Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/072ad058a243e3c867d14ea1739782d9765281de.cer
File:                     072ad058a243e3c867d14ea1739782d9765281de.cer (raw, json)
Hash identifier:          LvfT6cH+uDLmDdviGLiuwNkBqJDanhv+ZxOXiP1wGb8=
Subject key identifier:   56:19:28:47:8A:D1:F2:0D:1A:49:32:E5:B2:7E:CE:2E:3B:FF:7D:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB90B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/072ad058a243e3c867d14ea1739782d9765281de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Sep 2019 19:15:34 +0000
Certificate not after:    Fri 28 Jun 2024 20:04:02 +0000
Subordinate resources:    IP: 45.182.43.0/24
                          IP: 2803:b560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15438008 (0xeb90b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 27 19:15:34 2019 GMT
            Not After : Jun 28 20:04:02 2024 GMT
        Subject: CN=072ad058a243e3c867d14ea1739782d9765281de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:fe:a8:95:56:4c:91:32:9c:14:0e:45:72:
                    8c:d1:86:24:e4:0c:c5:32:5d:03:b2:04:0a:87:2f:
                    d8:c3:f9:6f:2d:1d:fe:60:17:67:d4:d9:e6:df:8f:
                    c9:aa:0b:99:60:9d:eb:db:f3:57:ad:0b:fb:86:5b:
                    e6:c8:3b:65:c2:d7:72:59:e4:3d:16:7c:c6:63:3c:
                    26:b6:10:dd:ab:a2:ae:72:c2:b3:b9:7e:3f:41:12:
                    b4:b7:60:e9:2d:46:da:e9:f4:70:b1:c0:60:95:cd:
                    cf:d9:ec:1c:75:b1:03:81:fc:f6:e3:5a:6f:87:c1:
                    d6:62:fb:b3:c6:e5:ba:aa:7b:ea:a2:41:dd:52:89:
                    6e:9b:12:be:7a:8a:f6:0a:fe:3e:6b:11:f2:5a:73:
                    9b:e5:99:e7:8c:2b:86:93:86:14:80:84:a2:f5:9b:
                    1e:27:95:77:0b:98:c7:62:b4:0a:a6:c7:d8:ec:a8:
                    02:e8:60:61:84:4b:a5:bd:d9:aa:4e:7b:3b:94:85:
                    67:91:03:74:c7:ff:c5:20:c6:c4:4f:94:17:0d:d8:
                    ff:a6:fe:c2:19:02:f3:ff:36:d9:f5:45:52:c0:21:
                    b2:3d:7f:47:f2:a7:36:71:34:40:4f:e2:9a:fc:33:
                    4a:14:9b:46:f3:8f:5b:8a:5d:8f:b8:e8:49:19:66:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:28:47:8A:D1:F2:0D:1A:49:32:E5:B2:7E:CE:2E:3B:FF:7D:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/072ad058a243e3c867d14ea1739782d9765281de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.43.0/24
                IPv6:
                  2803:b560::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:7c:ae:f5:69:17:18:c8:97:db:a9:2c:06:4e:a6:e4:83:ba:
         df:fe:b3:99:c2:1b:e9:7f:67:03:13:e0:75:71:74:42:a0:66:
         34:06:38:77:42:6d:b3:f2:ee:33:15:01:bc:65:98:19:5d:27:
         98:f6:72:d3:0e:5c:05:3a:2a:d1:e4:2b:04:dd:36:8b:56:29:
         f5:37:dc:32:0a:4c:c8:f9:6b:42:c2:2c:8a:95:73:21:1a:a6:
         8e:15:cd:28:b0:97:cb:a6:b2:7a:19:67:5b:d9:17:15:2c:f9:
         fb:84:ec:0e:48:2e:89:50:53:56:56:a4:1c:a1:97:fb:4c:77:
         d2:3c:8f:d4:34:1e:28:e8:c8:3d:3d:91:25:23:94:d3:d1:51:
         a6:2c:51:dc:7d:44:b7:3f:c2:1e:f2:b4:78:3f:16:84:d3:19:
         e2:35:10:d5:5a:50:15:a5:04:63:ff:98:6f:66:e6:11:d7:03:
         e9:5d:a9:3a:5a:ba:c5:3d:57:27:a2:e0:a6:93:a9:bb:c0:28:
         a6:5e:2e:37:92:a4:90:5e:ac:c4:6e:84:8d:1e:b6:d1:96:e9:
         b5:a4:ed:16:92:53:14:d4:d7:58:72:82:0d:96:1c:e4:fe:6b:
         82:85:bb:d8:49:bb:d4:c9:89:29:20:0f:9c:3c:06:da:36:14:
         8c:b8:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----