Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
File:                     0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer (raw, json)
Hash identifier:          UE0TqAkkdxLJZQsYyMT5/bDMNgeZ6S4pg4DIOoyI6jg=
Subject key identifier:   AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01019078
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Mar 2022 14:38:48 +0000
Certificate not after:    Wed 18 Dec 2024 19:54:49 +0000
Subordinate resources:    IP: 181.174.228.0/22
                          IP: 2803:cb10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16879736 (0x1019078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  8 14:38:48 2022 GMT
            Not After : Dec 18 19:54:49 2024 GMT
        Subject: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:13:bd:52:88:e1:6c:1e:a9:1c:a0:81:54:
                    53:96:c0:ac:17:df:16:d6:05:96:01:27:bf:48:38:
                    a3:aa:81:2f:f7:b4:ee:c6:d6:90:03:8f:20:3a:73:
                    8d:a4:38:bb:6d:e9:a4:d2:8a:d5:95:55:de:f8:3f:
                    2b:38:c8:3a:b7:b5:df:73:6a:86:d0:95:4b:0f:fc:
                    8a:1c:22:32:7e:35:47:fa:de:97:17:c3:eb:87:2e:
                    5f:74:d2:84:d5:07:51:06:dd:24:88:90:29:04:3b:
                    ca:c5:32:8c:a8:b9:cd:b1:1b:e0:40:99:2e:84:f7:
                    86:65:47:bb:97:fc:8b:9d:3d:66:48:e3:36:94:ae:
                    ed:94:68:82:71:9d:c0:a3:65:e2:a1:53:07:e6:88:
                    1c:be:cb:09:f7:e6:0d:d2:3b:3c:a8:ef:ae:17:e1:
                    b4:c4:90:26:57:f9:6d:3e:51:b7:6b:6c:b6:a8:8b:
                    38:ee:df:17:7b:14:f3:50:7d:3b:56:1f:23:21:89:
                    ef:56:31:0a:f4:aa:4d:c2:a4:f8:9f:31:d2:09:1a:
                    6e:f6:51:f8:52:7f:32:7a:bb:34:55:64:2d:11:5b:
                    d2:6a:f8:5e:5b:8b:f4:3b:75:ff:ab:ff:d4:34:6c:
                    6b:9e:d4:b9:3f:f1:60:0a:6c:a2:f8:39:c3:aa:22:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/22
                IPv6:
                  2803:cb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:3d:0d:67:d6:b1:c4:15:7a:0c:71:ef:a4:23:85:e0:cc:
         d8:24:59:3a:c1:5a:34:b6:b8:f7:ce:7c:9d:be:14:63:e5:72:
         a2:e9:92:e0:e9:af:c0:07:1c:d5:6c:7f:75:03:53:8b:8e:91:
         1d:83:7f:6a:ba:46:af:b6:b5:15:da:93:40:b3:24:3f:53:13:
         66:51:91:88:25:26:25:df:dd:e9:9d:5e:10:56:12:52:75:22:
         49:04:bb:d3:e5:c1:fa:b9:1c:5c:be:1b:ee:11:7d:60:0b:b1:
         45:09:f4:2b:fb:9c:42:cc:f7:57:36:f5:fa:0d:bb:c7:b6:e0:
         92:62:b1:df:af:1e:ff:b2:1d:f1:9c:b2:eb:86:f1:f6:c9:6c:
         2c:d0:8b:63:83:b8:cc:0c:30:16:dd:47:6c:bd:ac:9e:56:da:
         c1:4f:41:ce:14:7c:8d:b5:2f:04:59:43:81:4c:d9:af:db:0c:
         e4:ea:4b:48:ac:af:67:47:79:ac:c1:af:fd:b8:90:b1:0c:76:
         95:4f:72:5c:90:af:ad:a5:5b:82:5a:b8:44:84:a1:c4:ad:b2:
         ed:32:1c:99:88:86:36:f4:2e:8b:e3:0c:3e:a7:67:66:c4:03:
         7c:e9:52:4a:fc:29:e0:1d:0b:c9:ce:0c:92:cb:c0:fc:d3:ac:
         cb:55:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----