Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
File:                     b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer (raw, json)
Hash identifier:          ewhz0NQshVmW+arNwxnQVHfiDxLf69J2SHKIaYP6kok=
Subject key identifier:   F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D57D36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 May 2021 17:11:23 +0000
Certificate not after:    Wed 22 Nov 2023 21:17:28 +0000
Subordinate resources:    IP: 45.170.12.0/22
                          IP: 2803:cba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13991222 (0xd57d36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 26 17:11:23 2021 GMT
            Not After : Nov 22 21:17:28 2023 GMT
        Subject: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:51:d2:29:66:11:b1:a9:48:97:29:8b:49:
                    1a:b0:82:9a:28:76:1d:53:33:c1:18:3a:87:09:05:
                    84:26:01:07:b0:c1:f6:44:93:b1:4f:78:2a:89:cc:
                    60:b3:63:bb:27:98:48:10:2e:76:89:ba:ae:08:cf:
                    91:02:f5:66:28:2f:74:67:88:e1:e3:4f:41:c3:83:
                    fd:9a:b4:36:5c:93:4c:c8:39:d2:76:a5:c7:0b:6b:
                    e7:29:56:92:64:43:9f:8b:f8:f0:98:31:af:c3:06:
                    a4:8e:a8:54:a0:06:a2:cd:19:a1:ba:1d:d8:41:fd:
                    d2:b4:8c:6c:0e:92:fb:2f:6b:d6:61:a0:f4:8c:ef:
                    15:7e:bf:0c:48:5c:9b:38:ae:36:ce:18:27:72:fe:
                    fe:13:63:9e:8e:74:38:03:88:02:31:5b:02:dc:b8:
                    b6:de:38:db:70:85:89:f7:80:aa:90:06:1d:9d:5b:
                    e5:6c:41:d7:53:9b:5f:79:07:e5:61:38:15:65:be:
                    19:4a:4e:8a:16:9f:06:d7:64:83:12:36:87:10:62:
                    63:b1:45:7d:b4:3c:a1:7d:c5:48:12:45:e4:3c:83:
                    01:eb:8a:34:44:aa:14:97:2a:e3:99:a4:eb:9b:fc:
                    c9:fe:b4:ac:7c:ba:dc:48:00:bf:81:76:7b:30:61:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.12.0/22
                IPv6:
                  2803:cba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:09:6f:9e:28:60:d9:1e:74:f4:44:b1:aa:6d:d0:ad:70:
         f4:a7:fe:d8:a9:f8:00:7b:cf:16:47:28:c6:0e:95:58:4d:19:
         4e:d9:09:54:f0:67:f5:5e:5e:e9:61:59:0f:f9:60:11:52:34:
         b9:f4:e5:fe:29:d9:c4:43:38:ab:e4:9d:32:10:80:58:12:c9:
         65:be:b6:87:5e:9e:9c:cf:96:a2:7d:65:20:85:40:9d:4e:0c:
         58:f2:f9:8d:23:62:cc:cf:70:d7:fe:b7:71:08:23:b5:35:19:
         db:f8:df:b2:dd:6e:1a:a9:ac:e2:8d:d8:0d:1e:ab:2f:42:6b:
         c9:fe:2a:a5:a5:0a:e9:06:1a:17:7c:60:c4:c6:40:62:33:55:
         37:4e:2f:97:a9:6f:a1:a3:ba:2d:19:49:bf:fa:19:5b:9d:b9:
         b9:2e:d2:fa:fc:e0:59:79:cd:31:c6:60:10:0f:c7:e2:89:58:
         dd:ed:58:1e:6e:68:f5:a9:5c:df:05:59:2d:b0:09:23:23:a5:
         82:13:e0:37:1f:41:f7:42:2b:c9:0c:cf:80:30:be:8b:f8:1b:
         c7:1a:db:4c:4f:d2:9a:1b:13:45:54:55:96:e2:5a:51:bf:53:
         3a:c2:b7:2d:1e:87:79:ab:e7:50:1a:1a:7b:f1:e9:ef:fc:ef:
         2a:aa:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----