Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b91a34d5cd67966bc6563a71283bf8d1dcc99eb.cer
File:                     5b91a34d5cd67966bc6563a71283bf8d1dcc99eb.cer (raw, json)
Hash identifier:          jaMPY77QpslhHSCZoDDmFEzkmNi36fZIC5bSJHD/brc=
Subject key identifier:   58:51:ED:CC:65:EF:5E:C4:A0:D4:12:50:0B:57:EC:09:3F:7D:69:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA494D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ae84e993-2232-46f6-a21f-cf5e071f1856/5b91a34d5cd67966bc6563a71283bf8d1dcc99eb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ae84e993-2232-46f6-a21f-cf5e071f1856/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Aug 2020 22:16:46 +0000
Certificate not after:    Mon 17 Jun 2024 22:14:08 +0000
Subordinate resources:    AS: 270090
                          IP: 179.42.80.0/22
                          IP: 2801:18:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15354189 (0xea494d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 26 22:16:46 2020 GMT
            Not After : Jun 17 22:14:08 2024 GMT
        Subject: CN=5b91a34d5cd67966bc6563a71283bf8d1dcc99eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:80:7a:40:52:0c:eb:75:db:72:a4:dc:90:03:
                    b3:4c:cf:98:15:91:d1:d2:76:8f:15:04:c7:f8:87:
                    ab:81:42:62:93:25:87:4b:4c:eb:66:00:98:ed:3a:
                    fe:9f:cf:af:62:c8:74:fd:57:48:f4:2e:9f:12:42:
                    7d:15:37:c1:b1:4c:0e:ed:53:00:e7:44:44:ff:fa:
                    1f:6e:15:63:01:a3:1a:2f:44:fd:be:9c:ac:02:7e:
                    1d:57:b8:1e:38:6d:84:d5:2d:78:28:40:37:ca:04:
                    6d:e7:3b:54:95:ef:1f:d8:63:b3:f9:cf:33:60:6d:
                    52:ad:98:7c:d6:ed:dc:d5:da:d9:1a:6a:df:b4:97:
                    a4:62:8f:ae:99:0c:fe:e6:e5:f5:71:8f:a2:8d:57:
                    7f:9e:d0:8e:1c:3d:97:86:24:c5:f2:c5:66:54:64:
                    00:98:ce:31:29:06:94:6c:07:c9:82:f0:3f:2a:68:
                    42:47:64:55:66:01:08:7a:7d:90:45:47:a5:f1:81:
                    fa:c1:a0:15:10:a5:83:f1:29:03:34:6f:15:26:0e:
                    d4:39:0b:fc:2f:cb:68:19:b8:d3:d3:43:6c:57:19:
                    b5:4d:60:cb:79:e1:ba:83:b9:22:b6:7e:81:ae:5c:
                    ef:0b:53:66:3d:d7:c4:39:e9:a4:0f:80:1c:d5:8c:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:51:ED:CC:65:EF:5E:C4:A0:D4:12:50:0B:57:EC:09:3F:7D:69:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ae84e993-2232-46f6-a21f-cf5e071f1856/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ae84e993-2232-46f6-a21f-cf5e071f1856/5b91a34d5cd67966bc6563a71283bf8d1dcc99eb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.80.0/22
                IPv6:
                  2801:18:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270090

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:24:bc:bd:6f:bf:d5:ab:04:53:d8:27:55:54:47:39:58:
         44:25:8b:9d:4d:0a:fa:d4:91:e5:10:b4:b3:25:8b:4c:2d:b6:
         c9:f3:05:c4:13:a4:34:54:2a:47:7b:9c:46:e8:a0:76:ed:77:
         cf:0c:4e:4e:8f:82:52:79:cc:8a:04:8a:20:72:71:26:e5:57:
         ef:09:d1:9c:c2:2b:45:e1:51:ae:7b:6e:43:ac:5a:6f:76:ee:
         12:77:97:b3:34:56:77:df:b4:bb:d5:ad:0d:e9:4b:61:cd:95:
         7d:b8:79:b0:a2:7e:67:a8:80:0a:55:57:a5:d6:70:ba:d8:d5:
         76:00:c6:bf:30:b6:98:e1:0e:5a:f0:ae:7b:dc:ca:8a:f7:43:
         bb:97:2a:10:88:7e:2a:96:c6:60:42:63:42:bc:9d:d6:83:e7:
         f1:1b:c9:0a:aa:ea:d9:11:21:f1:3c:3b:f3:17:22:cf:75:e7:
         c3:ea:ab:97:88:d9:45:a3:91:73:1b:5b:07:52:2e:2e:f7:62:
         8b:a7:c1:a3:de:75:a3:99:e0:9b:5d:3c:0c:39:5f:cf:8e:f5:
         2c:9b:48:ac:8c:75:94:5d:42:1c:fe:5e:75:4c:18:68:c9:69:
         9b:81:09:7f:84:84:39:99:3f:55:8c:3a:cb:f2:2d:de:4c:74:
         38:6d:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----