Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer
File:                     965400f367a3b50c2a9a6934837510a29a8a229f.cer (raw, json)
Hash identifier:          fleQDJ9Zycrx8c+jopV1UgFZEIfjYhNBkwbYWaZkXfQ=
Subject key identifier:   A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD066D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Nov 2021 11:06:53 +0000
Certificate not after:    Sat 24 Feb 2024 21:12:09 +0000
Subordinate resources:    IP: 138.99.208.0/22
                          IP: 2803:2840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14485101 (0xdd066d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 11:06:53 2021 GMT
            Not After : Feb 24 21:12:09 2024 GMT
        Subject: CN=965400f367a3b50c2a9a6934837510a29a8a229f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:13:85:88:46:b7:b0:5f:b4:ee:8c:52:08:
                    42:8f:f1:c2:80:09:ac:33:ae:08:a6:a9:d9:fd:77:
                    1f:b5:90:3e:ab:0f:75:c5:30:80:ea:64:67:db:b2:
                    97:58:a3:86:ca:a7:88:8c:18:97:d7:51:73:23:25:
                    d2:96:d6:22:74:92:a2:33:b3:f9:73:c3:c5:71:7e:
                    b3:6b:84:e9:72:db:04:ec:cd:7f:04:72:50:ba:18:
                    1d:8b:3f:a0:9e:ba:40:4c:34:2c:cb:7c:39:1d:95:
                    00:e5:a0:47:88:81:a7:47:9f:9a:e0:43:1d:33:43:
                    d8:a5:30:b0:42:17:57:04:ed:09:22:9c:8d:11:87:
                    29:45:37:8c:2f:b7:9c:10:b1:4f:d4:a8:d8:17:9f:
                    86:32:32:09:50:57:f2:05:11:89:59:54:a2:05:c9:
                    f5:90:7d:1b:8e:fb:7a:c1:93:d4:f6:04:88:5c:73:
                    63:0d:4f:e0:4c:fc:67:4e:db:86:e5:0f:24:8d:99:
                    70:28:1d:ed:ff:9d:3d:aa:f8:60:e4:9e:a7:9a:82:
                    c5:95:87:6b:5c:0f:fe:0d:d6:f9:36:cf:e8:57:84:
                    81:a2:71:7a:d4:b7:e6:97:cb:17:9d:3d:c2:ea:7d:
                    bd:1a:6f:72:f4:80:e5:82:39:29:e9:67:c1:c1:d9:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.208.0/22
                IPv6:
                  2803:2840::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:20:21:62:54:c1:10:a4:ee:85:b8:bf:f8:56:4b:19:f0:21:
         25:e6:eb:16:63:dd:2e:9b:37:33:40:d0:27:c2:f2:a3:e7:57:
         52:c6:fc:6f:77:87:ee:94:1d:43:81:cd:61:b9:de:e8:dd:ca:
         0c:7f:c1:b8:a7:a6:50:e3:75:e0:cc:6e:9a:f0:5d:90:4b:be:
         4c:00:f2:5b:c4:5b:8d:80:89:66:59:d5:d5:ce:02:f6:a0:31:
         06:c7:2b:ea:f5:da:5a:55:77:6f:45:a7:47:8c:83:72:74:91:
         e1:39:1d:db:a5:e1:e8:c9:f6:91:06:f5:df:0c:64:69:00:47:
         f3:ee:59:58:4a:aa:38:9e:c5:5b:a3:4a:26:b7:ce:8b:6d:c8:
         81:c1:82:5e:b6:fe:65:7e:9f:86:1b:4d:e3:72:fc:d5:c4:fd:
         ff:4d:cd:f8:9a:71:6a:87:48:6d:41:90:48:44:81:33:a9:c0:
         fa:20:6b:1e:23:71:b0:6f:5c:3d:44:bc:57:2b:a9:53:31:c7:
         d0:11:9a:f6:6e:c8:49:f5:d2:96:97:59:4f:a5:a7:18:b7:0b:
         5d:6d:61:aa:4c:64:28:f2:5a:bc:00:08:65:16:24:20:21:39:
         b0:05:74:e5:03:dc:54:a2:05:71:f3:e5:0e:ba:78:9a:74:e0:
         92:a8:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----