Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
File:                     3ead659559971c8e6c9735bc245323c57109fb64.cer (raw, json)
Hash identifier:          cKz8DS4cGQlTKThMNnnUkRAVGqp1N1wcAum9TTAaTl0=
Subject key identifier:   FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE4661
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 14:12:35 +0000
Certificate not after:    Tue 26 Nov 2024 15:15:12 +0000
Subordinate resources:    IP: 2801:1c8::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16664161 (0xfe4661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 22 14:12:35 2022 GMT
            Not After : Nov 26 15:15:12 2024 GMT
        Subject: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:f9:29:b7:16:a7:0d:46:70:14:3b:2f:60:
                    4c:32:5a:80:02:23:da:7e:ad:eb:6b:ac:05:4c:7c:
                    91:18:b6:96:bd:a2:47:f8:51:3c:4c:6a:01:9d:4b:
                    0d:32:5e:c6:64:df:27:a4:15:cb:34:4b:5b:06:85:
                    1e:94:30:15:fc:cd:0b:9d:19:1a:72:26:d8:d1:94:
                    8a:ff:c6:3a:48:69:0d:df:c9:98:13:4c:12:3e:6f:
                    d0:6e:5c:b3:0c:38:26:26:97:19:99:3e:b1:02:05:
                    f4:a3:51:0a:68:14:23:d5:ac:9f:c3:ed:df:11:84:
                    bd:cf:88:83:81:1c:64:3e:da:da:5c:9b:62:0a:94:
                    24:1d:fc:50:1e:12:06:5c:56:e4:51:0b:b0:59:48:
                    da:11:d1:1e:6d:34:79:48:a1:56:5a:aa:0e:97:a1:
                    ef:f2:7c:f7:a7:f2:f7:b5:ce:16:df:eb:be:25:07:
                    71:8b:53:61:72:76:70:d0:a5:4a:f5:ad:73:f8:d8:
                    c1:e5:d9:fb:fa:52:0a:49:1e:63:8f:9d:c9:e8:29:
                    f6:77:d1:7f:d7:2b:64:90:7a:52:c3:69:ae:c7:2a:
                    9a:63:22:fc:36:cc:bb:12:ff:54:fb:4f:3e:10:e7:
                    9c:ab:4c:ac:b5:67:10:aa:db:62:a8:93:5c:0d:54:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:8b:26:c8:f9:26:c2:44:bf:2f:fa:db:6d:13:5c:c4:ae:3e:
         84:6c:c7:1a:47:0c:b4:48:b5:bc:3a:1a:73:ae:0f:16:9f:0a:
         14:a0:9b:ee:86:62:32:3a:58:98:98:d2:2e:d8:80:76:d2:9b:
         d4:a6:5c:b1:00:8d:7a:ca:a0:c8:d7:2c:b1:1b:35:c9:9d:69:
         d7:a4:bf:9f:0a:6e:00:3e:e0:3d:38:f9:85:07:7e:2c:7a:92:
         48:79:12:b6:1a:ec:8e:6b:d8:2d:a5:e5:ef:98:92:60:33:c5:
         0c:1b:66:b0:0e:2c:41:3a:07:34:c4:28:b6:ce:f5:6a:42:5b:
         b3:71:c3:3a:f5:c7:be:8d:df:ba:38:83:f9:dc:51:ab:89:2d:
         30:7f:f9:7f:c5:d4:2b:41:ed:5b:0a:d2:23:60:f6:e0:67:f9:
         12:22:a2:83:07:4b:93:79:4c:e4:78:5d:54:29:c2:57:f2:d2:
         18:90:03:9c:b7:d0:36:0a:20:d7:d1:bc:43:b5:fa:ce:80:6f:
         87:d6:23:64:c5:69:c0:20:47:36:b1:4c:f5:6d:be:88:f0:3d:
         fd:53:c9:bc:ae:80:44:6f:38:a8:e2:78:68:24:ab:4e:5c:76:
         dc:f1:3f:5d:7f:07:0a:10:55:fe:21:dc:1b:bc:a9:51:82:ee:
         20:32:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----