Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77db4a4e3f57449d87d4445aa15303ad472c017.cer
File:                     a77db4a4e3f57449d87d4445aa15303ad472c017.cer (raw, json)
Hash identifier:          YqgsVeIQWt0SoOApzwVbXBKfB6/BE48hhSsyS7IG2Ho=
Subject key identifier:   81:5D:BC:55:F6:CA:7B:01:59:A8:44:71:B6:06:79:99:01:8A:42:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEA767
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/a77db4a4e3f57449d87d4445aa15303ad472c017.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Nov 2020 20:02:13 +0000
Certificate not after:    Sun 21 Jul 2024 20:55:27 +0000
Subordinate resources:    AS: 52317
                          IP: 190.112.40.0/22
                          IP: 2803:720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15640423 (0xeea767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 20 20:02:13 2020 GMT
            Not After : Jul 21 20:55:27 2024 GMT
        Subject: CN=a77db4a4e3f57449d87d4445aa15303ad472c017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:fa:0e:79:0d:a8:c6:63:6d:40:86:de:12:
                    18:bd:02:5d:c7:04:2e:61:1e:a1:74:f5:1b:1d:e6:
                    e4:a1:b9:e1:78:5f:9e:30:75:a7:e3:d4:1a:7b:fe:
                    eb:29:60:86:4f:d5:20:a9:48:75:0b:29:26:20:7d:
                    c9:16:f5:2b:79:16:bd:46:1c:72:e9:d6:66:d6:61:
                    78:3e:6c:25:8e:fd:f5:60:90:ce:f9:42:be:12:bf:
                    dc:fb:05:ce:3b:11:ff:4c:c8:fb:9c:fb:81:2a:8a:
                    43:6c:a5:53:1e:90:42:d1:bb:57:d1:59:d5:c6:d0:
                    88:4f:af:0e:ef:72:58:81:2a:d0:7f:a3:7d:c3:4e:
                    c5:24:89:5a:f0:e2:bf:d0:a1:36:0c:6d:ea:7a:6d:
                    3d:41:99:51:64:12:cf:3b:ad:b6:c4:11:40:49:08:
                    a1:dc:48:a9:58:b9:7b:03:25:4b:e8:42:63:61:f0:
                    ce:5d:66:04:de:43:52:70:7e:f4:d7:2c:d4:bf:9b:
                    e4:e5:22:d3:23:c1:b2:7d:6e:93:94:8f:b9:fe:ff:
                    b8:4c:88:df:56:bc:1c:61:b7:d1:a0:bd:ce:d5:e8:
                    78:63:0d:9c:68:bc:e5:3f:ac:b9:9a:e4:29:93:b1:
                    bf:cb:63:04:bf:e5:66:75:19:7b:ef:1b:09:1a:c2:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:BC:55:F6:CA:7B:01:59:A8:44:71:B6:06:79:99:01:8A:42:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/a77db4a4e3f57449d87d4445aa15303ad472c017.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.40.0/22
                IPv6:
                  2803:720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52317

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:58:7b:79:11:ec:93:5f:14:5d:00:f1:a2:0b:76:23:08:
         de:6f:88:d3:a4:13:9d:b0:64:20:b1:d4:7d:d7:b2:97:34:e5:
         b7:58:52:91:8f:cc:fa:57:5a:b8:f6:0c:84:b6:c6:88:ff:eb:
         52:2a:6e:79:3f:77:7e:73:43:26:c5:93:06:93:76:79:af:19:
         cd:77:19:cd:ee:07:97:07:03:8e:29:40:d4:bf:4f:d7:d9:40:
         3c:91:3f:71:3b:b6:f5:92:f0:04:cd:9c:91:fe:ee:72:3b:8f:
         d5:37:4a:ee:11:81:4d:da:8a:97:a3:18:a6:76:b1:e3:ec:6c:
         3b:49:ac:7f:63:fe:80:61:b9:95:5a:e9:37:35:5f:53:ae:ef:
         eb:fb:05:f1:f1:8e:cd:32:c3:54:d7:b2:80:b1:61:23:3c:ab:
         b1:27:5d:d2:76:8f:7c:8d:c9:fb:c0:be:cb:6d:af:bc:a0:30:
         2f:60:f1:a4:df:a5:74:66:03:82:2e:5b:e6:e8:9c:b1:65:aa:
         8e:12:11:fe:59:6e:a0:8f:54:3f:d4:4d:2f:3e:3a:e4:6d:2e:
         dc:5d:cb:89:f7:ef:44:33:4f:e6:f1:f0:32:c7:16:a0:63:77:
         9b:d9:a9:dd:e3:12:3c:75:09:3f:14:bc:ca:c3:12:5a:5c:21:
         82:34:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----