Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/997d13ec4a0ba912be13c21e8b300d59802938d4.cer
File:                     997d13ec4a0ba912be13c21e8b300d59802938d4.cer (raw, json)
Hash identifier:          9BcktWhZUaX1tp/EooyjGSKaezzUqFIFub1HpBUZVO8=
Subject key identifier:   B4:3B:03:63:60:EA:BC:A0:CD:5E:70:34:80:A2:0D:0A:BE:A4:8A:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBA68A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/997d13ec4a0ba912be13c21e8b300d59802938d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2020 18:14:46 +0000
Certificate not after:    Sat 02 Nov 2024 14:48:25 +0000
Subordinate resources:    IP: 45.191.48.0/22
                          IP: 2803:4e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16492170 (0xfba68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  7 18:14:46 2020 GMT
            Not After : Nov  2 14:48:25 2024 GMT
        Subject: CN=997d13ec4a0ba912be13c21e8b300d59802938d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:85:b8:e3:43:4d:02:f4:90:df:d9:34:dc:
                    7b:54:09:31:a9:1c:76:79:1d:e3:0f:22:43:d6:84:
                    96:93:86:f1:27:45:ed:39:76:0b:90:0b:3a:24:b1:
                    2f:71:ea:83:5e:c2:af:1d:d6:eb:ce:c6:58:c2:7b:
                    a3:b3:0d:ac:29:9b:51:01:78:51:02:c0:3e:1d:29:
                    38:0b:3f:23:55:80:6b:ca:ee:dd:77:2b:7a:2b:36:
                    e6:02:81:4f:db:7d:04:31:09:f3:46:69:4a:76:2a:
                    ed:0e:c3:23:ab:47:47:95:4c:b7:ba:49:90:ea:f7:
                    b7:07:37:74:16:bf:14:53:67:3c:72:f0:39:b5:1f:
                    73:82:b1:75:31:7a:86:98:b7:82:01:73:0d:40:b3:
                    54:a7:bc:44:d1:49:2a:bb:5e:ee:60:dd:50:94:3a:
                    4f:d0:0e:fe:90:0f:12:87:36:2b:27:1f:f0:a6:65:
                    35:17:51:f0:e5:73:9e:d6:9a:77:76:fe:e6:e1:8a:
                    f3:c6:87:ae:e5:e1:e8:86:e7:cd:9b:10:c2:4d:50:
                    2a:b9:44:46:ea:fd:68:41:e0:70:0b:0a:e9:c0:95:
                    0c:32:4d:c4:d0:b6:f7:41:ff:ea:70:a4:04:aa:d8:
                    8d:4d:87:37:b1:90:d4:61:ab:9b:aa:50:2e:1e:24:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:03:63:60:EA:BC:A0:CD:5E:70:34:80:A2:0D:0A:BE:A4:8A:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/997d13ec4a0ba912be13c21e8b300d59802938d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.48.0/22
                IPv6:
                  2803:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:9b:a6:6e:42:14:d6:56:26:a8:a8:df:4e:f8:61:50:47:b6:
         ea:71:d1:a3:4b:c1:dc:ae:17:d8:a8:e3:8a:81:4c:37:a6:db:
         ef:32:3b:36:10:f6:46:08:61:ba:fe:07:a0:ff:bf:fc:c6:a7:
         fd:36:55:2e:48:99:5d:4a:45:3e:ef:a5:d1:aa:43:2b:17:16:
         58:b1:af:8f:5f:df:a4:e0:2d:55:5a:30:96:ed:67:d5:04:54:
         09:92:18:50:bb:0c:0e:cf:04:f4:bf:30:78:c7:f6:79:c3:f8:
         32:95:cb:95:c7:46:b5:a3:67:97:fb:aa:b3:75:d0:91:7b:30:
         73:ff:18:26:b6:e2:63:33:c4:0b:e1:80:9f:3e:53:55:1f:8d:
         d3:4c:b2:f1:c3:40:f4:1b:d3:96:2e:81:21:d8:e7:4c:9e:9f:
         eb:05:7c:0b:86:43:e2:cb:e9:f0:b3:6e:51:15:73:b4:33:bf:
         0e:b3:51:e5:2c:65:bf:61:5a:89:0c:24:2d:f2:70:7b:02:40:
         96:7a:d2:cc:15:fc:0c:38:d4:ae:3e:6f:dc:b2:19:ca:66:22:
         e9:54:2d:00:36:17:3f:86:a9:6c:92:54:5f:1c:47:7b:f2:7b:
         87:17:87:5b:1d:ef:82:1e:46:29:c0:7f:bf:73:e5:f4:24:2b:
         a4:7e:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----