Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
File:                     ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer (raw, json)
Hash identifier:          tZ4Tsahl8harWiqwsZEuWFcXuCUwvAS9SqWAL65n/QI=
Subject key identifier:   B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD7348
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Nov 2021 17:31:31 +0000
Certificate not after:    Tue 19 Nov 2024 18:57:24 +0000
Subordinate resources:    AS: 265504
                          IP: 168.0.220.0/22
                          IP: 2806:21f::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16610120 (0xfd7348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  8 17:31:31 2021 GMT
            Not After : Nov 19 18:57:24 2024 GMT
        Subject: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:cb:98:59:f2:a6:22:b3:b7:89:85:74:fe:
                    2f:c6:3a:5c:65:eb:45:30:3e:f0:81:5e:3d:e7:dd:
                    f4:83:08:ad:20:e4:99:53:7e:62:90:d0:92:fd:d8:
                    8e:75:f8:21:5f:c7:de:cb:67:1a:ed:99:78:ed:76:
                    6b:7b:ef:a2:26:dd:d2:b7:62:5a:b3:00:d9:74:29:
                    9a:76:e7:aa:3a:b2:27:52:6d:1b:fa:c7:bd:b6:43:
                    d8:fa:b9:df:6d:e8:65:a3:00:2e:08:72:c8:0d:1a:
                    b1:6e:b8:ff:0a:2b:cf:bf:c4:a8:fd:18:89:36:73:
                    aa:5f:64:2d:7c:27:9d:cc:52:57:c3:d8:e5:ec:a5:
                    a0:0e:61:c3:67:e0:65:c6:27:85:ba:e8:0c:cc:45:
                    9b:4b:17:b8:65:22:6f:56:17:20:59:f8:f4:7b:27:
                    90:fc:1e:15:27:fd:e8:73:16:33:a3:9b:4a:22:12:
                    02:ab:57:fd:70:30:4f:44:f7:20:82:7d:90:43:08:
                    29:bb:f9:6a:aa:f7:48:ca:30:a2:95:9c:cf:5c:a4:
                    24:61:cc:ad:ad:ba:1c:dd:37:76:4c:8a:8a:9c:c1:
                    0a:1b:f8:ba:f1:03:87:08:be:bc:77:35:dd:1c:53:
                    7d:78:c4:5b:4f:67:c0:1c:64:96:56:3f:bb:de:06:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.220.0/22
                IPv6:
                  2806:21f::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265504

    Signature Algorithm: sha256WithRSAEncryption
         70:98:96:c8:f5:1a:1e:5e:7a:bf:7f:16:e3:4c:2f:17:b3:d0:
         e0:1a:5c:ae:e2:a0:f1:23:94:fe:3e:21:35:51:c9:bb:f5:42:
         ef:39:85:fd:84:f3:78:e7:83:c5:17:c2:f8:fb:ae:ed:01:9e:
         97:4e:f1:50:42:24:e4:9d:af:ae:eb:aa:cc:1f:60:b8:e1:99:
         54:25:1d:2e:bf:54:be:a7:2d:09:f8:c0:22:d5:6b:59:cd:e3:
         61:99:95:7d:1b:28:1a:9d:74:44:9c:6c:a4:3e:7d:ab:02:45:
         84:29:24:80:d7:eb:17:9b:05:e3:3b:06:3a:06:2e:4d:7e:3d:
         5f:39:14:72:e0:f9:2c:f7:13:19:eb:3a:76:65:64:89:92:10:
         8a:8e:d6:ac:66:7c:a8:0a:38:e7:86:c5:6e:dd:c8:31:e0:f6:
         53:a8:8c:3b:de:de:3f:62:48:dc:bf:eb:20:9d:ba:55:37:5a:
         4c:ad:0c:a1:b7:54:70:99:89:91:31:bd:83:5a:e9:8c:88:42:
         13:71:3d:9f:88:4b:db:0c:3e:c6:20:dc:94:7b:6a:1d:61:ba:
         0b:94:a4:69:57:26:91:5f:64:f2:fe:1a:0f:9c:09:3a:c8:ad:
         66:05:5c:91:04:d2:8d:99:33:76:cf:81:cd:98:2d:ff:77:35:
         4b:4c:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----