Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/933af235d3ec03eec46207e7f02d5cecdabbf546.cer
File:                     933af235d3ec03eec46207e7f02d5cecdabbf546.cer (raw, json)
Hash identifier:          8XaP1+xYv0nCjXsM5jwmIFfWjy7DFeQz5AEwuSCLIG8=
Subject key identifier:   B5:0E:2F:0B:7F:F1:C8:9E:08:55:D6:C8:42:B8:F8:BF:C2:33:FE:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1B7E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ae709f3d-b4b4-47b8-89d9-57c4454f02ab/933af235d3ec03eec46207e7f02d5cecdabbf546.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ae709f3d-b4b4-47b8-89d9-57c4454f02ab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Sep 2021 13:16:12 +0000
Certificate not after:    Tue 13 Aug 2024 17:41:57 +0000
Subordinate resources:    AS: 52296
                          IP: 200.13.44.0/22
                          IP: 2803:3460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15841255 (0xf1b7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 13:16:12 2021 GMT
            Not After : Aug 13 17:41:57 2024 GMT
        Subject: CN=933af235d3ec03eec46207e7f02d5cecdabbf546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:59:14:18:a9:7e:9a:b1:38:2e:41:0c:d1:
                    45:e3:96:ca:e6:f8:2b:23:7e:9e:15:8e:15:fb:18:
                    57:cb:4b:8d:8f:a6:da:87:33:44:a4:8d:6c:11:2c:
                    f5:12:8f:88:63:57:9e:e9:6b:7d:24:29:6b:15:0c:
                    f7:8c:ec:a1:b1:2e:b5:c2:da:e3:75:86:ea:82:5e:
                    29:67:1c:86:52:2f:31:76:8d:08:16:56:39:bf:b9:
                    8f:0d:55:a6:00:b5:5f:08:97:fe:9a:68:96:d0:f2:
                    65:8f:ab:c2:cf:68:43:b3:36:95:cb:0d:56:6b:9c:
                    26:61:5a:f2:0a:dd:29:20:93:43:58:ac:be:44:b8:
                    7c:0a:fa:a8:e6:ac:fb:1d:7d:c3:70:50:28:53:df:
                    15:4f:0b:fe:b2:ea:31:24:71:1f:59:7e:bd:2a:b6:
                    d2:9e:ad:ee:47:7e:24:1e:8a:f4:5f:7c:7e:b4:d6:
                    5c:cf:89:79:78:eb:55:a3:58:20:c5:82:1b:73:f7:
                    6c:3d:ea:bb:83:87:3e:35:b8:98:99:52:95:57:38:
                    33:5a:04:84:22:c8:f2:99:7a:0b:18:fb:b1:3b:ea:
                    b6:4c:4d:51:4c:75:13:f4:d8:e5:94:a7:00:b2:d1:
                    d0:36:17:3c:36:11:e1:48:f8:3a:57:b8:11:26:4e:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0E:2F:0B:7F:F1:C8:9E:08:55:D6:C8:42:B8:F8:BF:C2:33:FE:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ae709f3d-b4b4-47b8-89d9-57c4454f02ab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ae709f3d-b4b4-47b8-89d9-57c4454f02ab/933af235d3ec03eec46207e7f02d5cecdabbf546.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.44.0/22
                IPv6:
                  2803:3460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52296

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:9f:3e:30:58:b7:cd:6b:e5:7c:46:0f:7b:ed:d2:8c:39:
         df:ef:6d:cc:c4:55:18:27:6f:44:74:f7:95:d9:8b:2a:64:b8:
         2c:0f:ca:8b:a5:ec:ba:db:80:49:5c:2f:aa:7e:48:86:b8:90:
         f5:59:fc:a2:ca:06:70:b7:51:61:07:b8:ef:2f:9d:59:9d:07:
         2c:45:28:5f:49:e8:4a:1f:f7:aa:bb:b1:e0:38:20:96:83:ef:
         4c:94:be:20:e7:6d:1d:fe:dc:9a:fb:b5:a3:a3:8e:4f:06:de:
         9f:b6:a7:a4:ea:64:71:f3:ee:0e:41:a2:09:a8:c0:6c:fa:14:
         96:12:43:30:67:d0:09:61:d5:87:a5:d9:b6:74:42:ae:55:e6:
         4e:fa:1a:09:ce:7c:e1:85:1d:e8:7a:4e:99:45:9f:1f:4c:a1:
         cc:91:46:48:d3:dd:da:d9:51:31:45:65:81:57:fd:fe:d8:c8:
         e7:94:de:9a:7f:83:77:d7:f1:ed:be:1a:91:3b:b6:66:8e:92:
         bb:2a:ab:a5:a3:82:49:e9:e0:24:1b:cb:c7:2a:3f:6f:66:18:
         ce:ca:eb:09:15:2c:13:6d:a8:07:20:65:0a:fc:2c:4b:fe:be:
         77:66:38:db:66:5f:29:67:48:e2:c9:69:b0:6d:01:60:1c:d4:
         e2:ca:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----