Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer
File:                     5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer (raw, json)
Hash identifier:          Oc4M1Ax3Vxu0F9+2xnzh6q6O5Rd5DjuTtKuIx2dhXAY=
Subject key identifier:   F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC0E28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 13:21:59 +0000
Certificate not after:    Mon 01 Jul 2024 23:21:51 +0000
Subordinate resources:    AS: 265810
                          IP: 201.182.0.0/22
                          IP: 2803:5820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15470120 (0xec0e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 13:21:59 2020 GMT
            Not After : Jul  1 23:21:51 2024 GMT
        Subject: CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:0e:af:39:5f:08:74:55:42:aa:4c:4a:1e:
                    43:55:3c:c0:cb:cf:18:0f:34:e2:47:12:7b:95:22:
                    ba:bc:5e:e9:fc:2b:c6:db:68:54:36:d1:61:00:39:
                    aa:45:71:84:c1:53:35:38:5f:d1:85:ec:25:3f:28:
                    b3:ef:06:57:15:ea:0b:05:29:9a:48:a4:46:bf:53:
                    65:79:f4:70:e8:75:70:75:ae:0f:cf:f8:ec:8e:bb:
                    75:cb:ed:3f:7d:08:65:bc:58:43:79:0d:d9:6e:5e:
                    58:cb:78:2c:fa:5a:31:f0:60:57:17:bd:2a:0c:dd:
                    4e:7b:e3:22:b7:a2:99:23:9f:d5:44:87:df:43:e4:
                    aa:db:bd:fc:80:bc:42:b2:e5:d8:26:11:94:dc:b8:
                    c6:b8:8a:5b:6e:9a:36:d3:f8:26:3f:6c:a5:c5:a8:
                    ae:3f:02:42:2a:dd:c4:7f:d0:ac:8f:04:9d:33:1b:
                    90:67:0d:a1:db:89:23:62:1b:f5:e2:47:65:8a:fb:
                    f6:47:3d:6b:34:ca:30:76:dd:88:56:bc:39:f4:08:
                    11:fa:ed:38:87:96:1d:f2:f2:9c:1e:d2:73:3d:99:
                    9a:d3:08:0f:b7:c3:ce:bc:35:9f:cd:68:6a:c9:8b:
                    90:69:77:d8:f5:c9:d6:09:b4:26:a9:f9:ac:83:87:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.0.0/22
                IPv6:
                  2803:5820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265810

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:7c:5d:8f:d6:1e:12:65:c1:ce:3a:03:bf:7d:84:bc:06:
         30:0d:58:24:41:41:9f:fd:6e:e4:c0:0e:26:94:bf:e2:4e:7d:
         3f:c5:cf:2e:0a:11:48:5f:c3:10:ef:5e:16:1b:63:97:f4:4a:
         a6:52:9f:24:ff:52:3f:08:37:0f:3c:8c:d2:9e:77:b9:55:8c:
         9f:03:61:07:5e:79:36:a6:10:b7:8a:44:ee:0a:c3:39:9b:45:
         81:1c:aa:5e:39:d8:49:65:0e:29:4e:00:64:e7:b0:44:48:d3:
         7f:88:4d:e9:d8:6c:d5:90:a5:d3:35:be:69:10:83:fb:0c:e6:
         c3:ac:b9:b9:39:87:b8:f5:25:66:9e:a0:1d:2a:d2:9b:ed:ee:
         aa:2f:75:55:a9:be:90:87:54:1e:83:61:96:36:a0:f4:1d:fb:
         62:91:f8:3c:63:39:fb:c0:cd:50:91:b9:8a:fb:dd:30:3f:b5:
         46:61:f9:fc:07:2e:52:77:20:bb:85:96:bc:59:5f:aa:53:12:
         42:ee:48:6c:d8:d1:8f:a2:20:ab:c7:d7:e9:5d:7d:82:42:3c:
         b9:56:73:b0:53:ef:d8:3b:45:ab:9b:ef:96:e6:62:df:c4:71:
         69:f1:90:ea:e9:cf:65:85:77:d1:b6:6e:c4:f1:7d:7a:c3:01:
         5a:e8:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----