Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19f89554bd97062b5050b6d4a4f08b8edda03382.cer
File:                     19f89554bd97062b5050b6d4a4f08b8edda03382.cer (raw, json)
Hash identifier:          +TfTIvyLcH0cNbGT4zKgmaR8i9E6YrAF7mc8kU6kHvU=
Subject key identifier:   F4:F9:11:32:73:97:EC:89:9A:FF:2A:16:20:E0:C6:44:8C:DF:87:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBEA07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91117933-6652-475d-9a6d-1c30fb79e623/19f89554bd97062b5050b6d4a4f08b8edda03382.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91117933-6652-475d-9a6d-1c30fb79e623/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Dec 2018 14:33:38 +0000
Certificate not after:    Sun 30 Jun 2024 21:55:28 +0000
Subordinate resources:    AS: 266906
                          IP: 2801:16:5000::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15460871 (0xebea07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 14:33:38 2018 GMT
            Not After : Jun 30 21:55:28 2024 GMT
        Subject: CN=19f89554bd97062b5050b6d4a4f08b8edda03382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:2a:6a:88:49:5a:bc:7a:18:cb:be:96:d3:
                    d2:13:7d:99:fb:0f:fb:2c:78:cb:af:48:8f:64:29:
                    67:9d:ef:7c:76:46:ac:b5:31:0f:5a:c8:5d:72:ab:
                    70:7f:3b:ca:6a:05:e0:ea:41:63:6b:0d:c3:30:ef:
                    83:65:1d:ec:4a:18:29:71:24:25:68:b5:e7:35:73:
                    95:2e:3d:b2:a9:55:4a:7a:7b:46:da:d6:96:76:88:
                    45:d0:ad:3c:09:8b:0b:0a:67:77:2c:97:30:f2:bb:
                    48:9d:0a:54:4c:63:06:25:b2:b7:88:54:00:a8:ca:
                    29:8b:b9:9d:ad:a5:33:58:f1:36:03:63:da:ad:06:
                    c1:c1:f1:77:58:12:5e:fb:11:2d:0a:92:14:d5:e2:
                    b9:d7:53:1f:95:89:9d:4f:74:5d:75:92:70:9c:9d:
                    3f:d3:ad:48:18:e6:e9:da:d3:6e:4d:e4:ff:6c:90:
                    d0:d4:8a:51:14:ce:10:79:c6:15:e0:d5:f9:b5:77:
                    b9:f0:1e:41:ed:21:08:cf:6c:b7:23:a6:7c:a3:bc:
                    c5:75:d5:68:9f:02:38:b8:60:92:a1:9a:77:4d:eb:
                    e9:04:d1:88:74:fc:95:a8:36:3d:7e:7a:43:20:fb:
                    2a:c4:7d:7c:c7:1d:3a:0d:ba:67:72:53:75:0c:f3:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:11:32:73:97:EC:89:9A:FF:2A:16:20:E0:C6:44:8C:DF:87:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91117933-6652-475d-9a6d-1c30fb79e623/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91117933-6652-475d-9a6d-1c30fb79e623/19f89554bd97062b5050b6d4a4f08b8edda03382.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266906

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:f8:8e:15:f4:8b:aa:5b:2a:8c:90:cb:5d:c4:96:88:d3:
         3b:b4:d9:11:9e:c6:fd:7b:8e:33:5d:a4:73:09:77:af:7b:e1:
         62:ab:0c:7c:b7:95:7f:0f:5c:84:3b:4a:be:25:fe:65:1a:37:
         6a:f0:b1:3b:63:ce:7e:5b:23:7a:58:e7:7b:f6:6a:5a:fb:5f:
         12:d8:02:dd:6b:37:c8:a1:0d:1f:4d:8a:bd:37:f8:e6:e5:89:
         ec:07:a8:04:ad:d7:a6:de:61:25:24:c2:03:36:81:ab:94:7f:
         17:c8:76:23:dc:d9:dd:4e:69:26:94:8f:ae:d5:63:13:d4:cb:
         25:8b:00:e9:87:d6:bc:74:c0:ed:58:19:88:ed:93:66:3c:81:
         5e:67:28:89:b5:89:bd:e5:99:75:02:21:89:b0:22:0a:de:60:
         0c:0f:92:a4:ec:f3:c0:38:16:af:2c:99:c4:6f:1a:d2:23:5d:
         6e:ea:fe:c5:11:4d:4a:88:d2:b6:43:d9:e0:f5:d4:49:a3:3d:
         b0:6a:31:bc:eb:ab:70:36:41:4c:3a:95:c6:fc:fb:7b:66:ab:
         58:8b:62:c0:fb:33:29:82:d5:30:f1:79:8a:c9:62:ef:9b:fa:
         48:df:2c:01:3c:c2:77:b5:2f:43:5e:12:57:c1:c0:c5:47:53:
         29:ed:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----