Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
File:                     d407c72537519f11553c7ee9eb83baa042334380.cer (raw, json)
Hash identifier:          WTUVl01rTHC68Cq6yy3i5R1DiMopJn3Mexj/KzJ9pVw=
Subject key identifier:   44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F03697
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Aug 2021 14:23:04 +0000
Certificate not after:    Sun 17 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.26.184.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15742615 (0xf03697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 27 14:23:04 2021 GMT
            Not After : Nov 17 14:00:00 2024 GMT
        Subject: CN=d407c72537519f11553c7ee9eb83baa042334380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:6d:d8:66:7c:ff:35:fc:e9:e8:62:c4:80:
                    b0:bf:52:b7:ad:36:52:b9:15:f9:27:65:ec:51:48:
                    8d:24:cc:16:96:f5:24:d7:f7:d8:fc:1b:c3:f3:d5:
                    9b:25:49:6a:c1:69:db:d7:92:f0:73:63:de:d4:cd:
                    8c:28:70:09:94:81:6c:91:28:36:8d:e4:9d:a1:b5:
                    e9:f8:d7:0c:dc:2f:5b:05:84:8b:d9:ba:7b:f3:b8:
                    29:d6:3b:e1:e2:a1:5f:6c:8d:80:ca:6f:13:c8:2e:
                    ce:ef:35:b6:cc:97:45:de:98:e1:54:3d:e7:ad:c2:
                    97:ad:00:26:ef:79:f7:b8:be:c5:06:39:04:9f:45:
                    5d:c3:22:97:a3:34:02:40:f6:d4:80:d8:39:c7:cd:
                    9d:8a:dd:6c:1f:d8:2c:a4:95:ea:1b:8c:bc:9f:fb:
                    01:a3:51:76:06:d9:65:1e:c1:f2:7a:39:5b:63:77:
                    43:87:d5:48:5f:fe:f0:e3:fe:a2:65:50:3d:4a:2d:
                    83:09:2e:1b:7e:a0:64:ea:8b:71:6a:d5:c4:ff:a3:
                    53:9e:1e:f7:31:81:16:79:35:eb:ee:be:d5:6f:44:
                    24:99:4e:08:63:50:e3:70:95:70:4a:16:a5:ef:ab:
                    e2:f7:57:3f:e5:b4:55:00:1a:25:2d:34:16:81:59:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:cc:bc:d6:4d:bd:e2:65:10:83:3c:e5:a4:7f:d6:28:97:bc:
         d3:2a:66:a7:c2:ba:68:86:15:60:57:b9:52:a5:5c:45:9a:8f:
         73:e1:8d:dc:ae:bb:e0:2e:e7:94:f5:66:0f:fe:fa:58:5e:49:
         db:41:08:2f:04:ba:40:81:ec:02:21:6e:98:18:2a:f1:2d:a7:
         4f:64:01:60:5a:27:36:48:ee:6d:9e:f2:cd:87:a2:5c:7a:b4:
         23:2e:d2:34:cc:0b:ac:54:ec:03:be:2c:b3:e5:03:b5:d2:4f:
         b0:1b:01:1b:b1:d6:f9:f0:97:e3:84:9a:01:bc:71:cf:0f:fa:
         52:ab:20:31:2d:7c:01:38:c9:c4:22:7d:fd:cf:c3:72:a8:b3:
         41:67:7a:d3:17:f3:4a:da:36:9e:56:55:51:4b:57:87:38:57:
         07:9e:d6:81:2f:0a:a9:8c:4d:b6:d3:23:8e:be:c7:9c:52:ec:
         26:5e:d4:04:54:e3:c6:b2:1e:33:de:a1:49:03:12:5c:3f:01:
         3d:4f:8f:f9:4a:cc:79:24:92:99:84:42:a6:92:a7:bf:bd:4b:
         93:a5:db:bf:da:6c:d4:a1:77:03:f5:07:54:24:e8:09:5c:7a:
         0d:9d:1f:a9:23:af:d5:21:9d:49:d5:96:f8:6d:ca:d8:ee:18:
         df:bd:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----