Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a2871620c9111cdbe95d600f335da1f24376c39.cer
File:                     4a2871620c9111cdbe95d600f335da1f24376c39.cer (raw, json)
Hash identifier:          9Cntxk1DJ5dvB/97lUnP2mS5LWCUMJMA8F6JxXV7RS4=
Subject key identifier:   B0:34:25:48:DB:FD:A2:CA:55:4B:EE:B4:29:56:82:75:0F:49:0B:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFC5ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/4a2871620c9111cdbe95d600f335da1f24376c39.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Jun 2019 16:58:43 +0000
Certificate not after:    Wed 27 Mar 2024 18:19:55 +0000
Subordinate resources:    AS: 267868
                          IP: 45.176.192.0/24
                          IP: 2801:10:8800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14665197 (0xdfc5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 16:58:43 2019 GMT
            Not After : Mar 27 18:19:55 2024 GMT
        Subject: CN=4a2871620c9111cdbe95d600f335da1f24376c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c6:37:e4:bf:73:50:e1:c1:fa:e4:a9:30:3a:
                    38:21:22:6b:b3:3b:0b:21:57:33:3b:54:43:b6:fe:
                    12:76:c7:5c:42:00:fc:4f:28:b0:8a:9b:07:b2:6d:
                    db:de:0c:d3:51:1d:ac:8f:65:07:92:bf:1e:6a:46:
                    aa:3a:59:03:f7:3a:0a:b9:15:e5:92:7c:42:c9:f1:
                    36:ae:ec:ac:96:e4:4d:53:9e:57:a0:e9:5f:eb:b9:
                    86:9a:b8:2f:9d:14:dd:7a:56:1a:d9:b1:cf:8e:67:
                    dd:f8:b7:c9:44:12:47:aa:6a:1c:72:1a:85:1e:ec:
                    74:13:40:4d:3d:17:60:d5:bc:77:f5:2f:56:04:c8:
                    93:32:1e:0c:d9:b0:27:68:3b:8d:d1:e3:01:9c:99:
                    9a:65:f4:05:e3:95:24:0a:59:3f:f2:09:1f:cb:6b:
                    96:91:d6:97:5f:db:1c:f5:3e:8b:ba:8f:cf:8b:25:
                    9b:50:1a:be:f3:b7:69:4d:e6:c0:9a:eb:6e:34:e2:
                    fb:10:74:5e:9c:66:7c:09:6c:9b:2f:fe:23:1a:b7:
                    fc:11:7f:cc:5c:64:70:3d:9a:b9:ab:72:fe:d3:33:
                    70:13:b6:45:3a:91:85:1b:b9:2d:12:b6:34:5f:e9:
                    5a:02:52:d6:ba:e2:e0:62:9c:3b:31:fe:30:f6:db:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:25:48:DB:FD:A2:CA:55:4B:EE:B4:29:56:82:75:0F:49:0B:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/4a2871620c9111cdbe95d600f335da1f24376c39.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.192.0/24
                IPv6:
                  2801:10:8800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267868

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:12:d6:fe:8f:b3:e5:9c:87:e7:c2:18:f6:bf:d8:20:26:
         ed:70:dd:8f:3a:84:49:50:10:db:7b:9c:58:e9:3a:34:9a:5f:
         d0:76:3f:17:d4:a4:bd:8e:90:cd:08:a8:3e:ee:d0:c7:74:3d:
         8a:62:8d:c8:d4:74:b5:3b:95:4b:57:f1:04:c2:3e:bb:a2:e4:
         aa:d1:14:f6:58:ca:d4:99:6d:d7:a7:12:ec:50:3b:c0:5f:5e:
         7b:69:38:d4:39:a0:0f:17:d0:c3:4d:5a:a6:23:65:d2:3b:21:
         69:82:c7:eb:54:c5:6b:63:ea:65:55:2f:2d:6f:6c:7e:8c:db:
         d4:5c:7a:85:64:b4:d6:b8:31:eb:ad:42:2a:6e:dd:b1:16:3d:
         44:71:c7:25:ab:f1:51:ca:1c:64:15:30:6f:f6:a0:ad:58:dd:
         54:44:79:79:09:25:f7:0c:b5:94:e4:69:ec:b9:18:83:19:64:
         18:ab:80:ba:11:7c:60:cf:aa:39:50:21:a4:f3:8b:26:21:5c:
         d0:fe:1e:cb:d1:da:7a:86:af:bf:58:00:72:ba:d8:f6:5d:ac:
         36:b8:3d:c0:6d:6c:ba:e8:4f:4c:93:32:e2:5e:62:04:d2:30:
         5c:49:1e:ea:f6:72:d0:a6:28:9f:db:32:d9:59:08:69:1d:96:
         2b:07:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----