Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer
File:                     5d3796838d771f93080603caee0f79e836838277.cer (raw, json)
Hash identifier:          SNawNDLH6IQjQIc+ltPTzaGkbed8xgBbzZlvyCBdCgg=
Subject key identifier:   AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA15A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 May 2020 14:17:35 +0000
Certificate not after:    Sat 20 Jan 2024 22:18:38 +0000
Subordinate resources:    AS: 269976
                          IP: 24.152.40.0/22
                          IP: 2803:f6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14292391 (0xda15a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 14:17:35 2020 GMT
            Not After : Jan 20 22:18:38 2024 GMT
        Subject: CN=5d3796838d771f93080603caee0f79e836838277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:c6:88:4e:2b:8c:71:e4:dc:9d:66:8e:6b:
                    51:f5:a4:9e:32:19:7b:17:59:1a:2e:1e:d5:05:9f:
                    ed:ed:b5:27:31:f9:20:f1:f2:e4:6e:8b:f8:21:1b:
                    92:a8:c5:f9:6c:0d:a7:1b:04:c5:a5:99:53:9b:eb:
                    da:6f:c9:f0:d3:58:ae:65:19:14:20:fb:7c:d0:ce:
                    9c:48:ea:7d:e2:d8:e5:a5:38:d7:90:6b:cf:34:6d:
                    af:8e:e8:b7:8a:17:3e:38:09:ab:42:3a:6d:06:43:
                    87:02:1e:d1:51:08:af:c0:78:ea:32:12:98:aa:14:
                    da:58:8c:03:13:2d:b9:51:83:39:3b:bc:86:be:69:
                    67:2c:d2:bc:1f:ea:97:3d:74:e0:a0:10:13:37:65:
                    37:43:e7:8a:62:64:35:fa:df:80:5a:a6:f8:84:dc:
                    01:eb:b4:43:d8:6d:9d:a9:ed:22:3b:ec:22:72:69:
                    96:86:65:0b:4c:d0:f8:e6:d3:98:7e:28:c8:75:da:
                    95:ec:f8:80:67:40:55:8b:3a:56:98:21:ef:57:05:
                    54:31:57:f3:c3:ec:f3:72:4f:8d:94:81:b9:41:a5:
                    d7:96:3b:fc:6b:ce:ed:01:43:d8:62:96:4c:93:97:
                    4d:75:75:81:1a:c1:7b:b7:3b:46:b5:0c:00:91:d6:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.40.0/22
                IPv6:
                  2803:f6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269976

    Signature Algorithm: sha256WithRSAEncryption
         92:82:da:5b:bf:8a:09:de:4f:a0:13:ca:22:21:31:84:e0:c5:
         48:f6:6d:d7:53:35:25:08:67:90:83:3e:b5:ed:7a:7f:64:f0:
         ea:05:a1:9c:f5:af:fc:11:04:e2:a6:63:02:61:ab:ff:b1:45:
         2c:8d:dd:6c:9b:e3:bf:2b:6a:9c:30:ad:a3:80:82:99:f8:07:
         b4:9b:bc:b3:e0:2a:68:44:ab:51:ce:f3:b7:57:cc:99:09:09:
         59:e8:70:29:93:1e:a7:bf:83:8e:82:4d:c6:bf:b3:8b:2e:14:
         2f:63:87:e4:4d:fa:4a:cd:57:b2:92:1f:39:89:81:76:2f:c1:
         42:72:3c:ca:a4:11:1a:c5:1c:70:29:f3:94:70:5c:4d:1c:a9:
         c7:35:3b:5b:ca:35:4a:b9:5b:4f:1a:40:aa:e8:45:08:2f:15:
         29:16:03:12:34:75:e6:ff:a0:f2:c3:6b:e6:a7:17:14:a2:a6:
         55:d6:3c:5c:b1:37:17:90:f6:72:9c:ed:17:d0:56:b2:3a:ca:
         0a:fb:c0:98:5d:e0:ef:6e:35:3a:64:f8:f7:5e:72:35:65:ca:
         4f:c3:dd:3b:86:a7:2e:0b:43:03:09:8a:ec:c1:7c:b2:53:d9:
         47:0c:07:1f:35:3f:c6:f0:f0:30:35:78:64:15:1d:bb:72:3c:
         5b:16:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----