Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f9bb7543db2b3a0a338c76a51790115e3158bb2.cer
File:                     0f9bb7543db2b3a0a338c76a51790115e3158bb2.cer (raw, json)
Hash identifier:          iMnay1H05Zs3JjUjrfHHLpjnn72LbNk/MzUaug/OrJ8=
Subject key identifier:   09:8C:2A:0B:FE:1F:2B:5B:D5:EF:86:3D:26:80:63:DC:EB:4F:E2:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2DA9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/0f9bb7543db2b3a0a338c76a51790115e3158bb2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 19:33:43 +0000
Certificate not after:    Mon 29 Apr 2024 16:29:15 +0000
Subordinate resources:    AS: 52262
                          IP: 186.2.128.0/19
                          IP: 2803:8d43::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14867100 (0xe2da9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 19:33:43 2019 GMT
            Not After : Apr 29 16:29:15 2024 GMT
        Subject: CN=0f9bb7543db2b3a0a338c76a51790115e3158bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:17:8d:74:7b:01:a3:13:c9:ee:78:14:bd:
                    67:2b:98:dc:7a:e7:5f:e3:79:0d:e2:4c:0d:2a:9e:
                    b0:6d:1e:5b:41:4f:5a:75:82:15:02:f5:e8:33:f7:
                    7b:eb:e1:3e:28:30:9d:83:1a:5e:f1:60:60:8f:66:
                    82:92:d4:b6:44:0c:36:c3:5d:c9:be:c4:4f:5b:d7:
                    de:73:f7:61:aa:a2:f2:ed:7a:0c:d5:70:f1:2b:17:
                    e0:e6:cb:6b:f5:0e:d2:8f:96:6e:65:4c:07:1c:17:
                    60:58:75:4d:e7:1e:5d:d6:dc:20:ca:a0:6b:f7:ea:
                    dd:c3:dc:23:b9:70:a5:56:4b:c2:8e:53:cb:4c:bc:
                    20:b9:c0:c0:60:d2:7c:d4:e5:ce:1d:32:5b:55:ad:
                    d7:14:06:cb:99:11:4b:cd:a5:4a:8e:0a:f3:a6:87:
                    f8:36:a1:36:78:0d:61:1c:01:8f:ca:c8:0f:48:44:
                    e4:d8:e7:b4:71:c2:ab:a9:e6:45:50:05:2d:4a:ad:
                    a2:2e:70:d7:f7:ba:b8:42:be:a9:40:27:eb:16:e2:
                    63:02:59:12:67:17:6b:06:17:b9:06:2c:10:37:f1:
                    f3:43:f6:8c:07:0f:14:93:d7:87:6d:10:9b:c8:46:
                    3d:8c:19:bb:d9:27:d8:66:79:3f:8f:87:f4:3c:d5:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8C:2A:0B:FE:1F:2B:5B:D5:EF:86:3D:26:80:63:DC:EB:4F:E2:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/0f9bb7543db2b3a0a338c76a51790115e3158bb2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.128.0/19
                IPv6:
                  2803:8d43::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52262

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:dd:b6:46:bf:b8:64:00:a5:4c:69:ce:bd:f6:2f:12:8b:
         6f:14:21:46:71:f3:90:91:b5:b8:66:c2:65:14:a8:d8:ee:50:
         93:c2:bf:43:87:85:e1:29:15:e4:77:27:1c:af:ae:ef:3e:8e:
         dc:a2:50:f1:d0:1a:64:d9:dd:e2:e0:dd:3a:d8:ea:7a:8e:4d:
         44:28:83:fb:bf:86:b5:bd:a7:de:cc:fe:30:c9:fe:25:87:87:
         39:e3:48:2d:56:96:98:d1:21:bd:a8:2c:60:a7:d2:cb:09:b3:
         0e:23:43:d7:fb:26:ef:cc:70:34:df:57:cd:c9:54:01:5e:2a:
         5c:53:9e:ed:de:26:f6:a1:c4:6c:e4:1e:aa:ed:0f:fd:8c:31:
         e1:e4:11:b2:ea:6e:71:eb:cc:93:43:62:0d:ee:a7:00:c8:7f:
         d3:05:a1:62:67:6b:a1:3b:56:50:0f:09:a6:09:79:4d:f4:e9:
         76:9a:ab:ea:5d:4c:f1:50:a8:89:44:c8:c0:12:6f:84:b7:cd:
         dd:1a:60:ab:96:4b:29:f9:4c:5a:1d:3a:b3:ec:e3:48:fe:7f:
         55:a0:be:54:80:7b:51:af:c6:a4:c5:d9:de:eb:59:99:53:4c:
         8b:f0:e6:7b:92:da:85:1d:08:15:fc:10:af:ee:b9:6e:92:4f:
         b3:84:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----