Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5af0c364da44e8d56630ca9491db8bba68bafdeb.cer
File:                     5af0c364da44e8d56630ca9491db8bba68bafdeb.cer (raw, json)
Hash identifier:          58AL0FODHH2CiBT3I+bfcDALQet1qcuZWjXGQPd70Yw=
Subject key identifier:   3A:CD:EC:EC:0C:96:F1:25:C2:1A:2C:6B:E1:E0:D2:E7:78:1F:8A:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA51B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5af0c364da44e8d56630ca9491db8bba68bafdeb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 May 2020 14:29:22 +0000
Certificate not after:    Mon 21 Oct 2024 16:53:37 +0000
Subordinate resources:    AS: 52369
                          IP: 179.42.176.0/20
                          IP: 190.110.112.0/21
                          IP: 190.184.224.0/20
                          IP: 2800:c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16404920 (0xfa51b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 14:29:22 2020 GMT
            Not After : Oct 21 16:53:37 2024 GMT
        Subject: CN=5af0c364da44e8d56630ca9491db8bba68bafdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:28:97:e2:a7:65:11:80:bd:be:d1:25:a3:
                    76:6b:40:86:44:56:bc:81:4c:3f:9a:ea:1e:18:49:
                    d1:ca:98:3a:4b:11:31:2e:ac:d2:e2:51:c7:f2:02:
                    bb:e7:75:6d:0c:c4:45:95:20:53:a7:d0:63:d7:cc:
                    a9:8b:14:36:7c:6b:a0:c6:2d:3e:b0:6f:ef:d5:21:
                    f2:88:6f:4f:80:a9:43:68:13:25:f5:5c:3d:c1:65:
                    fb:d8:e9:05:35:b0:a9:59:68:0a:9f:e1:ff:03:82:
                    01:11:71:ad:8c:4e:f3:62:3a:c2:3b:8c:59:ca:77:
                    52:bd:39:ea:6f:cf:ad:00:03:99:e3:aa:87:bb:94:
                    87:cc:f1:58:e3:45:85:48:40:6b:0e:8a:77:51:cf:
                    46:b1:0d:1b:fa:7a:e2:ac:20:09:a5:c5:4c:ce:65:
                    ec:ab:49:d7:18:49:47:04:33:b0:d9:b1:96:7d:cd:
                    b0:5e:dc:35:40:4f:1c:0e:8c:af:5b:9d:de:18:40:
                    d2:9d:20:6f:c7:4f:22:96:11:86:24:1d:33:84:34:
                    f9:f6:6d:86:34:c8:fd:5e:df:18:49:a1:e0:d7:55:
                    e6:57:65:b1:ee:81:e1:a9:80:60:59:78:04:c5:e8:
                    8d:93:b7:7d:76:88:b1:6c:88:b6:43:b2:ca:bb:6b:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CD:EC:EC:0C:96:F1:25:C2:1A:2C:6B:E1:E0:D2:E7:78:1F:8A:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5af0c364da44e8d56630ca9491db8bba68bafdeb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.176.0/20
                  190.110.112.0/21
                  190.184.224.0/20
                IPv6:
                  2800:c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52369

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:54:15:62:9a:42:07:a7:da:c8:d1:3f:f8:f6:ae:8f:d5:
         d3:80:89:79:da:cd:aa:99:08:55:b8:f1:8f:15:d1:23:5d:88:
         83:a4:5e:4d:a7:f4:f1:9b:aa:fc:f1:c0:2d:e2:7f:32:8b:0e:
         3d:b6:9a:de:a7:7c:75:3f:74:9a:88:54:01:74:ed:b0:92:77:
         1e:fe:73:a8:33:71:e3:f8:27:a5:9e:0a:e5:26:fb:04:24:dc:
         2b:31:2a:b5:bb:08:78:f5:c2:9e:44:e0:3e:d4:3c:69:46:5a:
         d5:a8:0c:4a:d2:4b:1f:71:a2:39:88:ac:9e:12:36:03:d4:9e:
         76:37:d7:36:ef:19:67:d0:7d:8b:fd:c7:9c:10:93:2b:b3:f2:
         85:c7:c9:c9:81:56:2e:85:00:f8:b4:be:4b:36:ca:40:f6:43:
         8e:1d:89:e2:c6:52:25:55:a6:d8:32:cd:dd:38:21:c1:21:04:
         37:4f:a8:e0:b6:8c:0e:f7:3b:fa:35:8c:ce:f4:a6:b0:70:26:
         7c:5c:49:2b:78:ae:ca:96:00:16:d6:87:41:f1:91:07:39:f2:
         11:38:34:c1:0a:fa:24:48:43:93:bc:b6:d2:a9:67:fd:3f:42:
         f0:4b:f8:11:e7:f6:c4:0c:6a:06:54:85:49:f0:07:cf:77:ab:
         e0:1e:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----