Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
File:                     981ee37ee8c6770b167c2590f30297cb10005f16.cer (raw, json)
Hash identifier:          Xlj1HaqbMM5ZVtvDrgrp27d3xU8Indiwevydl9XNnFQ=
Subject key identifier:   64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA83CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Feb 2021 16:15:08 +0000
Certificate not after:    Fri 26 Jan 2024 15:12:40 +0000
Subordinate resources:    IP: 45.173.4.0/22
                          IP: 2803:2060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14320586 (0xda83ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 16:15:08 2021 GMT
            Not After : Jan 26 15:12:40 2024 GMT
        Subject: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:5d:73:a7:82:20:3a:bf:52:ba:db:71:e4:
                    30:27:f1:ea:64:b2:42:a4:ff:da:95:8a:49:89:7f:
                    d4:0b:6a:94:39:00:0a:af:4f:d8:7b:b1:60:08:89:
                    e0:a2:68:d4:88:17:f6:82:1e:93:c1:ac:74:47:00:
                    02:10:9f:f7:f6:26:49:cd:5c:17:13:78:37:34:bc:
                    c1:48:ff:f6:30:f5:07:44:59:dc:ab:7b:de:c8:22:
                    8f:aa:ed:c6:43:3e:85:ff:43:a1:c6:d1:9b:a1:6f:
                    e9:bf:ff:3e:b2:6f:e9:d9:67:39:5e:b2:9c:94:6c:
                    b6:cf:be:52:a0:d1:3d:60:f2:88:13:97:16:48:e9:
                    f9:a1:bd:2d:15:6c:f0:3c:43:90:57:d6:bd:45:95:
                    e2:47:07:94:60:c7:f3:57:a9:04:18:66:60:17:84:
                    e0:11:fc:57:d1:f0:fb:d8:47:27:96:28:38:08:4f:
                    93:80:e7:15:e0:9d:aa:d6:a9:ae:85:1a:8e:44:43:
                    ff:e7:dd:ac:63:e6:fc:c7:28:ca:08:0d:02:8f:6b:
                    be:35:10:17:c3:69:1b:09:6d:11:de:cd:35:90:6b:
                    41:35:ff:12:0e:51:1d:70:7d:c6:37:dc:3d:9d:d6:
                    e5:48:e8:01:4e:f2:59:08:9d:b2:b3:ea:4d:15:a7:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/22
                IPv6:
                  2803:2060::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:89:02:54:21:0b:75:fa:aa:df:fe:14:84:e2:86:d0:b5:02:
         f5:e0:23:15:ed:17:e9:e0:e7:09:e2:1f:0e:b5:99:f9:a4:b3:
         c7:ba:9a:1e:cc:5b:af:56:37:12:d7:db:03:50:2c:af:83:17:
         c0:cd:fb:f1:98:b3:1b:d4:68:e7:24:a5:ab:4f:f3:f7:41:2b:
         0f:05:fe:21:e5:33:a5:2d:2c:25:8a:06:0a:90:5f:39:fc:80:
         13:9f:ad:c6:1a:fe:14:e2:35:05:c1:0f:ec:60:88:d1:54:cb:
         8c:e4:b8:24:06:b6:69:7e:37:a9:e1:c4:f9:1c:3b:b3:07:3a:
         05:78:0e:5f:ef:39:40:09:4b:e7:49:9e:00:e3:e2:a0:77:36:
         e5:18:61:e4:f9:e5:37:0b:67:47:9a:ad:b5:2d:ba:cb:b8:31:
         e6:80:91:2b:fc:b8:8d:79:c6:d7:08:c8:80:b2:1b:e7:fc:e6:
         82:c8:c1:19:0f:8e:88:4c:65:69:a8:a3:84:da:3a:74:3f:0f:
         aa:87:0c:d4:ac:26:14:ad:98:4b:01:1e:35:76:0f:26:91:18:
         a4:c2:97:01:dc:ca:fc:f6:cf:40:c9:57:60:6e:73:63:24:79:
         db:cb:0a:0e:81:96:d5:19:c4:4b:ab:24:4d:f7:52:52:a0:75:
         5a:3f:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----