Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.cer
File:                     5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.cer (raw, json)
Hash identifier:          oe1fiBIOOHy6/2/21C5xazbh2mELeOnQvi1kRMSa6As=
Subject key identifier:   24:60:E3:F1:78:66:35:6E:2F:DD:E9:42:67:A3:8E:48:66:DD:C1:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBA955
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Jan 2020 14:58:47 +0000
Certificate not after:    Sat 02 Nov 2024 15:26:58 +0000
Subordinate resources:    IP: 2801:1e:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16492885 (0xfba955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 22 14:58:47 2020 GMT
            Not After : Nov  2 15:26:58 2024 GMT
        Subject: CN=5c1bc8aec43ba5cf4ce8962afb1436320685b1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:a2:e0:07:79:42:a3:f1:3b:b4:ec:c6:7f:
                    8a:e5:70:d6:fd:50:ef:20:f4:f7:0a:47:fb:47:b8:
                    e5:6c:c5:23:da:05:3d:b4:c9:64:8b:82:0c:1f:01:
                    99:c8:81:6e:85:a1:b7:89:9a:2d:06:d2:3b:2d:01:
                    da:02:e2:7c:9a:7c:63:a9:23:93:12:2f:de:e7:6f:
                    c2:1c:7f:67:bb:3a:ca:26:dd:f2:f9:61:81:b5:b1:
                    f9:47:ef:9b:ee:ca:70:8a:df:6c:55:03:99:63:ca:
                    c7:e7:cf:95:22:22:59:90:bb:b6:6a:e4:fe:fc:a8:
                    ee:dc:ba:f5:f9:df:b4:be:6b:4f:1a:c5:f4:b3:20:
                    29:7a:6a:39:23:6a:05:24:8c:71:db:65:cf:9d:e8:
                    81:ee:ea:d0:17:c6:0b:60:24:18:c0:75:5b:e0:05:
                    58:26:85:4b:19:af:55:bf:e6:32:ff:ec:7b:98:e3:
                    16:26:89:04:92:3a:a8:23:45:c4:d9:3e:4f:b1:bb:
                    52:77:56:78:e0:f7:90:70:3a:53:6a:37:75:ff:0a:
                    cc:e0:7e:66:57:c5:19:e3:8d:19:61:b8:23:ec:76:
                    f9:1a:74:47:8e:4f:77:d3:91:3d:bc:df:0f:ea:76:
                    93:02:f1:dc:e2:6d:5b:5c:45:01:9b:32:35:ea:2b:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:E3:F1:78:66:35:6E:2F:DD:E9:42:67:A3:8E:48:66:DD:C1:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:d2:7a:e0:45:eb:2b:3d:25:2e:b0:03:68:35:e6:6a:a9:
         99:a2:8e:4e:70:16:14:d4:30:4f:85:45:33:4c:78:40:b4:95:
         f2:55:13:85:5b:86:49:2b:72:78:5b:41:de:3f:68:a3:fb:b4:
         56:39:7c:c7:9a:22:a5:72:5d:5a:36:bf:c4:ed:20:50:47:27:
         87:d2:f8:83:dc:dd:39:79:19:31:a5:4f:ac:8c:24:c8:76:96:
         ac:c4:a0:9d:d8:01:b3:f8:f8:30:b4:78:6d:f4:03:dc:15:75:
         35:90:6c:77:b0:a4:bf:d2:5a:a6:01:d5:3b:2d:84:6b:9c:7e:
         f0:d2:41:0d:a1:92:52:2d:03:c1:af:13:14:cc:bb:88:a4:49:
         1e:0b:f3:26:13:ec:66:91:26:9d:a9:40:84:87:70:2f:0b:01:
         f3:bd:f4:73:44:52:88:82:75:29:e7:76:4e:d1:d7:c3:2b:8d:
         47:e0:35:67:c8:6f:0a:02:e8:1f:62:30:5d:4d:8a:a3:b8:14:
         cc:f6:85:99:b0:0b:68:b8:bc:33:f6:5f:5f:5c:dd:ad:6f:70:
         f6:58:7f:ed:fa:16:17:1f:19:6f:c5:a3:04:4f:54:89:9c:1f:
         73:9b:31:a3:d7:28:1d:4f:77:70:c6:8b:ef:51:a2:13:f3:39:
         c1:8a:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----