Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer
File:                     a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer (raw, json)
Hash identifier:          GQmia5+JDgfAtpT18D8iBGyHH56LGc4G801k4Auw/fE=
Subject key identifier:   8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFAE06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Jan 2022 12:15:08 +0000
Certificate not after:    Tue 26 Mar 2024 22:37:21 +0000
Subordinate resources:    IP: 138.118.208.0/22
                          IP: 2803:8440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14659078 (0xdfae06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 26 12:15:08 2022 GMT
            Not After : Mar 26 22:37:21 2024 GMT
        Subject: CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:f1:87:57:4d:18:c8:c0:ff:9c:93:ef:ad:
                    d0:f4:5a:4c:b8:f6:65:61:9b:4a:8f:76:47:39:05:
                    61:26:2d:19:c4:73:ca:c2:39:3e:c7:1d:d6:07:dd:
                    3b:8b:fc:67:72:3a:a0:93:ae:d3:78:f0:81:ff:6a:
                    04:99:db:d0:f1:ac:84:ac:b2:ce:fc:68:df:90:af:
                    9a:7a:fb:7e:46:4d:d7:67:bf:f9:94:fd:8e:fe:42:
                    2a:4e:bb:0f:ce:f8:22:66:af:b3:df:11:c5:6d:1d:
                    19:6c:73:b5:94:08:17:3a:c2:f9:d2:11:92:86:0b:
                    c3:5b:e6:3f:e2:a9:98:d0:27:c0:be:d7:a3:1b:c9:
                    f5:41:33:19:c2:ae:09:a6:c1:af:9c:4e:d0:fa:0a:
                    8a:05:83:42:23:f7:9f:18:f9:98:28:52:aa:78:7c:
                    d9:9f:04:cd:83:63:25:27:38:67:0a:44:b4:8f:10:
                    6e:74:18:07:be:98:94:37:d9:73:4b:c8:f5:f6:bd:
                    9d:82:ce:b3:ac:a1:2f:9b:70:3b:70:34:e9:87:be:
                    29:e6:e7:13:e2:0e:06:23:84:fc:a8:7e:08:a8:03:
                    69:57:e9:4a:9b:2e:31:1b:63:1d:57:08:31:e4:df:
                    49:0e:64:9d:12:c2:03:e3:b7:53:ba:55:3b:36:9e:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.208.0/22
                IPv6:
                  2803:8440::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:20:ca:62:34:7f:d8:48:45:32:57:72:67:d1:16:0d:58:
         3f:16:07:aa:1d:05:68:25:98:29:b3:3e:75:a8:4e:e0:35:b7:
         d2:c4:b3:8e:04:fb:d1:e1:fc:80:d8:d5:4c:e9:62:37:4b:35:
         8f:95:da:1e:5d:40:58:c5:47:03:f0:78:16:61:8d:e4:28:b8:
         42:52:f7:f4:eb:c7:57:d6:4d:ef:c8:54:11:c6:4f:55:13:86:
         53:8d:80:09:41:fe:9c:0e:9e:97:0e:7e:5e:2b:0f:42:ed:d5:
         57:1e:5d:93:dc:3a:6a:96:ff:78:fa:3e:a2:49:73:96:ac:c3:
         be:8a:80:2f:86:3d:0f:21:82:ce:c6:80:75:60:a2:80:3c:be:
         89:04:3d:94:35:e3:26:0f:2c:5a:61:01:8f:90:ac:1d:1e:fa:
         1d:0f:aa:e5:78:a3:3c:8a:ee:de:61:ec:a6:e6:c1:5a:c0:a9:
         41:82:e0:e8:ce:84:34:fc:05:7e:1c:4c:57:07:a2:af:8d:9e:
         3f:23:e5:4d:2b:2e:9f:3e:2c:fa:35:86:3c:72:4e:60:c7:9c:
         b2:07:dc:12:d1:9d:89:70:99:f9:1c:15:2d:3d:15:99:e6:cd:
         97:19:d1:9e:03:86:ee:63:39:35:7e:d8:8b:f2:bb:9d:1f:93:
         f0:05:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----