Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer
File:                     ead29b83faed797d3bc08fb554018f7693cf4391.cer (raw, json)
Hash identifier:          WuHE/sE1I/BT5H/BF1vzb+E5FPiTL7N0zg5SlA36Eww=
Subject key identifier:   0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010162F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ead29b83faed797d3bc08fb554018f7693cf4391.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 15:20:43 +0000
Certificate not after:    Tue 17 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 10964
                          IP: 200.31.224.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16868084 (0x10162f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  2 15:20:43 2022 GMT
            Not After : Dec 17 04:00:00 2024 GMT
        Subject: CN=ead29b83faed797d3bc08fb554018f7693cf4391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:06:6a:97:55:db:b1:37:d1:32:7c:ea:bf:
                    ed:43:f7:6f:3b:0f:34:8f:c5:e4:e7:1f:1a:a7:10:
                    c9:f0:5f:9f:12:c4:5b:0b:a1:38:7c:28:6b:d1:44:
                    17:ec:d0:82:93:0d:15:6d:25:a8:48:e3:99:86:15:
                    75:a1:ba:20:85:b9:6a:b6:9f:2a:49:11:0b:96:47:
                    8d:93:b5:21:be:db:1d:a2:ae:e4:62:39:12:5e:22:
                    4c:17:a7:6c:d2:0d:b7:e7:27:13:77:9e:80:94:24:
                    78:06:2a:a5:0f:24:c3:d2:24:46:13:f9:10:83:ef:
                    4e:8a:ea:cf:8e:cb:cd:93:b7:39:2f:2e:ac:40:3d:
                    ad:ff:67:17:9e:54:8c:ad:41:04:3f:22:fb:35:ac:
                    4a:0b:3b:7e:73:c2:77:a1:e7:7e:78:ab:60:a9:be:
                    eb:88:09:1a:3b:5a:51:5e:ed:99:df:6a:23:61:ec:
                    9d:e1:cc:fb:0a:c0:7d:4a:0a:5b:b4:9b:da:cc:8d:
                    37:e3:84:61:44:be:06:84:dd:70:67:ce:71:c1:d8:
                    05:f2:89:79:ce:8c:aa:b8:50:6e:3f:28:89:b9:ad:
                    e1:9e:c7:1a:6a:fb:d2:55:b2:c4:46:47:c5:4f:02:
                    5c:98:dc:10:5f:8c:04:b1:16:0f:e3:fc:04:e0:23:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ead29b83faed797d3bc08fb554018f7693cf4391.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10964

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:a1:5b:cf:2a:4b:d8:c1:e8:64:bf:a9:7f:38:4b:10:71:
         af:db:03:24:e6:8a:03:35:4a:e3:5b:85:97:61:dd:ff:22:f9:
         d6:a0:6c:19:90:94:78:4a:74:3d:76:bb:18:dc:26:16:6a:96:
         f5:06:eb:b9:51:05:73:76:3e:ee:ad:80:ae:4e:a1:a4:cf:4a:
         16:6f:e3:f9:c5:69:13:93:4a:92:93:fa:bc:34:4d:1f:24:98:
         69:92:49:a0:29:02:b5:4c:20:22:83:ad:ce:1e:58:42:cf:79:
         be:bc:8c:bd:27:6b:de:6d:26:c6:fb:cd:df:36:6d:17:36:20:
         86:3a:11:17:38:64:7a:f4:b2:b8:4d:e9:70:9b:4a:36:db:da:
         13:63:94:76:d9:53:67:7c:49:e5:23:5d:f4:1c:72:d0:79:da:
         40:ce:34:25:8f:b8:2f:d0:59:e2:24:92:0d:62:d8:21:35:c3:
         0f:73:a5:a9:11:44:a7:29:c7:86:c9:60:51:34:31:c7:74:68:
         8c:6b:5b:9e:21:fc:6a:70:6a:49:cd:86:85:c8:51:60:23:7a:
         05:20:0d:7a:6c:18:cb:15:37:2d:f0:e6:cf:82:7d:ad:14:ce:
         a2:b0:b4:4e:27:3e:2a:5b:a8:22:14:54:e1:61:2b:00:40:b1:
         05:bc:29:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----