Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer
File:                     d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer (raw, json)
Hash identifier:          z1SEAbFAfScl9T4P50BpxDhZgj9dMY2XlPwJOWGKBRg=
Subject key identifier:   53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC2D64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Mar 2021 21:12:41 +0000
Certificate not after:    Tue 02 Jul 2024 22:38:51 +0000
Subordinate resources:    AS: 61491
                          IP: 131.108.20.0/22
                          IP: 168.121.128.0/22
                          IP: 2803:a380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15478116 (0xec2d64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 30 21:12:41 2021 GMT
            Not After : Jul  2 22:38:51 2024 GMT
        Subject: CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:20:58:48:81:c5:f3:17:d2:89:f4:a8:8e:
                    c2:f4:07:5c:5f:9d:ec:0b:72:c7:3c:8d:7d:52:b0:
                    47:f8:2d:55:77:2a:42:2c:ce:5b:6e:b7:e6:56:14:
                    8b:60:f5:1b:82:39:47:bb:05:10:00:73:87:d7:06:
                    eb:d4:2d:a7:5f:ed:fc:40:64:e2:fd:5b:af:f6:d1:
                    c2:06:3d:16:7f:7c:c2:90:a9:eb:77:9b:c4:ae:e9:
                    9a:94:3b:81:ae:03:8e:f2:03:00:d1:1a:6a:46:4b:
                    63:ae:4c:34:81:a3:1a:0e:84:15:d6:30:13:78:ea:
                    0c:b2:33:85:e0:42:0b:89:65:2b:eb:7f:7f:4c:1f:
                    43:66:ad:36:aa:24:ad:af:26:4b:52:db:90:d5:2e:
                    f1:98:c1:31:ed:5d:96:0f:1d:29:1e:a4:fc:ef:86:
                    80:83:11:30:b7:69:e0:24:18:b6:fc:76:76:fe:00:
                    31:86:c2:7d:7f:ba:6f:77:f2:ba:c9:fa:34:08:e8:
                    09:84:af:91:b0:d4:af:f8:fc:69:59:11:df:39:b6:
                    6d:89:4a:48:6a:86:b4:e6:b6:26:c9:56:97:2a:fa:
                    dc:4a:6a:02:f5:23:67:09:39:26:6e:2c:44:f4:af:
                    6f:ef:e4:2f:a5:8d:31:f6:e8:48:07:31:b2:f0:85:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.20.0/22
                  168.121.128.0/22
                IPv6:
                  2803:a380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61491

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:0c:d5:34:85:d3:61:d2:b8:c0:36:5c:27:3e:93:e4:a7:
         25:2d:b0:0a:55:aa:fa:1a:10:e5:c9:f3:26:a1:c0:0f:75:29:
         a2:6d:30:4e:5d:3b:c6:f6:4d:0c:0c:84:48:66:e1:2c:5d:0c:
         b1:a0:3b:c3:0a:57:75:1a:8f:07:ee:cb:9f:55:34:4a:dd:3b:
         bc:46:21:17:20:80:be:be:f6:fd:49:4f:44:55:7e:4c:3d:a8:
         9b:7d:a8:a9:e2:15:89:1a:93:1a:9e:f1:b7:fc:e1:58:ae:be:
         24:d4:ca:da:54:22:93:25:03:a6:bf:f1:9e:2f:72:18:bd:6f:
         01:a3:30:cb:5d:03:e1:37:c4:9f:2e:1c:c6:98:41:35:9f:39:
         a6:48:d6:1d:96:f6:88:9a:92:cd:e6:29:c1:31:9c:4e:e1:1f:
         c5:f2:2e:35:ae:d8:c9:66:7a:ad:48:ad:89:2a:34:1a:46:78:
         f7:34:bf:1a:0b:eb:01:df:14:0d:ab:bc:e2:53:89:4e:2c:94:
         90:67:c1:e8:93:1c:aa:cc:df:84:d7:b7:01:b0:27:52:fc:7c:
         01:ee:93:71:54:52:b5:58:9f:6d:86:32:bb:45:9c:4d:f7:96:
         1f:94:1d:7b:f2:89:40:54:e1:6d:f6:64:a9:d0:16:cd:cd:72:
         4b:e5:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----