Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4f32e72eaeb1a77fbd2186f345b20e45ee46b60.cer
File:                     a4f32e72eaeb1a77fbd2186f345b20e45ee46b60.cer (raw, json)
Hash identifier:          NS63j/MUszGpT2EhDbgPgPgZEFX/kbh8blOHRkhrp70=
Subject key identifier:   86:70:3F:93:87:21:EA:08:06:C9:00:0D:B0:C8:3B:6B:C5:56:D0:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9F0B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/125f1836-2896-4788-9443-451be9b6fb45/a4f32e72eaeb1a77fbd2186f345b20e45ee46b60.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/125f1836-2896-4788-9443-451be9b6fb45/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Feb 2021 12:00:28 +0000
Certificate not after:    Sat 15 Jun 2024 23:12:30 +0000
Subordinate resources:    AS: 265793
                          IP: 201.182.16.0/22
                          IP: 2803:a020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15331511 (0xe9f0b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 17 12:00:28 2021 GMT
            Not After : Jun 15 23:12:30 2024 GMT
        Subject: CN=a4f32e72eaeb1a77fbd2186f345b20e45ee46b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:10:48:a2:83:ab:e5:fe:ae:28:37:4d:b6:
                    f7:a0:e9:b1:72:60:9d:f9:90:af:42:25:ac:42:e6:
                    16:c1:ae:40:b0:5c:86:27:10:9f:52:fc:f9:15:c5:
                    16:2a:e0:2b:ce:05:31:ad:0b:4d:f5:d5:30:56:ae:
                    ed:cc:a9:ac:fd:5d:22:bf:a5:e6:4c:d7:88:80:cd:
                    fc:83:cb:a4:3f:0d:05:95:3d:bf:ae:8c:da:5c:39:
                    a9:ff:bf:3c:b5:59:67:cd:ce:7c:ef:54:22:57:1b:
                    19:fd:96:0a:0e:c9:70:ce:f5:bb:80:24:d8:33:c7:
                    20:f1:26:9c:76:94:b1:f1:95:e9:79:78:fc:2a:d1:
                    00:43:11:c3:a4:dc:32:0c:73:9b:eb:9c:36:11:7e:
                    54:cf:71:95:17:d1:6b:99:78:e8:c3:ac:92:91:40:
                    d8:6e:3a:7a:5f:2b:2f:30:35:da:74:1f:3e:76:00:
                    1f:43:73:6b:ca:bf:20:0f:30:71:5a:d1:7b:9e:4b:
                    c7:a2:a2:1f:08:e0:bb:85:7a:5b:fe:af:4f:e9:85:
                    96:05:53:0d:8d:23:3b:31:a0:2b:e3:cb:ba:c5:8a:
                    6b:e0:3b:38:03:27:24:f1:19:3b:b9:1e:3f:94:2a:
                    8f:ec:74:ca:9a:e5:bc:59:b5:c2:e7:61:94:37:fe:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:70:3F:93:87:21:EA:08:06:C9:00:0D:B0:C8:3B:6B:C5:56:D0:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/125f1836-2896-4788-9443-451be9b6fb45/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/125f1836-2896-4788-9443-451be9b6fb45/a4f32e72eaeb1a77fbd2186f345b20e45ee46b60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.16.0/22
                IPv6:
                  2803:a020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265793

    Signature Algorithm: sha256WithRSAEncryption
         aa:27:a6:f5:a7:ba:38:4b:43:9d:67:ba:f6:0f:5b:7c:8d:56:
         bc:ae:8c:d1:52:02:8a:b8:7a:e0:4e:ca:b9:2d:b9:3f:98:c7:
         4b:98:39:65:ba:99:f6:90:b8:01:2d:4a:90:19:d3:8e:2c:8c:
         d2:90:93:aa:4e:34:7c:1d:f4:ed:6e:d1:7d:2f:83:3e:30:eb:
         fa:ec:67:52:a1:77:be:23:76:3b:65:f3:2b:04:e7:30:8f:a7:
         26:0f:f3:76:89:c9:08:62:0b:6c:fe:62:3c:c5:82:00:6a:8b:
         fa:89:48:8e:6e:2c:5d:8d:e7:af:0e:b3:b7:2d:39:13:49:05:
         bc:64:6b:9d:70:22:01:bd:bb:b1:46:e2:95:a0:30:c3:56:b3:
         36:f6:43:cf:23:be:76:64:6e:fc:db:22:f5:b3:f3:cb:c3:7a:
         fb:87:58:43:c4:e0:1a:1e:42:4b:f1:79:88:f0:96:3d:3f:8e:
         28:2a:bc:6e:ce:84:55:56:2d:c2:2a:7e:87:52:36:fe:09:af:
         72:3f:d7:a4:30:e2:09:af:c6:c6:b4:7b:b2:9d:cd:55:54:79:
         f7:c9:00:bf:af:f8:bd:a2:40:07:ac:0a:9c:f5:3a:6d:ad:f9:
         18:39:19:f1:2c:ee:47:fd:06:56:67:bc:f9:72:e2:02:b1:cc:
         97:0e:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----