Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e99dbd17644c9bd4f00bed5dc5d65f314ed5e18c.cer
File:                     e99dbd17644c9bd4f00bed5dc5d65f314ed5e18c.cer (raw, json)
Hash identifier:          ZH9/W72kxpzpoKtg3jqXnVygWm71zunpB6YJxF+8EAQ=
Subject key identifier:   11:B4:D0:D8:2C:10:22:C6:DA:2B:D9:02:AE:4E:B8:DC:CC:DE:91:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB81E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10b6d66c-be30-4a5a-be68-9f128a70ed5e/e99dbd17644c9bd4f00bed5dc5d65f314ed5e18c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10b6d66c-be30-4a5a-be68-9f128a70ed5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Jun 2021 14:47:29 +0000
Certificate not after:    Wed 07 Feb 2024 16:26:56 +0000
Subordinate resources:    AS: 265701
                          IP: 45.6.104.0/22
                          IP: 2803:e9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14385636 (0xdb81e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 24 14:47:29 2021 GMT
            Not After : Feb  7 16:26:56 2024 GMT
        Subject: CN=e99dbd17644c9bd4f00bed5dc5d65f314ed5e18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:d8:a5:7b:60:42:8c:f8:aa:82:ff:c7:d7:
                    03:cb:ad:c0:d1:61:29:14:0f:d4:33:7c:5f:99:08:
                    9f:ec:e7:f6:13:36:ad:57:ab:84:d5:a1:24:d7:0c:
                    b3:6a:cd:2c:0b:3c:da:47:eb:58:a5:ad:ff:26:33:
                    86:79:6e:d5:1b:b5:f7:c2:8d:b5:6a:12:ab:26:63:
                    6b:36:a8:8b:2b:f9:b7:5c:56:8e:eb:73:c9:fc:62:
                    f5:79:9d:5a:1d:96:bd:6b:85:8e:41:bc:73:35:13:
                    c8:88:d1:a5:bf:89:76:1b:c9:b7:f5:12:99:27:f0:
                    8c:8c:6d:e3:de:ba:7f:85:9f:e2:2c:94:a2:6a:1d:
                    6a:30:61:9f:0c:eb:3a:99:c5:8f:00:a1:1c:60:d6:
                    5b:bf:1e:60:03:9f:67:1a:9c:c2:07:59:03:fe:15:
                    58:7e:9a:f7:8a:dd:75:53:90:9b:3a:63:18:b2:62:
                    22:30:10:2e:67:69:24:df:db:2e:93:c0:7a:3e:1b:
                    3d:8e:98:3a:9c:b2:d9:c0:49:da:f0:40:d5:78:1f:
                    54:81:f6:53:8e:33:60:ba:a9:85:7c:62:9e:7b:6d:
                    7a:29:2d:3e:bb:9f:7d:8d:81:d6:18:98:75:d6:e4:
                    a1:ca:30:ba:98:eb:54:9f:0a:04:7b:6e:b8:0c:c6:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:D0:D8:2C:10:22:C6:DA:2B:D9:02:AE:4E:B8:DC:CC:DE:91:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10b6d66c-be30-4a5a-be68-9f128a70ed5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10b6d66c-be30-4a5a-be68-9f128a70ed5e/e99dbd17644c9bd4f00bed5dc5d65f314ed5e18c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.104.0/22
                IPv6:
                  2803:e9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265701

    Signature Algorithm: sha256WithRSAEncryption
         ba:02:1f:4f:50:ce:01:79:81:f9:4f:68:a0:b0:2e:1e:2d:38:
         c1:e6:f1:49:bf:96:5d:51:d0:7e:eb:73:48:0f:4f:ec:92:3e:
         28:60:59:6e:81:ff:d7:64:bf:45:d8:8d:bc:35:c4:16:70:ce:
         d3:a1:32:7a:9f:42:bc:c8:0d:e3:94:80:6d:58:6d:ea:27:c1:
         50:66:d5:0e:8c:02:7e:b8:00:7a:66:0b:34:f8:87:cc:52:e9:
         eb:7d:37:e7:7a:4e:d5:ba:04:9c:28:03:4f:96:42:eb:8e:5b:
         0a:c0:25:60:42:63:15:fb:62:f2:50:36:dd:39:73:40:e4:2f:
         0c:23:92:3b:d3:1f:11:cc:f5:08:40:fb:3f:d1:c3:91:88:09:
         30:f9:ef:f5:f9:44:5f:04:f8:24:9b:6e:a1:e2:76:3d:e5:69:
         40:3e:d4:96:28:b9:c6:d1:b6:38:5f:bd:f1:82:4c:f5:e8:3e:
         e1:a8:59:91:96:26:8d:ef:8d:51:39:ce:cc:9f:4f:5e:d0:b9:
         6f:9e:fe:db:6b:45:8e:61:3c:2b:f1:36:cf:b5:64:03:56:e6:
         2d:b9:02:9e:7a:48:56:45:7f:d0:07:fe:8d:af:3d:11:55:29:
         4d:33:1a:b1:33:76:f9:b3:db:ee:62:03:12:d3:02:96:b3:b6:
         48:51:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----