Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer
File:                     8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer (raw, json)
Hash identifier:          eEJH/xZd2u6J9mhzNWLkqJdj3qh17FLHrQHydpMVxjE=
Subject key identifier:   B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F662C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Nov 2021 18:54:03 +0000
Certificate not after:    Tue 24 Sep 2024 03:46:45 +0000
Subordinate resources:    IP: 45.167.12.0/22
                          IP: 2806:311::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16147136 (0xf662c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 18:54:03 2021 GMT
            Not After : Sep 24 03:46:45 2024 GMT
        Subject: CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:7c:77:9e:b0:0d:89:ab:1c:d5:a0:0d:69:
                    3d:1d:0e:92:6f:01:7a:8e:8e:d2:c4:67:7e:bc:63:
                    96:9c:94:ba:06:48:de:a0:8d:c3:1e:d7:6f:dc:60:
                    af:49:37:f1:63:5e:43:3d:ad:c1:bb:37:c4:b1:24:
                    40:2d:a7:54:81:00:52:7d:5a:bb:63:7a:c9:3d:9d:
                    25:8f:e5:28:93:b5:26:47:69:8b:85:08:23:b6:e6:
                    a9:de:d3:77:09:d1:41:20:9d:cb:36:50:f8:15:5c:
                    5f:50:da:ce:7f:f5:e9:86:55:63:e2:c8:01:5e:c1:
                    a3:96:30:58:47:96:a0:d3:4a:36:f1:62:31:e3:e7:
                    a3:d1:2e:35:bb:b8:14:df:1d:55:a6:d8:c8:33:40:
                    55:fe:fe:65:7d:7a:57:42:4e:18:35:45:a9:c1:e4:
                    21:83:91:8e:e8:27:48:f5:90:49:56:b7:0d:06:64:
                    c8:e3:f4:e7:d2:6d:4a:6c:82:a5:ba:e4:e0:8b:5d:
                    2e:5b:6c:06:fe:26:c9:f4:b6:ef:07:d8:f6:f6:95:
                    00:0e:c1:80:23:33:72:e1:4a:88:72:f1:b9:46:bf:
                    6c:b9:3f:40:7b:cf:f0:47:9c:c7:6c:73:85:54:1f:
                    d9:55:00:8a:e5:7d:c7:72:c6:fb:d3:40:41:49:0b:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22
                IPv6:
                  2806:311::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:65:c6:96:c6:de:be:52:b8:1e:67:b8:c1:3e:0b:71:8d:
         9f:1f:47:c1:65:0e:6c:b7:51:a6:37:bb:6d:7f:a5:6a:80:35:
         d7:22:a8:99:1b:1e:16:4f:90:64:fa:8c:3b:e4:8e:88:04:e9:
         9e:a2:86:f0:b6:0e:72:d7:bf:e1:e1:5e:b7:1c:3d:46:13:75:
         1d:75:ce:da:45:0e:d4:69:b8:a8:cc:45:81:f2:ff:a2:96:4c:
         70:d9:04:6e:bb:6b:c6:6c:fc:51:5b:fa:94:4e:03:98:ce:84:
         02:d1:8e:7d:85:ab:10:95:39:9c:12:75:47:80:17:4a:93:51:
         56:da:ff:ab:84:ff:52:c3:f1:d9:2c:7c:bb:91:43:06:31:34:
         c1:97:29:88:a4:a2:6a:8a:f9:97:4b:d8:6f:e8:38:8d:9c:14:
         6d:a4:a1:3a:68:15:4f:53:00:fb:a2:b8:d8:fc:ca:e8:64:f2:
         22:a4:4d:1b:90:7f:1c:da:ad:ae:6f:25:ff:27:5d:81:eb:a0:
         d6:5e:42:bc:bb:9c:89:e6:33:06:81:3a:72:64:86:6c:cc:b8:
         da:c6:53:35:2b:ac:0d:3c:98:a2:f8:2e:2f:83:12:e4:a0:99:
         90:c7:65:f6:3e:91:a8:14:df:6f:0d:18:c7:c9:c6:97:c8:78:
         b1:74:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----