Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer
File:                     76297e078144b7f66e2711a6f32f1a781bd74804.cer (raw, json)
Hash identifier:          1tjJQNGt8Beg2Q0Nzz+pNcE58ckaan1pBwltYNU2FXg=
Subject key identifier:   6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102A946
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/76297e078144b7f66e2711a6f32f1a781bd74804.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Apr 2021 23:05:11 +0000
Certificate not after:    Wed 01 Jan 2025 13:40:42 +0000
Subordinate resources:    AS: 271868
                          IP: 200.215.228.0/22
                          IP: 2803:8c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16951622 (0x102a946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  1 23:05:11 2021 GMT
            Not After : Jan  1 13:40:42 2025 GMT
        Subject: CN=76297e078144b7f66e2711a6f32f1a781bd74804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:fd:0d:2e:46:45:75:ac:5a:76:1e:71:21:
                    eb:18:af:49:66:44:85:5d:26:72:42:56:68:70:71:
                    e5:05:ab:f9:c4:1c:f1:0b:5e:e2:b1:94:0d:34:97:
                    79:c3:1f:19:a4:64:22:1c:3f:59:e2:d7:23:cc:a8:
                    02:a0:9c:42:11:a9:e4:5d:bb:6e:d7:6f:d4:00:3d:
                    52:4b:dd:2b:8d:82:5a:e5:d2:63:0d:71:5a:af:e4:
                    b3:e8:eb:f2:8e:a0:97:ed:fa:c3:48:96:59:f7:96:
                    09:cd:ab:a4:39:73:84:a4:06:2f:99:0d:f9:76:3f:
                    1d:2c:6a:ae:81:4d:f4:cf:d9:bc:9f:64:4e:77:d3:
                    84:28:d4:8b:85:81:c0:ed:2c:d6:09:ad:c3:1d:54:
                    af:77:a3:4a:da:3f:ef:cd:c8:6a:2e:ac:71:ab:2e:
                    d5:79:23:52:5b:fb:24:af:53:07:93:ba:38:39:ae:
                    bc:6a:f6:09:4c:6d:22:85:3b:9b:2e:fc:19:d3:0a:
                    78:43:fd:0a:0a:ea:93:7d:1d:12:60:3d:9a:1d:22:
                    a8:5c:a8:0c:76:8a:59:9d:d3:20:43:bf:21:08:db:
                    fc:bd:2f:a9:10:6a:0f:10:32:24:cf:57:c8:ed:a4:
                    37:22:9a:2f:58:88:30:53:31:40:91:63:a7:bf:73:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/76297e078144b7f66e2711a6f32f1a781bd74804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.228.0/22
                IPv6:
                  2803:8c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271868

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:08:0d:2b:21:92:a8:07:23:dd:cc:d6:8f:a0:83:99:43:
         eb:84:91:6b:6b:45:51:68:a3:10:2b:0b:d8:47:a7:cd:1f:96:
         50:3b:71:c3:e8:45:3f:b5:1a:27:d1:3a:48:44:03:ed:33:76:
         97:fd:f9:d9:08:b4:c7:fa:f3:00:fc:9b:1f:6f:be:aa:b3:20:
         ee:c3:f1:66:fb:76:96:f5:a5:e4:26:b0:f9:db:15:ee:22:6a:
         c7:bb:ce:4c:5e:58:32:33:74:76:c6:37:67:c0:ef:54:61:7a:
         ff:b1:25:40:07:4f:ea:a7:f7:d1:98:66:57:07:5b:70:c6:74:
         b2:6f:2c:f3:73:e4:a0:16:27:3c:6f:2a:a1:7a:47:d5:d8:cb:
         3b:2b:83:db:98:86:04:8e:34:29:62:11:4d:4d:1a:05:31:ca:
         45:f8:42:78:ed:18:e6:be:b2:86:9f:de:e4:a3:7c:e0:42:ae:
         95:bb:97:ac:47:a1:ec:28:09:29:33:b1:ba:4b:5a:8c:3e:b6:
         d2:b0:6a:4f:e6:d4:af:1e:86:4a:13:8a:67:61:81:3a:16:77:
         69:2f:24:c1:33:04:db:f4:dc:bc:ea:69:93:19:f9:a5:a2:13:
         81:f4:86:c6:15:d4:7f:5c:de:86:66:34:91:37:1d:dd:10:07:
         4c:9f:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----