Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer
File:                     16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer (raw, json)
Hash identifier:          U8hUmsFyuL85IN8FPk0Tydf9GeI6C+2VWVC8tAz1q6k=
Subject key identifier:   BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDD653
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2019 22:31:00 +0000
Certificate not after:    Thu 07 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 267845
                          IP: 45.176.92.0/22
                          IP: 2803:4c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14538323 (0xddd653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  8 22:31:00 2019 GMT
            Not After : Mar  7 06:00:00 2024 GMT
        Subject: CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f1:ff:01:2c:52:e7:3f:2c:1a:2d:0a:e4:09:
                    e3:53:1d:6a:25:58:06:72:8a:9e:ff:5b:ac:aa:a6:
                    bd:b7:da:6c:10:e9:13:d1:85:95:1d:66:f9:e0:df:
                    9c:38:8d:5b:9d:ec:1d:82:53:3c:94:a4:16:c5:23:
                    8d:89:4a:42:61:27:ee:51:46:7a:3b:b0:4d:c8:6a:
                    2c:1f:e8:64:bf:60:93:99:c5:82:ce:dd:77:12:61:
                    ee:3a:f6:a6:b9:23:45:41:7a:a7:a8:eb:95:ea:ae:
                    c9:ab:85:46:06:47:13:74:49:c5:d2:17:8c:b3:30:
                    29:14:2b:4e:6e:cf:97:f4:43:98:bc:19:c7:0c:3e:
                    75:c2:9c:88:61:3f:0a:4e:42:d9:b8:0b:5b:f0:7c:
                    21:08:4f:fd:72:d8:35:79:13:10:81:c1:2a:4c:55:
                    c6:d3:6c:4f:ee:a1:74:08:61:c1:64:43:ab:50:3f:
                    a4:1c:7e:19:86:ed:59:ec:e1:ec:78:f7:a0:af:4e:
                    e8:a6:f7:03:a0:62:09:36:78:f7:f2:0b:0b:25:16:
                    8f:ab:18:c2:ef:12:49:26:71:95:62:35:bc:98:ac:
                    91:65:dc:89:48:f8:3e:ba:a6:03:fc:30:14:07:2a:
                    ea:fa:b4:5d:69:3c:1b:ca:ed:b5:e8:1e:9c:e0:17:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.92.0/22
                IPv6:
                  2803:4c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267845

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:3b:6e:be:16:31:7e:0a:21:8b:14:76:0c:6e:fd:fa:ed:
         ca:a5:9e:1f:9e:05:5b:35:b9:cf:bd:6b:7a:2c:1b:c4:a1:3e:
         7d:f5:7d:71:9c:43:e6:aa:ec:cf:99:41:d8:6a:b5:19:06:0c:
         df:d6:c4:ed:32:43:84:3e:7d:dc:a7:a6:71:40:34:b4:f5:de:
         02:e6:7d:c3:6c:5d:47:01:66:e2:ee:5c:77:7e:6b:73:4d:bc:
         73:22:ea:ad:90:9c:e8:b2:f5:30:12:15:69:89:a8:0e:d5:dd:
         0d:cf:1c:3f:c1:74:a5:b6:6e:29:28:08:87:37:de:a1:36:4f:
         80:2c:f6:5d:c3:c1:5f:d6:8d:77:8a:70:75:0b:7f:2d:00:cb:
         63:13:60:ab:b7:0e:29:a5:7b:bf:fd:cc:e5:ef:0a:fa:db:fe:
         10:f7:ee:ba:94:00:17:a5:de:0f:c6:46:de:11:d6:cd:e6:c6:
         b8:05:13:de:99:42:96:78:09:02:4b:f1:b4:97:07:19:24:28:
         79:c9:34:5f:6c:a9:6d:e5:10:0e:ca:fb:3a:74:5d:96:de:6d:
         37:86:91:43:bb:d1:1e:ff:8f:43:08:eb:ea:8a:3f:4e:fa:20:
         5f:bd:f8:1d:ad:92:70:55:17:8d:a0:1f:b8:ac:bb:8a:3f:64:
         ad:1a:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----