Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer
File:                     d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer (raw, json)
Hash identifier:          j7L0oIYU9Bb6Ern/yBx2D2IsZqCPMylRSOIAldHL3Uk=
Subject key identifier:   63:4F:AE:99:6B:51:24:AD:E3:54:51:31:12:CE:7E:3F:5F:3B:E9:F2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED9830
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 May 2021 19:43:06 +0000
Certificate not after:    Sun 14 Jul 2024 15:10:13 +0000
Subordinate resources:    AS: 271794
                          IP: 164.163.186.0/23
                          IP: 179.0.149.0/24
                          IP: 2803:2010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15570992 (0xed9830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 19:43:06 2021 GMT
            Not After : Jul 14 15:10:13 2024 GMT
        Subject: CN=d4877474e56b45c3da892e4dfb3b84f2df97d32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:62:ed:b0:83:8a:ee:cb:20:45:4c:89:2f:
                    10:87:56:7f:68:c0:97:73:51:93:16:47:44:3d:77:
                    1c:e1:a2:b7:e1:58:46:f1:c4:c5:e9:c8:6f:5b:3e:
                    45:f8:b5:d8:85:00:1d:a9:c9:23:3a:96:82:fb:cf:
                    3a:7b:48:81:99:b5:1f:64:1e:29:33:13:c2:3d:ca:
                    bb:66:bd:60:a3:98:a7:ed:dd:81:dc:55:89:2c:ea:
                    92:e7:90:d4:7f:92:bc:ca:e7:a7:d6:51:1c:8d:9d:
                    c5:47:6e:56:44:38:19:61:df:a1:08:3e:e1:a5:7f:
                    17:fc:f0:14:d4:df:a8:de:5c:e4:ee:30:11:b2:fb:
                    53:18:bf:89:a5:b0:1e:64:d9:b7:ad:48:91:69:c0:
                    9a:42:a5:bd:3a:3b:fc:23:dd:f1:4a:84:64:14:49:
                    e0:50:da:68:71:1a:f6:dc:7b:67:10:b8:9c:55:25:
                    29:ef:77:46:ab:cf:62:39:43:ee:33:d6:0c:cc:51:
                    12:0f:d9:56:60:bf:9b:c3:7b:d7:0a:39:16:06:11:
                    84:89:0f:b4:ed:2e:a4:5e:71:ab:d2:9a:97:eb:1c:
                    18:74:32:ac:2f:9f:3f:c3:fb:84:9a:89:f8:68:97:
                    b4:41:4a:b4:5f:3c:8a:a5:95:2f:9f:cb:f0:27:04:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4F:AE:99:6B:51:24:AD:E3:54:51:31:12:CE:7E:3F:5F:3B:E9:F2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.186.0/23
                  179.0.149.0/24
                IPv6:
                  2803:2010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271794

    Signature Algorithm: sha256WithRSAEncryption
         85:72:7a:34:e1:8e:bd:5c:42:e6:a5:90:1f:2e:d8:79:98:e3:
         d9:70:d8:b0:6a:ff:98:11:ca:51:ac:20:83:63:c1:b2:18:63:
         e8:b7:17:b2:da:f2:a8:13:01:e7:10:e7:72:70:0c:06:73:3c:
         25:9d:17:42:9f:03:a0:07:b8:9c:56:b0:12:83:6c:96:23:38:
         bf:d3:c1:10:d4:97:d2:dd:ae:53:cb:2d:c8:54:37:34:b0:a7:
         ee:bc:0b:36:54:d2:68:72:48:2a:a8:e7:31:6b:77:74:89:5b:
         2f:b4:13:aa:0f:be:11:5c:b4:9c:06:c5:cc:bd:29:cd:d7:4e:
         90:de:71:01:2a:49:d0:87:e3:fb:cf:a5:5f:b8:53:eb:df:2f:
         df:46:ea:b0:07:00:ff:8e:e8:39:2a:d1:14:d9:95:d1:eb:4d:
         e8:63:ba:83:c4:0a:de:c7:2d:27:cf:87:63:3b:08:c0:4d:1a:
         f5:0c:49:c4:ec:27:9e:ae:a6:76:26:0d:70:76:e0:9e:cf:6a:
         5c:57:5f:94:b3:43:4f:e0:d4:33:68:47:ef:17:e7:3e:fe:ad:
         d5:5a:a5:ad:43:8b:d8:d4:8d:81:17:8a:2b:ce:a7:8d:ca:81:
         71:27:cd:75:16:6e:79:ee:dc:af:a5:97:99:54:d9:60:50:65:
         35:7b:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----