Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f6672fc787f9137e8f71c4a819113fb075494ac.cer
File:                     4f6672fc787f9137e8f71c4a819113fb075494ac.cer (raw, json)
Hash identifier:          /6QLXFt2EeLwi9NG4RXSK4VZcs1ovDBUTnsCmSKbRp0=
Subject key identifier:   68:74:22:3F:34:FD:A5:1A:3E:C5:E1:2C:1C:ED:98:FC:8E:AD:65:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF4F9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df8fe8e5-0920-4247-8d14-c090a2d44244/4f6672fc787f9137e8f71c4a819113fb075494ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df8fe8e5-0920-4247-8d14-c090a2d44244/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2019 21:33:15 +0000
Certificate not after:    Thu 21 Mar 2024 19:08:30 +0000
Subordinate resources:    AS: 267863
                          IP: 45.177.96.0/22
                          IP: 2803:2260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14634910 (0xdf4f9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 11 21:33:15 2019 GMT
            Not After : Mar 21 19:08:30 2024 GMT
        Subject: CN=4f6672fc787f9137e8f71c4a819113fb075494ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:ae:66:02:ae:2e:72:8b:9b:75:eb:7c:fa:
                    cb:9f:24:32:f0:0b:75:56:d0:1b:a5:66:7f:a3:0e:
                    3d:08:ee:1e:2f:8e:57:95:52:ad:f6:15:0b:6c:81:
                    c4:ce:9f:0d:87:15:72:0a:46:6e:24:ab:33:6c:7d:
                    fc:28:b1:b1:fc:7f:c5:81:7a:60:7a:5b:34:83:75:
                    44:1b:d4:74:1a:9f:40:9e:ff:b3:ed:71:3f:09:2b:
                    1c:e1:ba:08:2b:d1:f0:32:1e:10:46:1a:fc:78:85:
                    19:30:55:ea:71:cf:a0:dd:d8:57:ef:be:c0:d8:cf:
                    81:b0:c7:87:da:1e:e7:fe:df:49:8f:27:78:ec:8b:
                    2c:79:97:12:a4:b8:90:be:19:0d:be:38:97:a0:f7:
                    52:52:43:44:72:4d:b7:c7:7a:d7:9f:79:3a:0a:90:
                    34:0d:9a:96:ef:6a:47:99:55:ec:71:03:07:88:4b:
                    b6:06:09:91:11:b9:f9:5e:d0:a9:40:b6:a7:75:66:
                    5f:eb:06:54:d6:4a:a4:ae:35:ca:a7:a0:49:a8:c0:
                    68:71:db:86:49:4c:10:e5:02:68:43:1d:b9:d6:bb:
                    a7:6a:11:8e:9a:b6:32:8e:bf:ae:18:7a:ef:28:1f:
                    87:e6:64:11:f9:ec:c6:9c:4a:d2:03:6c:ec:9f:96:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:22:3F:34:FD:A5:1A:3E:C5:E1:2C:1C:ED:98:FC:8E:AD:65:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df8fe8e5-0920-4247-8d14-c090a2d44244/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df8fe8e5-0920-4247-8d14-c090a2d44244/4f6672fc787f9137e8f71c4a819113fb075494ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.96.0/22
                IPv6:
                  2803:2260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267863

    Signature Algorithm: sha256WithRSAEncryption
         ae:6d:11:b7:fc:06:60:a5:28:a5:fd:17:bd:9a:87:38:4b:56:
         cd:98:80:cb:04:87:c7:e0:39:7a:cf:75:04:2b:70:84:0f:d1:
         c6:10:6c:47:f8:78:b9:a6:48:6e:64:4d:1c:4c:74:da:eb:ea:
         f6:a5:a3:42:f0:18:9a:06:d4:e3:54:99:fb:a8:a2:02:d8:1e:
         18:fa:4f:b2:cf:5e:ba:85:34:d9:16:ae:d5:00:e2:e5:44:ff:
         5c:47:cf:6a:d5:59:e2:70:42:70:22:c7:ce:fb:67:d8:5e:e7:
         68:1d:38:cf:1b:bf:33:dc:c8:90:e9:b9:b0:7e:0c:04:4e:b0:
         6c:fb:54:cb:88:ec:1d:c9:65:b5:74:0b:11:1c:5f:91:44:52:
         6b:19:ff:e9:68:5c:cc:7c:d1:b0:00:68:5e:bb:68:e5:2f:6a:
         e2:9f:a7:ad:6e:e2:fd:3f:62:13:77:cc:ba:59:c7:25:b5:6a:
         bf:97:77:80:1e:25:1f:4b:5b:ac:b7:7b:cc:05:58:b9:06:7c:
         ff:96:7b:69:a0:a6:76:cc:4f:63:eb:fb:af:ed:c6:17:d2:f6:
         aa:60:af:b7:05:ba:90:67:af:ba:b0:df:55:58:60:7a:6f:a6:
         6c:5d:03:30:de:cb:13:c7:a5:e8:f6:19:fd:66:fd:38:d1:d1:
         52:09:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----