Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer
File:                     ef9eece186acee7c98893ecb00fbad69eede01bd.cer (raw, json)
Hash identifier:          /fu8srsV2C7JU51pzjQKTGrYPiVkxqJSlpCpQldcPO8=
Subject key identifier:   72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7F3F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/ef9eece186acee7c98893ecb00fbad69eede01bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 11 Jul 2020 02:04:52 +0000
Certificate not after:    Sun 16 Feb 2025 17:50:16 +0000
Subordinate resources:    AS: 269984
                          IP: 186.148.192.0/22
                          IP: 2803:aee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16249842 (0xf7f3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 02:04:52 2020 GMT
            Not After : Feb 16 17:50:16 2025 GMT
        Subject: CN=ef9eece186acee7c98893ecb00fbad69eede01bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:c4:73:63:e7:a2:f7:ff:76:c1:b2:9a:e7:
                    19:9a:4e:0a:3b:54:22:44:7c:9e:5c:dc:87:7c:bb:
                    e1:cd:c6:af:a0:70:c6:d5:8d:02:f0:fb:41:35:c2:
                    08:3e:25:47:d9:d9:2b:db:cb:90:54:92:5f:10:26:
                    34:8a:16:fe:26:d4:81:bd:df:8f:54:8d:64:53:b3:
                    3c:04:9f:0b:fc:e2:d8:52:a8:ac:df:64:81:5d:66:
                    aa:31:ca:15:12:3a:15:b8:86:4b:18:6b:bb:7a:81:
                    6e:f2:54:76:3d:72:63:0d:8e:ea:36:7e:41:5d:ba:
                    32:57:d7:a0:9d:85:1c:1f:9f:c2:15:3c:7b:1f:ef:
                    81:28:f5:f0:d1:35:db:5b:28:0b:5c:03:87:37:ff:
                    e1:f7:e6:1a:81:cc:eb:7f:d7:dd:b1:5a:68:9b:2c:
                    a0:98:28:8c:49:a6:92:9e:02:0a:f8:cf:31:b5:c9:
                    6e:43:de:a1:c8:86:2d:87:c8:51:52:d3:54:bf:2e:
                    bc:8d:cc:f5:b4:a8:ca:f2:2f:1e:b5:0c:99:f5:ba:
                    93:4f:3f:8c:44:56:d4:cd:ac:0a:01:8e:d9:0a:55:
                    89:42:9b:4f:40:d4:65:bf:2e:e8:9b:43:a4:20:df:
                    48:8c:28:3f:d2:66:27:39:1f:f1:93:34:17:ac:aa:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/ef9eece186acee7c98893ecb00fbad69eede01bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.192.0/22
                IPv6:
                  2803:aee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269984

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:1a:ca:0c:61:02:0f:9b:a0:51:51:a1:f2:55:9d:6c:f3:
         5d:a3:5c:9d:d3:d9:52:33:92:ad:9c:bd:df:a4:0a:4e:1c:ef:
         f0:5d:44:80:ca:1e:2a:25:50:38:bf:22:49:1e:4d:02:9f:4a:
         6f:37:b5:db:c6:a7:01:7e:df:cb:c8:54:a1:c2:e3:46:7d:d8:
         82:88:4f:8b:be:64:54:5d:8e:99:ef:77:e4:9b:28:7c:9b:54:
         1b:69:f3:2e:6b:ef:dd:af:a7:0d:eb:bc:ed:3c:68:9d:5d:55:
         a8:0e:5b:44:69:09:cf:0c:d8:26:2b:db:99:76:79:9d:61:82:
         be:9c:3a:5c:29:50:17:83:ff:74:43:65:c2:fd:46:b1:76:3e:
         88:32:d0:b0:57:d5:d0:b2:4e:11:cf:01:86:c9:8b:2d:8b:68:
         07:82:92:7b:8a:c2:c2:65:dc:67:be:d0:78:15:22:fc:c1:ee:
         4e:e1:66:3b:e2:b0:e5:8d:34:f9:bf:9b:52:ec:b0:cd:53:62:
         45:54:ee:64:af:e0:81:9e:fd:cf:7c:b8:63:ef:55:6d:1c:36:
         d3:cd:b0:0f:fd:f1:d7:92:c4:cb:57:81:3a:bc:49:b7:cf:89:
         59:2c:28:4a:aa:50:4d:ad:eb:14:43:9b:ac:1d:68:e4:4e:0e:
         5d:b8:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----