Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer
File:                     5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer (raw, json)
Hash identifier:          qH0XPjehv5fiPa8R02xWmQvlHEHkVj3FMATS5RRWbp8=
Subject key identifier:   CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D76290
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Nov 2020 14:00:38 +0000
Certificate not after:    Sun 17 Dec 2023 15:13:41 +0000
Subordinate resources:    AS: 269939
                          IP: 45.191.112.0/22
                          IP: 2803:1ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14115472 (0xd76290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 14:00:38 2020 GMT
            Not After : Dec 17 15:13:41 2023 GMT
        Subject: CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:a2:73:e0:46:9a:a7:38:33:49:ee:59:9f:
                    e9:e5:47:59:7a:d3:ef:b9:a2:40:6a:17:9f:3b:08:
                    d4:08:bf:32:79:4e:26:ae:cd:71:9b:8e:58:9a:44:
                    7a:ee:a8:ae:f5:fa:85:2e:7d:80:d4:bf:ca:89:43:
                    17:c9:e7:3c:1c:07:9a:bc:c0:93:c9:49:98:1e:7b:
                    70:3d:dc:17:ea:3e:5e:33:67:8b:74:36:c5:4c:03:
                    09:0d:8f:ea:0e:2e:0a:c1:5d:d2:05:63:66:c2:9d:
                    ec:6c:b1:9c:96:51:84:8f:a4:7b:91:9e:ef:36:38:
                    cd:1f:b1:cd:d7:4c:de:7a:2e:ab:f5:31:cc:af:37:
                    ae:50:e8:84:cf:f2:d2:7f:a8:79:4e:75:a5:c4:17:
                    1f:46:f4:63:ce:5c:eb:04:7d:99:16:98:9e:1f:5a:
                    f0:a6:c8:12:86:91:12:60:fc:be:c4:24:91:d9:56:
                    82:ea:e0:cf:da:51:a0:3e:d8:90:56:88:53:c4:65:
                    ac:60:d3:e7:d4:5b:ad:68:08:52:60:52:f2:cf:90:
                    ca:cc:5a:c5:e2:71:4f:7b:f1:b2:33:b1:24:60:03:
                    3b:2a:ee:04:6e:f8:3f:1b:7e:71:c6:3e:7b:88:d3:
                    dc:2b:f7:7b:d0:9c:db:a3:0f:30:93:72:1b:b0:71:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.112.0/22
                IPv6:
                  2803:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269939

    Signature Algorithm: sha256WithRSAEncryption
         80:24:18:09:c8:a7:9e:b2:53:53:7f:9e:8d:6e:8d:fa:c6:f9:
         6d:10:fe:4b:8e:a7:16:06:85:ac:c6:4a:7c:1c:46:8b:6d:d4:
         6c:14:2e:ba:a4:25:22:14:1d:32:2b:4b:d5:7b:a3:f1:0c:5e:
         d0:50:12:55:8a:0d:e1:7c:47:66:96:91:2e:20:29:8b:45:5f:
         4e:49:1c:7a:2c:7c:55:b4:87:75:79:e9:8c:d4:e9:bf:6d:f3:
         70:fa:e5:48:30:0a:e6:44:6a:71:ce:8a:be:0f:8b:4b:cf:38:
         84:65:9d:b2:22:17:14:bb:62:0a:0f:7c:10:4b:8c:a8:91:ee:
         30:1d:26:36:c9:d9:7b:cc:a8:95:24:42:48:0d:94:5d:0e:89:
         86:05:c0:71:4b:f9:1d:b8:4f:db:13:82:37:d6:3c:21:31:62:
         3d:7f:d4:04:dc:2d:f3:4b:6d:4d:4a:a9:02:e3:ad:82:a5:f0:
         7e:1c:60:74:a6:dd:95:0a:67:fd:a4:55:c0:eb:43:09:fd:0c:
         6d:b8:cc:a9:3f:4f:7b:bc:ae:8e:db:ee:c4:f0:2c:af:8b:57:
         ee:49:82:cd:fb:3c:59:5a:00:e1:19:83:72:42:57:4f:93:26:
         98:b8:60:71:2b:66:a9:2f:f7:ea:d1:9d:d8:a8:0b:bc:d4:39:
         73:1a:9b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----