Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fafcd42979e43384ea333a5d7e481a822fedbfe.cer
File:                     8fafcd42979e43384ea333a5d7e481a822fedbfe.cer (raw, json)
Hash identifier:          XNHMA6AIMBd+tl5/ZySIrXphBqFdcbFN1x+oXfXQYr8=
Subject key identifier:   6C:E2:BA:B1:04:AD:D7:0C:C2:2C:DD:94:81:37:E0:1E:0C:82:F4:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C046A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6f283e0c-3fec-4011-8b09-1df48afdeec9/8fafcd42979e43384ea333a5d7e481a822fedbfe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6f283e0c-3fec-4011-8b09-1df48afdeec9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 14 Feb 2022 16:17:17 +0000
Certificate not after:    Tue 21 Nov 2023 21:45:01 +0000
Subordinate resources:    AS: 272059
                          IP: 181.174.224.0/22
                          IP: 2803:8310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12600995 (0xc046a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 16:17:17 2022 GMT
            Not After : Nov 21 21:45:01 2023 GMT
        Subject: CN=8fafcd42979e43384ea333a5d7e481a822fedbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:3f:c2:a3:73:c5:3c:67:6c:b2:ab:5e:24:
                    a8:70:0b:b4:7a:b4:86:01:7e:40:1b:78:92:bd:06:
                    5b:14:4b:e5:3e:85:72:87:16:ac:15:5b:6a:fb:4d:
                    12:31:6c:01:e9:d1:bd:ed:da:f9:64:3e:6a:65:29:
                    be:68:45:be:73:3d:98:0b:2d:18:a5:14:41:c1:ec:
                    59:69:0e:53:ac:38:61:cb:2c:e2:f6:e5:05:df:60:
                    32:c4:98:8e:38:67:91:8a:43:fc:50:80:a6:c2:65:
                    c4:88:90:f1:bc:c3:76:12:f9:4c:ab:b0:4b:9d:bb:
                    a4:05:c2:e8:50:b9:79:29:28:e3:3d:d1:56:97:cc:
                    ba:70:2e:97:25:1c:6a:2d:83:0b:58:a2:6a:ea:d7:
                    8a:ca:9d:e9:6e:ab:f7:5e:de:be:53:5f:86:25:12:
                    74:47:53:aa:64:6f:81:d1:ed:ef:b3:a9:bc:04:3a:
                    b2:8f:f1:b6:b0:18:ee:fa:3e:c1:00:fb:09:66:b0:
                    d1:05:0b:ae:1b:80:fa:b2:fe:55:c1:66:8b:d4:2a:
                    f4:dd:57:fe:58:9c:55:c5:8c:96:46:82:98:d4:8a:
                    e3:95:53:02:b2:5b:bf:b2:dc:99:0c:cf:97:cc:48:
                    d0:21:17:13:0b:86:83:f1:9b:34:56:af:cc:6f:15:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:BA:B1:04:AD:D7:0C:C2:2C:DD:94:81:37:E0:1E:0C:82:F4:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6f283e0c-3fec-4011-8b09-1df48afdeec9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6f283e0c-3fec-4011-8b09-1df48afdeec9/8fafcd42979e43384ea333a5d7e481a822fedbfe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.224.0/22
                IPv6:
                  2803:8310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272059

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:31:96:77:8e:50:19:ce:fa:63:45:7e:45:49:0e:6b:21:
         fb:f5:a3:76:d8:fe:79:47:a1:8f:bd:32:f3:b1:1b:23:ed:d1:
         28:6a:c7:b5:4e:39:b8:7c:e3:ff:17:b1:ae:86:41:f7:0a:d6:
         24:bd:9e:e1:ec:95:e9:3d:8f:73:2c:81:5e:d5:41:04:c0:d6:
         21:e9:ef:35:35:8a:b0:93:53:d7:93:28:d9:c8:a5:5b:8d:c7:
         ff:7d:a3:4c:dc:28:fc:0a:4f:52:a4:a5:e0:b2:72:ea:33:c7:
         ff:2b:ad:d0:79:be:dd:c5:b0:86:8e:5c:f0:6c:4c:68:08:fa:
         39:80:37:2d:e2:a1:4f:86:5d:c5:1f:1c:6c:e6:9d:5b:40:cb:
         1b:09:fc:3f:8f:6a:b5:9c:e9:d8:80:1d:42:fb:20:1a:95:25:
         77:fd:34:b4:d8:18:9c:9a:61:87:64:f1:ec:55:f0:ec:ab:11:
         64:97:f7:f8:0d:85:8a:a4:fe:5b:61:8f:97:80:b5:5f:24:a7:
         8b:a1:c2:a6:f4:0b:5d:78:69:cc:7b:0b:ee:6b:6e:24:97:05:
         13:11:f4:11:8f:09:48:7a:fe:be:41:9c:41:43:52:19:59:ce:
         91:8c:af:4f:cf:7a:7c:6c:cf:d2:10:cf:12:52:8d:80:d4:6b:
         67:ac:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----