Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
File:                     4714a8fc89277634ae57cdaf4d814514cd61f656.cer (raw, json)
Hash identifier:          ktbFs2bFIgczszC0jYciiGL2CEi2IwI9toBMax2Hha8=
Subject key identifier:   25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDD821
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 May 2019 15:23:30 +0000
Certificate not after:    Thu 07 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 26619
                          IP: 179.50.0.0/17
                          IP: 2803:cb00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14538785 (0xddd821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 15:23:30 2019 GMT
            Not After : Mar  7 06:00:00 2024 GMT
        Subject: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:ab:09:36:fe:b9:2d:2a:57:d7:36:32:6e:
                    f7:d1:e6:0a:2d:75:24:9c:2a:d5:18:cd:b7:bd:d7:
                    3c:1d:78:53:7e:8d:a0:c4:3b:ab:ce:61:e8:04:c1:
                    96:a0:9f:a9:ea:3c:28:ce:27:18:f0:0b:64:42:a3:
                    da:07:65:23:18:84:82:0a:4f:f5:5d:e4:a4:da:e5:
                    3d:db:a8:1e:64:71:5b:33:9c:dd:9b:b4:08:ca:95:
                    c8:db:ba:b4:ec:c3:e6:8d:bc:7e:28:86:a6:79:3d:
                    b4:3c:99:67:9a:c5:71:a6:0e:1c:f5:d3:34:df:77:
                    1c:be:fb:3d:ad:c3:cb:2c:d0:f0:b2:b1:ad:6c:e8:
                    49:d9:99:86:0c:a6:61:ee:7f:7d:87:02:b8:8d:f0:
                    9c:d2:76:4e:8d:fa:ce:a3:39:39:2b:01:f5:f8:95:
                    c0:61:c2:7c:74:b4:fc:33:8e:1c:aa:31:ac:da:83:
                    10:1c:5e:59:dd:06:38:a6:c5:37:48:ef:0b:b6:aa:
                    37:6f:86:00:09:6e:6b:70:69:87:aa:e6:d1:b3:64:
                    0d:16:30:be:1d:71:eb:e8:52:0c:02:d9:5b:1a:ca:
                    7a:95:bd:a5:93:ce:d8:8d:4b:57:f9:bd:ec:0a:8a:
                    62:9d:45:28:62:4f:c7:b3:bf:76:87:5c:54:e8:57:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.0.0/17
                IPv6:
                  2803:cb00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26619

    Signature Algorithm: sha256WithRSAEncryption
         26:52:fa:83:d6:37:0e:6e:e4:1f:a2:0e:5f:4c:1e:f3:88:04:
         53:d8:b0:73:f2:2c:90:ee:bf:40:b6:7f:6d:69:f7:3d:19:89:
         41:5f:47:4f:de:d0:93:70:e2:f7:88:e3:48:4b:4c:cd:35:c0:
         72:06:08:ac:3e:50:aa:fe:ec:81:f2:c2:7d:bc:ae:ae:4c:ff:
         39:91:67:d1:10:03:c0:90:11:f9:cc:3c:69:3b:dc:94:69:6a:
         e6:3d:49:07:a4:45:e6:8c:70:74:54:93:79:59:28:68:37:04:
         b1:fc:72:89:59:6d:98:eb:e7:1e:76:fe:95:67:a8:1b:77:b8:
         9f:0b:67:79:0e:7c:38:19:8a:af:9d:c0:d5:7c:b8:fd:a3:a9:
         f1:c4:03:96:6e:0c:e8:34:96:db:82:a7:e8:8b:81:b3:46:98:
         a5:09:45:f0:5c:7d:cb:b3:3a:5a:7a:a9:4a:77:f6:58:53:04:
         24:d8:8b:d9:da:19:a3:b2:40:07:e2:64:df:40:bd:db:34:b2:
         67:29:0c:ff:e8:28:a4:ab:84:23:44:d8:ca:c4:02:0a:13:8d:
         21:80:3f:34:f4:82:b4:a5:8f:d3:a6:0f:fe:69:7a:62:15:4b:
         e3:20:39:5c:d7:86:33:7b:ab:56:99:02:cc:b5:78:7d:dc:9d:
         2e:bf:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----