Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6e30ee09a02818a4de760cee7553be86a880f3.cer
File:                     5d6e30ee09a02818a4de760cee7553be86a880f3.cer (raw, json)
Hash identifier:          HPlLnyrrgH3s3/zypMli4yWI0FBON0pBK7dE5B0gGyQ=
Subject key identifier:   59:F8:A3:E4:EE:D0:16:6B:AC:67:AE:7E:B0:85:18:FF:56:40:0C:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAF501
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/5d6e30ee09a02818a4de760cee7553be86a880f3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Aug 2019 18:23:29 +0000
Certificate not after:    Sun 23 Jun 2024 18:07:03 +0000
Subordinate resources:    IP: 2801:1b:8800::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15398145 (0xeaf501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 26 18:23:29 2019 GMT
            Not After : Jun 23 18:07:03 2024 GMT
        Subject: CN=5d6e30ee09a02818a4de760cee7553be86a880f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6e:63:b4:4e:f4:1a:04:63:71:21:c0:16:c6:
                    c1:44:93:29:74:5d:39:da:ff:4b:47:8c:87:4f:e4:
                    69:78:f2:bf:a2:5c:e6:89:01:7e:71:b9:02:dd:a0:
                    8d:f5:0e:1a:3c:a8:3d:b1:4b:b1:33:4e:df:b2:77:
                    4d:ee:19:16:c6:2a:de:77:58:53:9b:1a:2c:04:63:
                    5e:ed:bd:2b:ed:af:3c:27:b3:fc:0a:56:a5:d7:34:
                    be:16:76:de:4b:52:1b:98:3f:04:ce:61:fe:91:b7:
                    ea:eb:0a:61:b8:a4:f3:38:c9:a5:67:53:2d:b6:fa:
                    15:71:44:53:47:e9:f7:af:1a:f1:d7:1a:85:fa:b1:
                    48:9d:49:31:18:cf:13:c9:8a:ca:fc:6d:d2:15:35:
                    b1:2d:9b:91:00:25:d7:e7:88:84:c9:ea:22:63:64:
                    19:3a:5f:2e:bc:16:61:c2:ba:83:b2:6c:ac:d2:20:
                    1a:b4:f8:6e:e6:dc:c9:e0:69:70:7c:6e:73:37:8e:
                    1b:a2:a1:d8:4b:64:66:0a:fb:c2:49:97:1f:6c:6b:
                    2f:c7:7f:58:5d:0c:8e:0a:0a:b2:35:99:31:01:2e:
                    32:4b:36:e6:ff:39:f2:29:44:21:4a:0d:5f:eb:c9:
                    a2:dd:75:4a:ec:83:e5:24:23:19:f8:1d:96:11:f2:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:A3:E4:EE:D0:16:6B:AC:67:AE:7E:B0:85:18:FF:56:40:0C:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/5d6e30ee09a02818a4de760cee7553be86a880f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:8800::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:c8:39:4b:43:b1:5f:76:74:2a:c7:1f:9d:b6:60:fe:d0:
         a9:c0:38:dd:2d:58:d5:a3:5d:b3:14:16:9e:71:14:46:cb:e7:
         a8:a7:c7:d0:45:07:e6:54:7c:02:60:de:63:1a:c4:5c:9f:6b:
         40:99:70:68:98:b2:dc:c0:bd:50:36:9e:7e:f8:c3:11:f8:89:
         94:b3:83:b6:38:d1:c6:57:71:a4:e1:11:d4:31:58:69:87:64:
         92:e8:8a:cd:fc:4b:9f:4f:6a:ee:1f:87:ca:b0:11:6b:21:e6:
         d9:c6:7e:61:8d:9b:b9:8b:ed:13:76:f0:ec:6a:49:ab:78:28:
         c7:68:2a:5d:a9:f9:06:20:28:71:b3:61:10:e5:79:cf:db:e7:
         8c:88:1d:60:b4:70:15:77:e8:3c:12:32:c0:d5:ee:bc:43:18:
         1a:a3:74:00:9e:57:45:18:30:bf:0e:b2:8c:31:7b:52:26:72:
         95:bb:6e:c3:9d:96:c3:42:fe:50:66:e6:5a:ee:af:42:26:e8:
         9d:de:f9:ff:07:33:c8:d2:08:50:fe:7c:f9:40:e9:35:fe:e6:
         0f:75:a2:b5:b3:0d:01:03:b3:d1:e5:26:2b:53:5f:9c:4a:50:
         e1:fc:e9:cc:4f:83:c5:7c:f6:e4:26:15:32:95:de:ef:32:c5:
         56:cd:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----