Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a6432df2042587eb3174fcd6bc3a37171044f7.cer
File:                     35a6432df2042587eb3174fcd6bc3a37171044f7.cer (raw, json)
Hash identifier:          LgLLsCZfH/Ip3lKSHmjyp9VH6F3AN/YX4Hn1V8+JqIU=
Subject key identifier:   EC:12:93:BE:21:C9:50:A9:29:C4:D0:33:E2:A8:AA:2A:3B:7E:C4:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC3C5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/35a6432df2042587eb3174fcd6bc3a37171044f7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2019 14:58:19 +0000
Certificate not after:    Fri 16 Feb 2024 17:58:07 +0000
Subordinate resources:    AS: 266775
                          IP: 45.235.96.0/23
                          IP: 2801:19:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14433373 (0xdc3c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 14:58:19 2019 GMT
            Not After : Feb 16 17:58:07 2024 GMT
        Subject: CN=35a6432df2042587eb3174fcd6bc3a37171044f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:00:8a:53:fc:1e:0e:70:ec:7b:7d:dd:c1:
                    5a:4b:9d:ca:52:f2:77:4b:04:8b:50:9e:80:ed:2e:
                    33:7a:07:56:99:f9:f5:ef:2a:65:08:43:d8:0c:12:
                    ef:56:91:22:e0:39:cf:10:e7:ab:62:9e:9e:d2:3c:
                    2f:4f:92:4a:e5:74:82:c9:91:d5:35:1b:4d:80:cd:
                    35:14:f1:0d:ed:91:df:c3:2c:d1:ba:06:e4:2a:18:
                    11:68:74:37:34:5f:e1:e7:a5:9a:13:37:f3:84:f2:
                    24:21:17:3a:fb:10:ae:0d:88:a7:23:04:e9:8d:bd:
                    60:c6:f4:36:6d:2f:b4:32:0d:89:5d:be:c7:35:a5:
                    fd:6b:b7:ce:79:ed:ef:d8:58:66:4a:f9:88:d7:be:
                    e2:c9:17:b3:bf:a4:f0:85:bc:86:5b:52:cc:cf:38:
                    31:60:e5:9a:8c:44:80:a8:f4:0d:e8:cb:e5:ac:50:
                    58:3d:96:99:3c:a5:0e:69:83:26:4e:75:ae:7a:94:
                    8b:46:10:48:03:6e:66:59:cb:2f:c1:43:0a:ca:ae:
                    9c:7b:8d:15:9c:2c:d6:cb:36:2c:8f:29:77:13:d2:
                    6f:31:30:b7:bc:ab:97:fc:7c:c4:58:ea:c5:64:b6:
                    ab:df:d2:0d:b9:3f:3c:0d:c5:2f:44:3b:be:21:fe:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:12:93:BE:21:C9:50:A9:29:C4:D0:33:E2:A8:AA:2A:3B:7E:C4:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/35a6432df2042587eb3174fcd6bc3a37171044f7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.96.0/23
                IPv6:
                  2801:19:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266775

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:2d:80:6a:df:a9:36:de:11:a8:f6:91:97:67:a2:4a:2f:
         78:c1:c8:eb:46:6e:d8:1c:83:e8:a9:7a:7d:ca:b2:b9:8f:0b:
         ec:cc:3a:b8:e8:a6:55:87:6c:c5:33:25:08:87:43:c4:f6:a6:
         a0:cb:78:c3:ae:df:0d:93:7e:df:20:4c:45:3e:84:a7:3f:c3:
         15:39:b7:21:29:ff:3d:0c:1d:e1:85:12:5d:6d:2c:45:5d:c9:
         5e:d1:6a:f1:27:05:0f:e6:5f:9c:eb:e1:a4:f5:1c:09:3a:06:
         d8:7c:a3:0d:71:23:4c:5c:f5:2f:6a:3e:2d:84:4a:6b:cd:95:
         0c:84:81:7d:5f:73:a7:94:96:45:dd:a4:40:90:4c:d9:68:41:
         11:a6:71:91:c4:35:a1:7b:9a:85:3c:77:e1:39:55:75:2a:a7:
         79:4c:aa:62:08:3d:1b:77:6e:a0:78:11:e5:a1:50:9a:7a:2c:
         ba:6d:2e:48:c1:dc:66:01:65:a0:77:b8:ba:64:3e:54:7c:69:
         03:26:da:71:0c:03:32:52:9c:08:06:22:75:46:6f:0d:8f:80:
         32:72:ca:a5:2e:84:b0:f7:b3:1f:45:c5:64:4d:18:df:d1:c8:
         d2:24:95:ed:30:e0:cb:82:4c:60:9a:f3:f3:ae:e0:8b:20:6e:
         68:c8:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----