Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer
File:                     07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer (raw, json)
Hash identifier:          eZsHCO/y+pXaBaTkm0Vy1RKhAE5KPiLQcnOrBfq+7zg=
Subject key identifier:   C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F09482
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 03 May 2019 14:58:47 +0000
Certificate not after:    Sun 04 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 11311
                          IP: 200.59.64.0/18
                          IP: 201.221.96.0/20
                          IP: 216.244.192.0/18
                          IP: 2803:9780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15766658 (0xf09482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 14:58:47 2019 GMT
            Not After : Aug  4 05:00:00 2024 GMT
        Subject: CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:b9:33:67:28:d1:1c:a4:8d:e6:05:05:e3:
                    3d:12:0f:7d:50:9f:f6:33:d8:47:cb:5e:6e:4d:98:
                    ff:49:3c:ed:af:44:7b:f5:9b:c1:11:7e:aa:f7:ce:
                    9c:73:99:a0:32:4b:b4:15:6d:20:25:b6:2f:96:2d:
                    20:24:70:c9:e5:28:28:61:eb:e4:ca:02:26:7c:c5:
                    de:c7:7d:5d:9e:57:08:c0:1f:73:62:ae:67:3d:ec:
                    b3:db:bc:62:1d:df:c0:cc:fe:1c:27:f0:ac:98:0c:
                    fb:a6:9b:e7:ef:42:a5:db:a5:5f:79:93:59:c9:9a:
                    da:67:bc:35:11:42:21:3e:0e:db:e4:bd:83:80:0e:
                    40:51:2e:36:8f:7f:37:68:22:93:03:ce:b7:49:83:
                    fc:a9:3f:ba:a6:22:40:dc:48:01:dd:61:de:de:42:
                    f5:e9:e4:40:ac:02:66:89:fd:dd:32:36:39:35:7e:
                    fe:94:7e:45:83:65:a2:f2:14:40:dd:85:1e:1b:45:
                    9e:23:d6:33:09:da:e0:65:a2:84:d9:98:a8:fc:a6:
                    e6:29:59:e8:2a:09:db:2f:20:9a:fc:4a:54:50:ff:
                    86:31:c5:d4:f4:34:1a:a2:b5:12:08:4d:7c:97:ee:
                    da:2f:7e:53:ae:a5:7e:51:79:17:da:4f:91:97:83:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.64.0/18
                  201.221.96.0/20
                  216.244.192.0/18
                IPv6:
                  2803:9780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11311

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:7b:43:6f:bc:09:3d:a9:7f:93:e9:4d:00:49:cf:52:c6:
         f2:c4:5a:80:32:60:fd:0c:3a:14:5d:24:36:fc:24:b0:f4:30:
         28:6a:d2:b8:e0:2c:1f:c3:72:77:f0:cb:3c:a1:ff:c0:b5:28:
         c1:58:f9:1d:7c:de:e3:74:c4:e4:64:38:84:c0:89:ba:76:8d:
         e6:78:d3:93:86:b3:29:6c:15:75:b5:d5:5b:db:4e:21:04:fa:
         bd:41:de:55:6e:2c:a9:2f:9b:e9:dc:86:d3:61:81:4e:dc:9f:
         d8:4b:48:75:89:c1:4b:f2:12:c2:99:73:37:39:ff:91:e6:4e:
         d6:bd:16:1c:a7:6c:c7:50:a1:24:d7:b2:84:76:72:e3:64:d8:
         ad:73:d8:1a:00:39:f5:42:12:7a:07:81:05:b3:aa:6f:1a:23:
         d3:6e:42:58:a8:15:1f:f5:52:e3:b5:6d:ab:a6:db:b7:ed:57:
         99:5a:da:24:e4:ce:54:e0:05:8c:d2:b5:1a:c4:ec:cb:6a:e2:
         1f:2e:21:32:07:c6:4d:51:2b:c9:aa:b6:58:55:b5:6f:0e:c1:
         7d:e9:ee:a2:6f:27:b3:07:2f:90:b0:67:a8:6f:35:b8:88:f5:
         94:a5:24:d2:09:b7:5b:12:63:2d:56:f1:81:34:d1:85:5a:e5:
         b7:bd:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----