Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.cer
File:                     9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.cer (raw, json)
Hash identifier:          KGG5tpDPnzIrfPmYmcgqO5ZHPjhsA/7dCJih67UrfaA=
Subject key identifier:   28:7A:3F:A8:FC:36:C7:C2:70:4E:C9:91:E7:7F:14:E8:F3:7F:97:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE0171
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Aug 2022 12:42:36 +0000
Certificate not after:    Sun 24 Nov 2024 15:36:47 +0000
Subordinate resources:    AS: 266708

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16646513 (0xfe0171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 12:42:36 2022 GMT
            Not After : Nov 24 15:36:47 2024 GMT
        Subject: CN=9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:87:6a:5e:b1:6a:1a:f5:cc:d6:c5:a2:09:
                    07:0e:61:3e:0f:50:67:1d:47:81:99:bf:e3:b4:74:
                    e5:0f:30:92:3e:1b:5d:a4:c6:6d:14:bd:25:79:47:
                    46:74:e3:4a:b7:1f:3d:e0:17:c0:a8:09:1e:36:0b:
                    85:79:90:80:9c:7c:23:8d:dc:94:55:53:13:92:cc:
                    d5:35:51:dc:74:a2:f8:90:dc:e4:18:a1:57:cb:17:
                    59:df:32:eb:5d:7b:ad:9d:fa:50:38:bd:9d:2a:3c:
                    12:bc:1c:db:18:65:76:6d:c7:ac:b0:7c:3c:2d:6b:
                    cc:a6:5c:51:54:85:88:be:37:31:74:81:03:43:fd:
                    fb:8a:a0:c6:5b:65:1f:85:1b:bf:c7:38:bc:6c:2e:
                    69:9b:ee:d6:5a:7f:4c:8d:e5:de:c0:19:80:c1:ae:
                    fe:f3:74:42:51:40:4b:ab:23:e5:9d:c2:4b:9e:9c:
                    0d:1c:ff:af:68:cc:0b:d4:49:f7:e6:74:26:f8:43:
                    6d:a3:63:64:40:f4:9a:b4:97:48:37:91:4f:0f:16:
                    2d:d5:98:bf:cd:ea:71:27:d5:2e:68:22:1b:fc:fa:
                    ab:e0:4d:76:71:51:96:0d:a8:7c:ff:32:33:45:c6:
                    89:d8:56:c3:e5:e6:b8:17:7b:4f:65:cb:e7:d0:09:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7A:3F:A8:FC:36:C7:C2:70:4E:C9:91:E7:7F:14:E8:F3:7F:97:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266708

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:86:25:ec:d8:2f:c6:b0:02:3e:a1:bc:55:38:c3:30:fe:
         5f:f6:e4:39:9c:f5:bf:a8:a9:d4:fb:03:a7:bc:95:2e:44:72:
         e5:ee:bf:e6:ee:19:0f:e3:51:55:7b:cc:cd:52:f4:c3:18:eb:
         19:eb:09:98:d1:39:fe:38:1b:ce:47:3f:55:c9:f2:fb:30:50:
         08:67:87:16:07:4b:2c:68:6f:f9:5a:19:e1:09:d8:8d:a6:c8:
         70:63:4b:71:97:30:8c:d5:a5:fb:eb:50:fd:2e:c7:6c:bb:1e:
         f4:5a:a5:d1:ca:62:48:1b:c3:30:3d:43:33:ca:c6:cf:e7:4c:
         68:1a:fb:17:93:8a:d9:c5:c0:d9:07:10:71:9b:2d:12:93:5f:
         e2:cf:4d:96:8f:dc:dc:9f:06:9b:e4:44:74:bd:9b:bd:ec:78:
         da:39:4a:59:0e:30:b6:de:af:71:d1:79:0f:09:69:0a:b1:ca:
         67:84:29:65:8a:0e:b4:e9:ad:eb:e6:5b:30:0b:59:b0:c9:27:
         2c:a2:91:97:82:04:8d:c8:82:37:f3:fa:84:f1:6a:e6:63:59:
         07:fa:4c:5d:f9:a5:80:58:3d:35:ba:e3:98:10:c7:7a:49:9b:
         78:7a:ba:8f:2f:3e:b9:fe:8e:0a:34:e9:8d:69:fa:e8:e9:61:
         8e:47:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----