Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ccfe17e5178d2b172151d697f641cae961bbfea.cer
File:                     5ccfe17e5178d2b172151d697f641cae961bbfea.cer (raw, json)
Hash identifier:          G7JrgQ/+TJ7ck851+jPHIurec76SrsLx36W9ThS+Y8A=
Subject key identifier:   3D:CC:C1:C0:89:62:FE:54:7D:47:B8:D6:7F:EE:74:01:CF:7A:0A:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D782EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/5ccfe17e5178d2b172151d697f641cae961bbfea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2019 20:30:33 +0000
Certificate not after:    Mon 18 Dec 2023 20:44:27 +0000
Subordinate resources:    AS: 264707
                          IP: 168.121.80.0/22
                          IP: 2803:2d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14123754 (0xd782ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 20:30:33 2019 GMT
            Not After : Dec 18 20:44:27 2023 GMT
        Subject: CN=5ccfe17e5178d2b172151d697f641cae961bbfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:38:75:e6:ae:8b:ce:ef:b4:ad:01:b0:7e:
                    50:0d:67:94:ff:02:4c:e8:9a:5a:a5:9a:5a:06:9f:
                    2a:a6:3a:c2:08:0b:84:e2:4e:12:3b:e3:40:7c:10:
                    13:69:b9:c3:3d:f0:be:cb:60:de:63:b6:ba:be:a1:
                    68:f6:55:55:26:9f:8d:5e:cb:90:f1:5f:5a:14:24:
                    51:a4:d6:f5:1d:2d:14:cc:c3:75:04:8b:d6:1c:c0:
                    4c:47:80:ce:79:5f:6d:d8:8c:2c:d1:5b:00:3d:07:
                    61:f4:ec:b3:aa:cf:8e:d3:c4:b4:db:07:f3:29:15:
                    97:7e:c5:73:cb:84:01:03:49:e7:ba:fd:8d:4f:74:
                    ec:95:17:02:b6:82:ea:b6:fe:c0:8c:a6:dc:38:10:
                    28:19:c9:22:83:75:e8:07:15:94:7c:cb:5d:07:cb:
                    9e:5f:ad:09:4d:d5:43:d4:c8:97:96:83:18:ba:9e:
                    47:38:ed:de:d5:e1:37:a9:06:60:27:d6:50:bc:3c:
                    b1:d3:5b:93:2e:e5:58:a3:d3:95:ae:91:81:6f:02:
                    40:03:5e:70:98:2c:ec:71:a3:f9:a9:4d:49:e9:96:
                    f4:36:cb:51:1b:72:b5:8c:ae:35:3c:ba:8e:82:35:
                    ea:a2:1c:ff:cf:6b:b6:42:13:15:b2:37:6d:e6:2e:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CC:C1:C0:89:62:FE:54:7D:47:B8:D6:7F:EE:74:01:CF:7A:0A:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/5ccfe17e5178d2b172151d697f641cae961bbfea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.80.0/22
                IPv6:
                  2803:2d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264707

    Signature Algorithm: sha256WithRSAEncryption
         b8:bd:74:cc:05:b6:9d:9c:90:41:ac:24:a1:0f:77:62:02:f3:
         b7:6e:5a:ce:78:ee:f5:1f:5f:4c:92:4b:c4:cc:fb:0b:6b:b3:
         3f:be:c4:c5:25:29:5e:6b:af:a8:a8:82:53:e2:8d:3e:83:8e:
         e3:50:24:93:f8:95:b8:73:17:33:c3:bc:0d:ba:7b:c5:e3:37:
         d2:94:be:3e:01:5a:c0:28:e7:a0:f5:f4:94:7b:09:4e:07:a2:
         2a:95:0c:29:a9:3d:ed:d0:d2:03:de:ce:e4:0e:d0:bb:33:7b:
         f9:15:69:bc:34:49:69:b0:95:d9:58:36:9c:30:d8:14:7d:91:
         13:ef:bd:ee:d8:8d:f6:76:b0:89:9d:9e:b6:63:fc:c6:93:6b:
         26:e1:f9:72:99:78:53:75:f2:bb:37:d6:ef:3a:5f:9a:70:0e:
         fa:d4:c2:0f:80:f3:38:4f:9b:7a:b7:b8:0e:8a:7f:f4:6a:33:
         c7:4b:29:5a:29:8e:01:3a:21:5d:68:10:f4:f2:d0:00:02:4e:
         b2:d5:5f:26:69:b4:40:0c:9e:c8:de:da:b8:0a:7d:7d:1e:9d:
         c3:e1:03:22:f7:d1:6d:93:c3:7a:36:d1:fa:a3:84:f4:62:60:
         41:ef:75:db:19:5c:30:a7:2a:b1:ec:17:bd:d1:ed:32:b0:04:
         d1:10:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----