Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.cer
File:                     9c368afe09296bcb4b3b2e5244ed71e85b0700e5.cer (raw, json)
Hash identifier:          qEvA8Oe9ef14BO1biy4s6OOsPlikGqskQ3RdLPNP05M=
Subject key identifier:   4D:71:31:8E:AA:E7:BF:B3:9D:B3:21:55:AD:B0:7B:16:2F:63:10:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E196A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 15 Dec 2021 20:38:49 +0000
Certificate not after:    Mon 15 Apr 2024 18:21:19 +0000
Subordinate resources:    IP: 190.8.164.0/22
                          IP: 190.120.248.0/21
                          IP: 2803:3900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14784164 (0xe196a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 15 20:38:49 2021 GMT
            Not After : Apr 15 18:21:19 2024 GMT
        Subject: CN=9c368afe09296bcb4b3b2e5244ed71e85b0700e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:cf:4d:bd:cd:e3:3b:a9:68:d7:bb:67:91:
                    87:05:1e:38:52:0b:50:3a:d0:ed:1d:a7:68:a0:22:
                    71:5f:af:37:0c:b3:b1:ee:c0:24:bb:8c:ab:cd:f4:
                    4a:a8:ec:20:c4:fa:14:40:93:69:a9:b1:1d:5c:98:
                    94:e4:fd:3b:10:7a:46:6d:db:06:71:ad:3c:e5:d8:
                    35:34:c6:c6:76:39:75:a9:b8:6a:f7:d8:b3:82:ec:
                    dc:fd:53:9b:18:3a:e0:30:90:0e:88:9c:9f:f3:dd:
                    6f:46:2e:c6:b7:2c:12:2c:78:85:a0:f2:a0:c2:5d:
                    fd:05:2e:e2:9e:45:97:5a:4f:ee:3a:b6:c9:0b:54:
                    6a:ed:90:02:b3:16:2c:32:82:e7:6b:16:15:81:85:
                    4f:90:93:b7:f5:99:ed:b6:74:4c:67:51:79:8d:68:
                    10:db:39:60:2d:0a:be:14:95:5f:62:8f:10:e2:59:
                    60:54:14:13:cb:9c:a6:3f:a0:de:6c:30:cb:05:b0:
                    70:3b:e6:5d:28:4b:aa:44:66:42:a9:91:50:49:a7:
                    7e:32:34:ab:06:f0:f1:4a:8b:6e:93:81:d4:18:a3:
                    32:55:2a:3c:48:81:ed:24:f1:2b:98:37:00:52:71:
                    04:cf:c9:33:a6:e4:7d:df:47:f8:bf:25:54:0b:ac:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:71:31:8E:AA:E7:BF:B3:9D:B3:21:55:AD:B0:7B:16:2F:63:10:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.164.0/22
                  190.120.248.0/21
                IPv6:
                  2803:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:18:b8:1d:f9:b3:8a:3e:65:c7:cb:88:b1:e8:4f:5b:80:0e:
         63:78:ab:d4:1f:40:50:9a:82:c5:73:2c:86:67:5d:52:f5:29:
         eb:8a:64:d9:94:2a:b2:35:a3:a8:f7:80:48:40:bc:7d:b4:1d:
         fd:3f:62:cc:4a:27:3f:3b:0f:1c:d5:5b:79:0a:c4:1b:b4:cf:
         d6:de:d9:93:c5:ae:ef:56:f2:ad:a4:77:c3:a5:e6:cd:be:82:
         fa:d7:ea:c0:f6:ec:07:70:7c:44:71:a7:22:72:d5:58:95:24:
         5e:a5:9b:cf:cf:dd:30:69:1a:3d:5c:27:f0:de:28:84:d4:11:
         a0:ed:62:d6:c6:67:71:61:ea:29:77:a3:78:06:74:5c:2b:16:
         5f:a7:51:d7:15:41:55:27:c2:69:71:8d:33:2e:15:4d:27:8f:
         e9:f7:60:43:a9:a9:0b:13:f3:19:a7:5b:3d:6a:ea:d3:64:6d:
         c6:93:4d:5f:47:43:67:db:0b:97:b4:a0:fb:32:f2:50:91:c3:
         8b:cc:94:56:06:a0:71:90:1d:d8:f5:b9:e5:65:94:c9:3e:57:
         c9:45:07:d5:d8:2e:c5:07:5e:19:06:87:59:bb:4c:72:c2:ab:
         0c:b3:49:42:50:0f:48:d1:4d:5a:04:ee:39:b1:4d:18:8b:41:
         15:e2:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----