Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063d4a430e1b8102fe7591e1753e1647cdad13d9.cer
File:                     063d4a430e1b8102fe7591e1753e1647cdad13d9.cer (raw, json)
Hash identifier:          ulAqCxSUcCLjtCyRingfZ3WDr8x3V6jLZGk4khiN2zo=
Subject key identifier:   8F:34:D0:A6:B0:F4:2A:6B:5A:76:81:B1:F7:4F:32:09:7B:9F:20:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6A6C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/063d4a430e1b8102fe7591e1753e1647cdad13d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2020 15:47:58 +0000
Certificate not after:    Thu 07 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 263218
                          IP: 191.98.192.0/22
                          IP: 2803:3280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14067401 (0xd6a6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 15:47:58 2020 GMT
            Not After : Dec  7 04:00:00 2023 GMT
        Subject: CN=063d4a430e1b8102fe7591e1753e1647cdad13d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:cc:0e:de:03:fc:1a:3f:34:a1:7b:59:52:
                    33:c0:07:d3:11:14:a5:cc:02:f1:35:f5:11:ac:53:
                    05:87:5a:bb:cd:41:f5:6c:ea:da:04:a2:66:d7:f2:
                    63:c1:20:b0:14:30:f5:77:89:30:94:03:c7:16:1f:
                    36:e1:ad:47:39:84:ab:14:af:f4:52:7b:9e:fb:7e:
                    e0:03:36:20:d2:77:bf:7b:38:32:9d:a3:af:11:4c:
                    30:be:9d:cd:3e:1d:6d:d5:b7:e4:c7:85:5e:57:f3:
                    c0:c7:de:97:da:0b:39:34:c9:41:b0:5e:7b:87:0a:
                    a4:8a:2c:fe:50:b8:86:1a:24:74:20:38:d0:a2:30:
                    64:2e:b7:2f:03:76:4d:73:15:67:e5:af:e6:90:33:
                    33:2f:c2:c2:f3:74:25:11:36:54:3d:58:37:54:60:
                    4c:17:fa:a0:45:29:ff:81:bd:35:47:4b:59:7b:2d:
                    86:49:3e:ba:53:db:0c:7c:2d:c2:e2:13:c0:e1:5e:
                    12:22:ef:26:d3:34:ce:3f:8a:4d:d6:30:d6:30:15:
                    5d:07:5e:b0:6b:48:93:b2:1d:fc:7c:9c:45:b0:9c:
                    40:40:2f:6f:51:16:65:9d:ab:45:e3:d6:6c:ab:7c:
                    9b:89:ee:d9:05:79:36:d7:da:4b:1a:1f:36:32:ea:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:34:D0:A6:B0:F4:2A:6B:5A:76:81:B1:F7:4F:32:09:7B:9F:20:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/063d4a430e1b8102fe7591e1753e1647cdad13d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.192.0/22
                IPv6:
                  2803:3280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263218

    Signature Algorithm: sha256WithRSAEncryption
         c2:72:cd:1e:74:b3:0d:c7:72:ed:be:63:b8:b5:dc:36:5e:48:
         d2:a1:c8:3d:1a:4e:bf:fd:48:9e:81:6b:ba:9a:0d:75:f6:d2:
         88:68:86:5d:4f:9d:a4:1e:b9:ad:bc:76:ba:3c:c5:e9:1e:8b:
         56:14:2b:0d:c1:13:17:3e:7d:37:c2:4e:18:65:16:3d:5b:bb:
         cd:66:44:cb:3a:34:e1:6b:40:33:22:3f:09:e3:57:19:65:44:
         be:4f:73:78:dd:d0:e5:c3:9e:77:7f:e2:3a:59:c8:f9:78:58:
         5e:d9:31:f0:cc:d2:af:e6:01:8a:d9:b9:4e:3c:68:ec:a9:e1:
         48:b4:17:87:61:7e:81:22:b6:75:44:89:6c:6d:72:1e:0d:b2:
         c2:31:2a:df:d2:68:ef:08:32:6e:4e:6e:23:6c:ef:72:32:99:
         8b:b6:e7:43:7c:d3:24:dd:d8:0f:ee:b4:0f:5f:c4:35:b2:9f:
         13:cf:3e:cb:7c:d5:04:12:0a:e2:64:79:2c:fc:f3:01:cf:6b:
         ca:62:af:94:dd:5f:77:8f:53:e5:b6:16:55:46:ab:73:c5:82:
         75:14:09:03:38:1c:27:d7:a6:b9:28:6a:da:a9:9b:22:ed:8c:
         fe:9e:cf:3d:03:c9:c9:9b:5c:54:3e:46:00:d5:4a:1d:6f:f0:
         42:b1:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----