Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c21d37133f3c6327e191ac06cc2a2b23c0979dfd.cer
File:                     c21d37133f3c6327e191ac06cc2a2b23c0979dfd.cer (raw, json)
Hash identifier:          mKNOaJHFGwTerEzU4AVvhs2JHXIBcTfaiJiqAQ5SUiw=
Subject key identifier:   D8:61:E4:48:32:89:6E:2F:06:22:8F:15:4F:44:BE:24:FB:CA:C9:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6826F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/c21d37133f3c6327e191ac06cc2a2b23c0979dfd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 01:01:39 +0000
Certificate not after:    Mon 09 Sep 2024 20:28:34 +0000
Subordinate resources:    IP: 170.239.64.0/22
                          IP: 2803:cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15106671 (0xe6826f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 01:01:39 2023 GMT
            Not After : Sep  9 20:28:34 2024 GMT
        Subject: CN=c21d37133f3c6327e191ac06cc2a2b23c0979dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:96:15:a3:a3:a4:70:1b:b6:e9:3a:bc:f3:
                    c1:7f:e1:f2:98:4b:33:b7:11:00:4d:f1:6f:23:c8:
                    bf:0d:14:3e:7e:da:f3:77:92:f9:38:21:d2:8c:78:
                    2b:b7:c3:25:95:63:cc:e9:05:24:8e:f6:a2:3e:11:
                    21:16:68:b2:74:d2:83:73:b7:6f:b9:06:12:af:9b:
                    d0:6c:27:ab:ce:ec:fc:c4:2f:73:20:f1:15:ef:b0:
                    5f:96:fe:57:ce:08:52:12:c0:8b:c3:ed:10:ca:78:
                    36:bc:0b:f5:d9:b5:0d:1e:a0:62:42:fe:d6:b4:44:
                    6c:a5:b1:c3:23:55:12:2d:dd:da:6e:55:29:d0:f8:
                    1d:b6:ca:95:9d:65:68:5a:7f:ca:18:7f:6c:91:0b:
                    38:7a:34:7f:13:6d:4c:f1:ea:c2:ff:dd:f1:c3:ed:
                    73:9e:25:5f:e1:46:9f:f4:c4:e0:47:a4:8a:79:6b:
                    82:4a:ad:2a:69:15:fe:ae:b8:68:4d:fa:17:22:c0:
                    c2:29:9b:e8:b2:e4:ba:23:bd:f5:14:59:28:8a:97:
                    06:49:cc:6e:b0:61:5c:59:4d:16:d1:ec:fd:0e:19:
                    e2:ae:36:fa:04:1e:45:29:22:eb:13:09:7e:1d:3c:
                    33:95:3a:8f:b4:4e:7a:55:8a:79:9d:69:04:89:a7:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:61:E4:48:32:89:6E:2F:06:22:8F:15:4F:44:BE:24:FB:CA:C9:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/c21d37133f3c6327e191ac06cc2a2b23c0979dfd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.64.0/22
                IPv6:
                  2803:cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:13:83:53:5c:14:5b:b5:c1:1d:89:34:10:dc:f1:f3:f4:54:
         25:4c:b8:38:d0:20:5a:ce:36:ab:41:0b:ab:ca:0e:dc:cb:0c:
         9b:f3:1c:24:7f:0e:5f:94:1c:76:60:f5:b8:70:83:fe:5a:82:
         9e:5d:1f:8a:6e:28:86:a2:24:8e:a8:b0:48:6e:1e:71:85:04:
         8c:1a:18:3f:93:ad:f7:f8:94:34:39:67:a1:95:20:48:67:48:
         07:b4:71:56:08:a9:be:a4:70:7c:d8:b6:25:6a:54:69:e1:cc:
         91:66:49:3b:75:be:9b:98:5e:7c:54:22:ca:6a:1d:b9:a0:66:
         49:4e:70:9d:79:ab:60:d8:b3:8a:98:75:f8:a6:56:57:b7:e0:
         61:3f:56:43:e6:29:b5:9f:55:bf:be:c7:d3:58:16:f8:9c:9c:
         1b:8e:57:c3:3a:e3:c7:29:82:ca:9a:d3:c7:80:75:c4:60:b2:
         16:42:7f:0f:d0:b4:e7:5c:0c:3a:59:79:2e:72:7b:66:ba:e1:
         1b:a5:86:e8:74:dd:e9:ac:ed:e6:00:ce:c0:ba:38:b3:73:a3:
         46:e5:12:7a:88:bb:18:57:d3:c9:5c:c8:43:8d:d1:d1:fc:a7:
         bd:8d:bc:6b:46:98:33:a8:fa:5a:13:e7:05:f2:c0:43:c8:9b:
         f2:6d:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----