Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/838d7a4980d338c0fda0998cecd06d6224ebf6b4.cer
File:                     838d7a4980d338c0fda0998cecd06d6224ebf6b4.cer (raw, json)
Hash identifier:          oevsoiVoimpPcaT/iSD9Lz6a9BnRTABbezYdoyPWpAU=
Subject key identifier:   67:56:6D:06:C5:4F:55:BF:30:77:A7:E3:E6:22:CD:A9:E3:CA:BF:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67EDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/838d7a4980d338c0fda0998cecd06d6224ebf6b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Sep 2020 13:59:10 +0000
Certificate not after:    Mon 10 Jun 2024 20:29:22 +0000
Subordinate resources:    AS: 270077
                          IP: 179.48.140.0/22
                          IP: 2803:f3e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15105757 (0xe67edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 13:59:10 2020 GMT
            Not After : Jun 10 20:29:22 2024 GMT
        Subject: CN=838d7a4980d338c0fda0998cecd06d6224ebf6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:af:f9:d4:7c:67:65:8f:5c:33:bd:b8:19:
                    9e:6a:30:15:ad:88:c4:fa:65:3a:52:78:51:4b:aa:
                    0e:80:6f:70:96:0c:f6:e0:d0:04:cb:db:29:19:f8:
                    db:cc:ab:fb:7b:81:4e:82:02:0d:af:ec:fb:05:fd:
                    61:85:0a:1c:d0:21:14:4e:04:1b:68:e7:36:97:87:
                    21:70:92:07:c6:8d:9b:c6:f9:27:b9:86:3d:91:80:
                    1c:9f:23:2c:aa:3b:d2:27:55:f5:bc:f9:03:4f:62:
                    f6:3f:55:f2:88:bf:ff:f6:b2:38:18:9a:3c:5a:5f:
                    e5:61:bb:b4:be:d0:14:c7:29:06:9a:02:3b:b8:85:
                    1b:05:0e:69:ba:20:cf:37:35:7b:d7:b2:38:fa:e3:
                    b1:27:9f:b7:73:0e:36:3f:5d:ed:d2:54:2a:f6:d1:
                    89:51:ec:ed:72:ee:ed:a7:f6:86:8e:e5:6e:7d:ff:
                    f6:ca:d9:45:3d:68:60:6f:72:70:51:99:99:52:b0:
                    14:ed:45:4a:19:4e:c1:16:79:17:7c:0f:cd:ff:9a:
                    2c:41:77:a2:a4:7e:b0:3b:73:b5:36:df:66:f7:97:
                    c2:7b:7c:1c:ae:df:58:61:e4:30:6e:1d:99:36:45:
                    f4:6a:8d:3a:83:ed:d2:76:02:40:36:8d:ba:65:76:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:6D:06:C5:4F:55:BF:30:77:A7:E3:E6:22:CD:A9:E3:CA:BF:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/838d7a4980d338c0fda0998cecd06d6224ebf6b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.140.0/22
                IPv6:
                  2803:f3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270077

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:a1:6c:30:c4:74:38:99:16:3a:2a:b6:e9:1b:a7:50:2f:
         bb:92:a6:97:f0:2f:52:e5:54:f7:98:e0:ee:61:ad:89:22:4e:
         30:24:0a:49:97:31:94:18:d9:fb:ea:73:a6:bd:1f:bb:fd:a1:
         cd:bf:1f:c5:e3:84:91:26:89:9b:1c:64:58:ff:0c:12:6b:1c:
         9e:a6:b9:b0:f2:ca:94:7c:b2:bb:98:1c:04:80:cb:fe:f3:6c:
         a9:71:cd:03:0e:86:c7:9a:35:43:f3:4b:2a:8c:54:f2:16:bb:
         11:19:d4:ef:37:d0:ef:d7:af:70:e8:3d:e1:62:61:ef:40:65:
         c4:01:57:94:3f:9c:6a:4b:04:cb:dd:60:4e:14:e8:69:1b:3e:
         20:f4:45:4c:3e:fc:79:88:0d:78:71:17:d5:09:fc:c3:1e:82:
         b9:8a:46:d2:fe:71:6f:55:8b:a4:b5:7d:df:ec:91:cd:ab:eb:
         86:11:c0:fd:55:07:3c:91:86:bd:0e:76:ce:c8:8d:e5:e1:e2:
         a9:f7:d6:65:71:51:dd:1d:f4:90:d5:db:2a:11:0f:de:aa:16:
         5c:b4:da:1d:38:50:b3:72:9b:5a:b3:d9:5e:ae:ee:51:ca:c3:
         cb:5d:7d:ff:a4:50:63:5a:49:45:10:c6:2b:e9:bd:a9:52:4a:
         71:f6:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----