62:f8:48:39:59:fc:38:b3:d0:6c:a7:4a:e9:
                    e7:ab:55:d8:21:ef:fd:b2:69:57:b9:40:69:aa:66:
                    2e:66:df:11:28:df:ef:c4:0b:ec:ff:6e:31:3e:0c:
                    42:1e:84:f9:b2:59:91:60:0f:87:d9:57:51:a6:39:
                    15:2e:ce:23:e8:1f:a4:be:6f:8e:05:b6:ef:48:9d:
                    a5:a1:da:6a:f3:f1:10:42:e9:87:e5:7b:91:f6:37:
                    36:74:f7:e0:dd:b6:e9:ec:1c:39:02:c0:26:3f:6c:
                    af:00:d9:c4:ac:e0:96:4f:1f:34:b2:c3:01:4a:a5:
                    d5:c1:aa:2e:82:d6:ba:60:69:36:7a:bc:e6:ef:f3:
                    a5:b6:95:3f:a9:c0:76:51:bf:c1:03:5a:6e:97:4b:
                    6b:3b:94:8c:ff:68:5b:33:7a:8a:c9:93:25:e9:5f:
                    80:81:b6:cf:5b:e5:0c:70:a0:9b:42:7a:bd:1e:17:
                    e8:f9:c3:6f:bc:32:40:0f:a0:ba:bb:b3:e9:3f:0d:
                    a5:86:a0:17:5f:cd:c7:31:6a:e4:78:43:36:41:be:
                    88:a7:86:f7:af:36:53:58:ff:45:d5:85:fc:56:e5:
                    c9:e0:eb:89:f7:3b:4e:97:28:bb:54:3a:e6:81:9c:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9A:00:E1:38:42:91:5F:D5:A8:D7:8F:92:D0:F4:95:2F:8A:D8:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/7daee1404660d04caeac4117f6572e478edbda00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22
                IPv6:
                  2803:1ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64123

    Signature Algorithm: sha256WithRSAEncryption
         26:db:03:0c:48:d5:7c:72:c8:b1:c2:91:eb:d9:f0:3a:2c:02:
         5e:82:f9:9c:e5:68:61:fe:c5:44:7d:cf:53:46:ea:ba:fc:1f:
         8d:db:01:14:f7:15:27:3e:9e:6a:be:74:36:05:86:47:c3:ee:
         77:0e:f4:c9:33:eb:7b:94:f7:27:15:e2:92:47:a7:ba:45:b9:
         c6:35:3c:48:24:f2:e1:f9:05:07:53:a3:71:bf:45:c5:b8:4f:
         29:9f:11:55:c5:5a:56:1d:0d:c7:1a:39:5e:0e:ab:9a:f7:7a:
         ed:c3:74:61:80:90:02:22:7d:9e:7e:cf:5b:f6:15:3e:b0:dc:
         92:06:8f:fc:45:58:5e:47:ea:8d:4e:1e:15:04:97:cd:f7:aa:
         fa:ad:c6:61:1a:53:4d:54:37:97:06:6a:59:34:9f:f6:2c:ae:
         63:4f:42:ba:7e:92:0d:d9:3f:99:e3:a9:6c:40:7b:02:d5:8b:
         35:3b:20:7b:b8:b8:dd:58:03:ec:ca:b4:65:c0:e8:2f:6c:64:
         30:6b:df:e7:7f:ec:30:04:76:3f:c6:ea:d4:ea:99:24:87:66:
         95:04:36:59:7f:0f:01:bb:b9:80:51:3c:1d:52:38:c3:e8:3e:
         e2:d2:ff:46:0d:52:4d:a7:57:a6:18:4f:9a:81:51:39:f2:16:
         cd:0a:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----