Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f90d909fa68d1db2acc878e7da541eae84a44c95.cer
File:                     f90d909fa68d1db2acc878e7da541eae84a44c95.cer (raw, json)
Hash identifier:          /oPs3HRtgGBCo68DhJqWO82tdrX54AaG3ruEe0kgbzQ=
Subject key identifier:   38:B0:83:1A:A3:BC:E6:95:1E:96:81:62:2F:FA:63:79:F0:97:F8:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED5EBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Dec 2020 21:52:35 +0000
Certificate not after:    Thu 11 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 271792
                          IP: 190.171.76.0/22
                          IP: 2803:ffe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15556283 (0xed5ebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  9 21:52:35 2020 GMT
            Not After : Jul 11 06:00:00 2024 GMT
        Subject: CN=f90d909fa68d1db2acc878e7da541eae84a44c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:4a:60:00:ef:8b:f3:08:23:bb:a1:87:97:
                    2b:32:82:c4:f3:d3:92:5c:2a:cf:20:e5:5c:c5:dc:
                    b2:fb:22:20:ce:dd:a0:74:92:91:76:6e:0e:a2:61:
                    a4:56:66:d6:98:d5:e8:90:be:1e:92:0a:1f:10:ea:
                    c0:1c:57:15:d6:17:ad:18:b8:e4:b7:f1:f4:62:da:
                    16:88:86:66:f0:6e:39:63:b7:e4:64:d0:22:2f:32:
                    cc:69:8a:86:3c:90:34:bf:0c:60:6d:1e:13:12:d1:
                    58:8a:54:bf:d7:90:16:48:65:a8:91:dc:40:2c:b2:
                    3d:4d:f5:7b:ad:08:18:0c:7d:5d:b2:59:b9:55:2e:
                    70:b6:2d:78:e3:49:d0:8a:14:ff:52:60:be:11:e8:
                    f7:ea:b0:13:fc:b6:a0:ce:c2:2f:0d:30:3d:70:5e:
                    e6:6f:8f:27:4f:dd:36:66:05:4e:af:6e:77:16:70:
                    e2:ac:0b:dd:71:8d:a3:a4:6c:df:ef:fb:66:a2:17:
                    14:13:8c:e5:36:ac:8b:b6:08:08:df:fc:f3:f9:71:
                    88:0e:03:f4:04:c2:45:5b:46:e7:4b:dc:a5:9f:36:
                    a8:de:03:74:b5:88:ba:01:44:ca:33:29:98:71:11:
                    ee:5b:cd:0f:ab:51:f4:e2:bc:11:43:e4:e0:b2:1a:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B0:83:1A:A3:BC:E6:95:1E:96:81:62:2F:FA:63:79:F0:97:F8:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.76.0/22
                IPv6:
                  2803:ffe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271792

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:33:1a:be:56:96:9c:c6:b0:98:8b:b4:86:0b:70:e1:80:
         a1:2d:08:3a:2c:e2:40:95:e3:e1:87:53:10:ab:6e:b2:b3:fb:
         ab:34:22:67:74:49:40:a4:16:12:9a:f6:72:d7:5d:c0:34:49:
         04:dd:52:1e:5e:80:b6:9a:58:05:4e:fe:73:7d:5c:aa:0d:8b:
         42:82:cf:4b:d3:cb:26:73:08:dd:e9:0d:0d:3a:6c:43:93:24:
         d4:22:84:44:34:65:ff:5e:4d:84:b6:d2:8d:18:1d:25:e6:2d:
         bb:ba:14:a0:1c:82:36:d2:5f:92:35:73:52:79:ab:3b:54:54:
         40:88:07:c4:14:15:09:00:4f:75:e2:84:8c:e5:28:68:06:13:
         a1:53:4d:05:5a:b6:62:21:a6:e0:14:d2:36:eb:bb:43:5d:fd:
         ef:ba:6f:84:66:41:67:7b:b3:42:27:2c:b8:ad:8c:19:eb:94:
         f5:fa:5c:34:23:08:05:b9:c0:f0:70:7a:78:2a:64:55:96:81:
         51:f2:54:27:b0:e4:35:5a:f1:a4:84:21:7c:15:ad:77:1c:1a:
         da:e6:8b:32:58:27:a1:2b:dc:4b:44:9b:0c:96:95:a2:6a:ec:
         04:f5:fa:30:ed:5c:62:a4:d1:d6:de:4f:b7:74:5a:d4:12:22:
         c7:3b:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----