Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7316fc96d2d5973d8887515fc14f7342915f202.cer
File:                     d7316fc96d2d5973d8887515fc14f7342915f202.cer (raw, json)
Hash identifier:          K1XSQc4lcOo/uZRdlTyzoSkwLAw2+gDefijQoYHe8FY=
Subject key identifier:   38:60:AD:1F:CA:BD:33:D9:08:79:B2:60:85:5A:6E:FD:67:74:80:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE895B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/d7316fc96d2d5973d8887515fc14f7342915f202.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Aug 2021 18:40:56 +0000
Certificate not after:    Wed 13 Mar 2024 20:17:23 +0000
Subordinate resources:    IP: 190.111.177.0/24
                          IP: 201.77.2.0/23
                          IP: 2803:a1e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14584155 (0xde895b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 11 18:40:56 2021 GMT
            Not After : Mar 13 20:17:23 2024 GMT
        Subject: CN=d7316fc96d2d5973d8887515fc14f7342915f202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:18:0f:88:38:d5:0f:df:fa:15:10:46:f2:
                    97:1a:5b:12:75:12:d2:e7:e6:a7:b7:e8:84:f5:a8:
                    6e:a1:38:e3:15:21:36:c5:e0:55:40:54:25:83:91:
                    a3:0a:79:6d:b8:d0:20:5d:3d:f7:6c:77:eb:97:65:
                    5e:f6:7d:bd:cb:b9:64:dc:f5:5f:c4:d6:de:06:fe:
                    f2:73:8a:d5:98:43:18:77:54:f7:d7:5e:5b:de:54:
                    a1:0a:fd:18:c1:3c:b5:e2:9e:1b:91:15:3a:1f:62:
                    d8:9d:b7:d9:17:23:54:0b:1a:8c:b3:31:3c:21:eb:
                    a9:1c:21:26:b6:2b:a6:fb:7f:93:fe:3e:29:6c:b6:
                    71:27:6b:1d:9e:c6:14:cf:99:f1:9c:f8:db:ed:bf:
                    50:a1:c3:70:49:09:74:27:81:06:f1:a1:46:98:6a:
                    7b:0f:26:0e:ec:f8:92:33:11:bd:29:e4:fa:a1:54:
                    ce:a7:e3:15:71:fb:d7:15:95:51:b8:cb:e8:5e:3b:
                    f2:bf:72:f6:43:1f:07:3d:80:3b:25:ec:e9:8d:e5:
                    d1:42:a2:9e:14:cc:15:bb:b2:5c:1e:5e:28:af:1f:
                    ae:b1:c5:cf:6f:35:1b:72:c8:05:b4:93:85:a7:6e:
                    c7:ed:61:c0:51:3d:f8:c2:10:4d:63:fb:99:e0:bb:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:AD:1F:CA:BD:33:D9:08:79:B2:60:85:5A:6E:FD:67:74:80:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/d7316fc96d2d5973d8887515fc14f7342915f202.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.177.0/24
                  201.77.2.0/23
                IPv6:
                  2803:a1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:41:d9:1c:67:9b:d2:9f:03:f4:b9:94:46:a8:b0:a3:64:
         37:24:20:82:4a:b1:8d:3b:ef:92:55:44:4d:ec:a3:09:fc:e4:
         91:b1:c8:30:6a:4f:eb:1b:3f:f5:4e:35:ed:55:40:f6:47:47:
         f3:41:c6:62:71:6c:be:a1:69:e1:75:bd:93:e2:70:ce:be:ab:
         66:db:88:8d:7f:7b:1c:20:66:04:4a:00:ed:1c:01:a8:43:8b:
         ea:46:0b:5b:c6:4c:15:16:ad:04:04:9d:4c:dd:fd:93:66:ed:
         b9:81:b9:4b:b4:15:d6:5d:e1:e0:ce:9e:27:cf:fb:6d:e6:aa:
         ba:58:94:29:10:d7:34:09:ad:f9:44:28:d4:c5:b0:7a:43:77:
         a4:7e:54:8b:14:63:5c:fc:79:ec:f2:a0:7e:46:ae:9f:16:d7:
         f2:67:c6:16:6e:de:bc:b9:f3:a3:41:44:67:2c:fc:c2:71:ef:
         cb:b8:37:82:64:b8:88:ca:77:f3:8a:bf:90:45:cc:47:ba:2c:
         61:e2:5b:a8:fe:39:f4:af:37:df:ea:d7:b0:b1:54:ff:ea:95:
         d6:73:13:4c:bb:ff:61:1d:3c:3c:de:f9:d9:64:4e:1d:99:83:
         e8:7e:1f:d2:fd:64:4d:6e:15:85:96:9c:18:db:bf:d5:40:d2:
         75:d0:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----