Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.cer
File:                     a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.cer (raw, json)
Hash identifier:          KdwSgGxPrmP2ffPpgzSBWFsgAscWH1Z0qP8KaQFYSbk=
Subject key identifier:   C6:B0:16:87:4F:9F:72:2B:5D:95:07:39:75:8C:7A:D7:38:13:C6:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3401B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Nov 2021 15:07:49 +0000
Certificate not after:    Thu 29 Aug 2024 14:44:06 +0000
Subordinate resources:    IP: 2801:121::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15941659 (0xf3401b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 15:07:49 2021 GMT
            Not After : Aug 29 14:44:06 2024 GMT
        Subject: CN=a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:fe:f5:2c:b5:11:c8:2c:a3:ac:de:06:2f:
                    b7:86:52:42:70:53:48:c2:41:a6:66:b4:ce:09:37:
                    de:a3:6c:41:cb:c8:88:b9:36:e6:d9:fb:88:9b:d3:
                    5a:56:c7:8b:71:ac:63:a1:aa:66:c7:66:04:d6:59:
                    2e:e0:40:30:9f:de:a0:eb:28:08:e3:34:c6:26:47:
                    bd:68:cf:25:7d:2c:08:53:6a:79:66:63:e7:ba:9c:
                    21:4a:ce:e9:da:d8:31:5c:67:13:c5:f3:36:d6:de:
                    54:98:0e:1d:cf:17:30:d8:b8:8c:af:3e:d1:30:3c:
                    67:7a:61:f9:b4:b6:80:ba:c7:0e:86:99:3d:9e:b7:
                    75:1e:da:cd:74:40:af:8d:9f:0b:17:11:17:f4:2a:
                    e4:31:79:7f:d0:45:d8:18:22:97:9b:75:66:ed:52:
                    e6:05:6a:9f:0c:b0:47:31:58:fd:25:92:d8:7d:bd:
                    38:52:87:f6:87:8a:85:1b:43:5e:f2:a1:47:c5:50:
                    e1:f9:28:97:d2:25:35:3c:c0:ec:eb:50:6d:81:ac:
                    25:05:14:10:06:f6:32:d4:c8:58:d4:ae:de:91:e0:
                    63:50:41:4d:42:c6:34:0d:24:10:e1:de:86:21:f7:
                    82:91:eb:c9:95:6e:50:42:39:c1:11:f6:c3:79:04:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B0:16:87:4F:9F:72:2B:5D:95:07:39:75:8C:7A:D7:38:13:C6:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:121::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:e8:59:c4:7d:12:b2:4f:6f:98:96:8a:bd:25:ee:38:f3:
         b7:bd:e9:6f:4b:00:4a:92:d7:f0:7e:8d:ef:0d:0d:8d:b7:ea:
         1e:7d:ca:fd:58:fe:30:3f:03:ee:a0:ff:45:90:37:c2:94:e1:
         20:f7:6b:b3:fa:38:37:3a:48:47:fa:a4:b4:da:1f:2e:38:a0:
         79:c9:ee:93:a7:c7:9a:ee:b5:a1:95:23:f3:fe:41:c8:3e:76:
         c4:76:36:c3:ee:e1:c0:54:70:0f:e4:91:a9:03:72:3d:ca:5d:
         0b:64:31:4c:4d:88:3c:e1:f2:69:1b:9e:d7:29:cc:1b:25:6c:
         8a:60:a9:74:b7:75:29:1a:5e:e8:63:ac:aa:a2:f5:7a:f8:9a:
         c8:a7:a8:8a:cd:3a:24:1d:e1:d0:31:cb:9a:ac:c7:dd:48:50:
         53:02:31:25:88:02:50:60:f6:b1:34:14:4a:45:f3:33:6e:a3:
         35:2a:c5:de:b9:24:0a:13:44:eb:0e:fa:38:22:f9:c8:e9:1d:
         82:b4:05:e3:eb:85:11:53:15:df:5c:0f:95:19:45:79:33:12:
         ff:4d:1e:d5:f1:94:86:c7:b1:71:9e:d8:b0:7e:4a:d2:d4:3d:
         c5:01:3a:f1:f3:fe:2c:ad:36:59:e4:5b:16:ff:7d:a1:df:c6:
         61:39:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----