Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36b10bc44a32bc95053829056f3cce43ed317445.cer
File:                     36b10bc44a32bc95053829056f3cce43ed317445.cer (raw, json)
Hash identifier:          daDYC9FIT7lkPA1puOO+EKj9S1WKYNjNpz6sm8NesZM=
Subject key identifier:   DA:54:EC:5E:D6:BC:1D:86:7A:78:10:97:3E:EB:7A:73:84:02:63:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F14AD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/36b10bc44a32bc95053829056f3cce43ed317445.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 11 Apr 2020 23:37:11 +0000
Certificate not after:    Sat 10 Aug 2024 23:42:36 +0000
Subordinate resources:    AS: 267703
                          IP: 45.164.204.0/23
                          IP: 2801:1b:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15813330 (0xf14ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 23:37:11 2020 GMT
            Not After : Aug 10 23:42:36 2024 GMT
        Subject: CN=36b10bc44a32bc95053829056f3cce43ed317445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:9f:89:23:59:4b:79:64:66:99:82:78:1d:
                    a2:56:27:90:52:d9:28:9f:90:a9:98:3b:9e:9e:92:
                    f9:6a:08:c4:14:69:bd:02:04:fc:df:08:49:c9:74:
                    b1:b2:76:f1:e8:bb:65:fe:fd:15:54:73:97:0f:22:
                    14:7d:89:10:cf:17:7c:59:b5:f0:63:5d:86:ff:c1:
                    f2:d0:0e:c7:ef:a2:ea:dd:64:95:aa:82:3e:fc:73:
                    25:d8:ba:34:cf:4e:38:15:1d:eb:c1:02:23:89:a0:
                    a5:1d:52:b4:bf:59:8a:38:d3:1a:cc:35:f8:5c:65:
                    8b:c6:9a:1c:9c:40:bb:cc:4b:29:3c:1d:68:3f:0c:
                    58:04:5a:ac:88:71:62:bd:cd:fb:df:30:42:fc:e7:
                    f2:e7:bf:42:d2:57:5c:bf:f7:a4:cf:08:d2:3a:91:
                    1a:ff:e7:5e:c8:b7:52:fe:c8:bc:c5:ef:63:0c:ab:
                    d0:ba:61:7b:43:3d:d3:8e:30:1a:a1:60:4e:ee:8e:
                    d9:99:76:7c:27:69:50:1d:c8:4b:23:4a:7f:b6:27:
                    0f:45:71:9a:0f:e2:f6:6b:38:ad:5e:b6:ef:e3:07:
                    2b:32:2c:da:9f:d2:d9:ca:4a:9e:dd:55:0a:ed:1e:
                    d9:f6:66:a7:1b:84:0f:3f:8b:5b:fb:5f:cd:cc:f4:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:54:EC:5E:D6:BC:1D:86:7A:78:10:97:3E:EB:7A:73:84:02:63:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/36b10bc44a32bc95053829056f3cce43ed317445.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.204.0/23
                IPv6:
                  2801:1b:f000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267703

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:9b:8f:a2:a1:67:51:b8:af:e1:d9:a3:e7:2f:1f:b2:9b:
         8a:6b:80:d4:b6:ca:94:ef:46:84:01:59:c6:aa:2f:69:74:e3:
         0f:aa:06:09:7e:c1:58:5c:de:fd:0b:55:51:a0:56:4b:bc:06:
         b7:ec:3b:a9:d3:9f:7a:cb:79:b5:25:28:d7:a5:f1:7a:88:ab:
         a0:41:1c:e8:7d:b2:3d:85:5f:de:56:fe:0d:db:df:14:89:89:
         25:4f:ac:69:0d:61:4f:e2:89:ad:20:e6:a7:eb:b1:00:26:55:
         f6:46:56:61:6d:ba:a4:f0:00:84:b2:a2:3d:e2:82:c5:04:11:
         96:6c:6d:ed:0b:ff:eb:5c:8c:89:96:3f:c3:97:14:53:d0:17:
         04:ec:ad:7d:17:0e:51:88:6b:46:5f:94:78:c0:4a:18:97:83:
         cd:e6:6b:ae:e5:f1:62:44:6f:0c:1a:9e:35:d3:da:35:09:51:
         fd:cc:2c:78:9a:bf:22:f5:02:3e:14:39:fb:63:7f:ad:d4:83:
         24:a9:c1:88:d2:88:5a:7a:5d:86:4c:25:2a:53:10:a7:2f:17:
         c4:f2:f3:8a:e2:b7:fb:54:f4:3e:a9:4a:a8:5e:50:f1:05:3a:
         2b:f9:14:a6:6a:c7:a4:3b:2d:15:64:8e:b5:6c:87:21:fb:fe:
         07:5c:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----