Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc38033378ed4a08405e5efa3049b070dfac5053.cer
File:                     bc38033378ed4a08405e5efa3049b070dfac5053.cer (raw, json)
Hash identifier:          Z/SoFlYT3kmE0eptTWUhZg3VdDjj/tMs0vQTqXnESwY=
Subject key identifier:   60:A4:41:21:75:34:52:DB:3E:FB:AA:1E:04:FC:E4:D6:9C:BE:DF:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCD563
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/bc38033378ed4a08405e5efa3049b070dfac5053.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Jan 2021 14:53:07 +0000
Certificate not after:    Thu 14 Nov 2024 14:20:26 +0000
Subordinate resources:    IP: 2801:13:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16569699 (0xfcd563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 21 14:53:07 2021 GMT
            Not After : Nov 14 14:20:26 2024 GMT
        Subject: CN=bc38033378ed4a08405e5efa3049b070dfac5053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:fa:78:c3:eb:65:02:9b:12:9b:d0:b6:79:
                    50:59:18:ba:f1:55:e7:10:ce:2d:74:df:ca:85:e3:
                    99:57:7f:8c:97:a1:a8:9d:41:31:93:e0:11:be:12:
                    1e:d0:4b:58:73:55:58:7c:a3:4a:81:6e:0f:20:cc:
                    71:2d:ad:d3:71:bd:31:51:d6:fb:8b:9b:46:e5:55:
                    4b:16:0c:c0:d5:ca:20:1d:fe:d4:0a:84:6b:bf:c0:
                    16:dd:aa:a0:ff:f6:44:20:3c:f6:ae:5a:8c:80:4d:
                    91:a6:6e:2e:54:ad:af:01:87:5f:9d:48:5a:92:d3:
                    12:bc:b3:d7:8c:3f:16:b9:a8:2e:d0:4a:16:a7:4a:
                    6d:29:db:bc:47:0d:ed:0b:14:4d:9b:57:65:9d:ff:
                    10:8e:2d:46:6e:b2:75:25:96:dd:9f:95:2c:ce:a4:
                    f9:b9:22:b3:96:90:5f:8c:d2:a5:10:69:97:da:ec:
                    d0:03:f7:1f:cf:9c:4d:70:dd:3d:0a:56:e5:50:45:
                    a6:21:e5:03:67:20:83:5b:57:48:d8:66:25:37:30:
                    22:33:75:46:dd:48:96:2d:aa:7c:b1:94:ae:87:35:
                    09:b0:cd:ce:b2:71:1e:bc:b2:e6:1b:fe:33:6e:c5:
                    f9:3e:55:57:11:d7:33:fb:ce:0c:38:4e:f7:c2:56:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A4:41:21:75:34:52:DB:3E:FB:AA:1E:04:FC:E4:D6:9C:BE:DF:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/bc38033378ed4a08405e5efa3049b070dfac5053.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:03:2d:39:85:89:59:ba:ea:56:5b:ee:e9:be:64:68:d2:
         58:53:96:0c:25:57:3e:10:d8:01:54:fd:a4:35:b4:3b:0b:5b:
         1b:f6:3d:29:8f:f0:ca:74:46:96:05:9d:67:2a:8b:99:17:95:
         fb:e7:80:c2:ae:35:e6:89:9e:71:35:9d:03:d7:31:3a:4f:5d:
         f1:b2:1e:97:f8:72:c2:29:f9:6c:09:09:da:29:93:53:09:44:
         72:36:90:0e:98:58:51:ae:ef:fd:bd:b4:f1:56:47:da:3d:41:
         37:40:70:c3:39:67:61:9b:1d:fe:00:90:af:40:8b:48:a0:e6:
         39:78:96:d6:26:3d:d7:df:66:1d:2d:1a:f2:e1:3d:b0:2b:3e:
         45:a5:d4:b6:83:9c:07:95:3d:4b:e1:b4:90:c8:09:06:60:a4:
         20:03:4a:d1:f6:52:fb:15:34:4f:ba:22:89:70:d7:6b:d0:34:
         51:ba:b0:86:82:74:4d:6f:d9:5a:f5:10:96:ed:87:51:02:23:
         77:2c:d1:b7:a6:0a:5c:2f:6f:34:b6:54:23:35:12:a6:f6:95:
         e0:c5:20:b5:85:d4:d7:10:f5:28:3c:06:33:c5:7c:d3:10:57:
         e5:8d:8f:87:40:27:f2:19:d6:ef:90:4b:9a:88:25:08:53:94:
         7c:29:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----