Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0347c0fec9316885a81e931cbc3693f0c24169f.cer
File:                     f0347c0fec9316885a81e931cbc3693f0c24169f.cer (raw, json)
Hash identifier:          IrNEPm3Ck/jbwaBxOYWm0UnrbT6uhczPJo+qZzOOqsc=
Subject key identifier:   05:F2:81:08:DF:C8:CD:9D:FA:B4:6B:2C:52:4C:AA:F6:DF:C2:9F:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE5418
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/f0347c0fec9316885a81e931cbc3693f0c24169f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Sep 2021 22:03:13 +0000
Certificate not after:    Tue 26 Nov 2024 19:22:59 +0000
Subordinate resources:    AS: 264856
                          IP: 179.48.252.0/22
                          IP: 190.14.144.0/21
                          IP: 2803:8480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16667672 (0xfe5418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 22:03:13 2021 GMT
            Not After : Nov 26 19:22:59 2024 GMT
        Subject: CN=f0347c0fec9316885a81e931cbc3693f0c24169f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:9a:19:43:b3:72:30:1f:d9:46:de:cb:ce:
                    1f:a5:23:b0:a6:72:06:3f:a0:ee:6a:53:d0:c0:a2:
                    2e:86:2f:76:91:76:2b:ad:79:fd:8c:e4:12:4a:a9:
                    27:96:9f:fe:20:54:4e:3f:1f:d6:e6:b0:42:7b:8d:
                    45:e4:d8:aa:57:78:9f:e7:d7:62:00:9d:6a:d3:20:
                    b2:e4:2e:6c:9e:8d:93:55:54:b2:03:32:2c:ab:9a:
                    68:39:ab:3f:73:9f:16:e6:cd:89:56:4a:f8:47:40:
                    f3:10:2b:46:c5:ea:90:e7:36:60:c9:ed:2b:30:8b:
                    4b:e6:fd:1e:f7:0a:16:e9:60:f9:9b:3c:b0:56:f4:
                    3a:3e:4c:0b:2d:23:f2:ba:ce:ad:04:82:8f:5a:bd:
                    61:8f:e0:29:b3:d2:a3:c1:64:75:44:09:aa:92:b6:
                    2f:fc:8a:f1:36:f3:85:a9:f0:09:71:a0:52:68:81:
                    1c:f4:20:db:3e:32:c2:8b:d5:dd:4b:32:ee:d5:2e:
                    f2:af:de:f7:6c:6c:25:a8:b3:14:27:fc:93:7c:f3:
                    1d:fe:be:3d:4a:fa:02:33:fb:cc:1b:8e:dc:b3:99:
                    bb:f4:e7:da:93:76:d7:72:0d:ce:01:d7:54:2c:40:
                    19:ec:33:6d:e3:33:7e:ac:c8:49:a4:a4:75:a7:e2:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F2:81:08:DF:C8:CD:9D:FA:B4:6B:2C:52:4C:AA:F6:DF:C2:9F:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/f0347c0fec9316885a81e931cbc3693f0c24169f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.252.0/22
                  190.14.144.0/21
                IPv6:
                  2803:8480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264856

    Signature Algorithm: sha256WithRSAEncryption
         af:8e:74:3d:0c:97:b7:d7:2b:9f:4f:d0:aa:d9:e7:73:9b:80:
         6e:2d:23:ba:1c:15:71:d7:15:46:b2:77:6b:2d:62:ae:36:31:
         b3:a1:1b:59:31:89:59:87:25:57:c2:8b:88:8a:b5:ff:be:05:
         3d:5c:69:7e:79:f9:ce:be:d9:1c:6c:46:6b:4d:51:01:cd:38:
         ff:e6:cd:8b:ab:26:6b:fb:fa:68:66:2a:06:31:17:46:f5:4c:
         13:7b:a9:b6:7c:04:a2:96:07:4d:76:39:f3:5a:4f:30:0f:af:
         7c:48:93:ff:da:28:82:70:2c:36:73:17:dd:bf:f6:d4:b9:91:
         40:a2:23:60:db:b0:1f:ea:74:62:fa:47:38:1e:45:36:c0:c4:
         9c:2d:76:2a:55:be:87:b3:33:48:4f:1d:fd:ac:93:6a:4a:1b:
         7d:07:af:d9:1c:f9:da:90:12:86:0a:9f:99:2d:7f:b1:35:60:
         86:e4:6d:37:c5:72:c2:d4:e0:75:0f:21:84:af:d6:01:40:50:
         1b:12:85:46:d0:f5:ae:25:57:f3:71:52:fa:33:1f:87:5b:5f:
         64:e5:75:ef:68:9d:16:91:d3:d0:6e:bb:1c:4b:32:63:61:bd:
         95:31:02:09:09:c8:f7:6a:3a:73:fc:67:be:2a:a2:d8:b9:1b:
         d3:4e:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----