Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer
File:                     3abe8205e3875032dfb3042786eec7a637777979.cer (raw, json)
Hash identifier:          Bu38gKRI2rAPIPqmnM8ZiLhYWd0ffBmkcfy0P/aOKUo=
Subject key identifier:   61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBDFA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2019 16:40:05 +0000
Certificate not after:    Mon 12 Feb 2024 20:39:57 +0000
Subordinate resources:    AS: 267831
                          IP: 45.173.200.0/22
                          IP: 2803:8460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14409639 (0xdbdfa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 11 16:40:05 2019 GMT
            Not After : Feb 12 20:39:57 2024 GMT
        Subject: CN=3abe8205e3875032dfb3042786eec7a637777979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4f:ce:25:26:d4:9b:93:31:f0:db:00:7c:a1:
                    89:f6:0a:b7:29:cd:a5:20:30:65:90:07:06:db:cb:
                    b0:93:cb:a5:41:e3:00:74:d9:b0:6c:97:d4:2d:c6:
                    b7:69:15:92:6a:6e:a0:50:67:d9:75:a7:37:22:f4:
                    8a:42:99:35:06:e4:b4:65:61:d2:eb:a1:2e:e9:ac:
                    95:b6:e4:2a:6d:4a:42:ce:d0:c8:b5:6a:3b:90:cc:
                    64:52:0f:ae:d6:fe:aa:85:9b:81:e7:50:ed:c0:2f:
                    a1:56:20:ec:cd:a1:85:e7:3d:e5:3e:2d:1f:d6:9b:
                    96:67:5e:c7:3a:2f:77:a7:74:59:ec:d2:e1:f4:09:
                    7c:fa:fc:6a:4e:3d:e9:63:c3:b1:98:5e:90:69:67:
                    ce:2c:dd:2c:e7:2a:94:91:79:e9:8f:95:69:8e:c2:
                    3f:3c:63:ab:45:1a:33:36:c7:8c:79:3d:45:76:24:
                    83:17:51:b0:ac:0f:ea:a9:6f:4e:41:2f:94:d7:da:
                    62:0b:94:c8:60:e6:29:fa:7a:d8:07:21:72:36:73:
                    9a:fd:4a:b9:d7:20:43:a1:b5:ae:a1:a0:47:e6:23:
                    41:78:62:88:e3:e9:6b:8a:d0:75:4d:77:3d:54:bc:
                    35:ea:d1:50:61:9a:33:56:99:16:6d:c2:79:40:12:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.200.0/22
                IPv6:
                  2803:8460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267831

    Signature Algorithm: sha256WithRSAEncryption
         1b:7c:52:ca:50:00:8f:b0:c8:30:db:ab:29:66:c2:76:42:41:
         27:97:b6:72:68:c0:54:32:bb:ae:3b:72:5f:14:61:36:47:98:
         f4:5b:9b:6f:2b:90:81:4d:70:e6:9b:83:7e:5d:d3:a3:40:36:
         1a:12:db:20:f5:e5:5a:c0:16:2a:62:2b:99:83:c7:7d:e5:4e:
         99:b0:ce:8e:c1:92:96:aa:b0:e5:fe:ea:9a:da:28:8b:88:48:
         92:3b:0d:52:af:81:c4:fd:1a:42:dd:a5:b1:11:47:65:30:74:
         fe:d0:0d:7f:32:03:c1:23:9f:0e:51:9c:de:d0:f8:ff:d3:57:
         c4:a6:54:fe:b5:26:b8:2c:e6:8a:18:1f:38:4a:f8:95:fe:e1:
         49:04:9a:b3:c9:00:ba:e8:c4:16:45:20:66:2b:d6:0a:eb:7f:
         1d:16:4b:e9:1c:f2:3a:71:aa:3f:a1:d1:27:71:04:e6:a8:bb:
         4d:b5:84:b2:7c:09:05:1f:a2:fc:7e:86:6a:c7:9a:8b:47:da:
         f4:1c:df:e7:46:0c:1b:b6:07:80:1e:6b:02:7f:70:f2:83:84:
         87:e3:6b:7a:33:22:e1:dd:9c:53:b5:ef:8c:68:9f:8d:37:d6:
         af:96:6d:a7:9c:1b:44:b8:1a:d0:49:ec:20:c9:9c:1f:f9:5e:
         b7:f2:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----