Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.cer
File:                     5e53a4a121c18653f9cf4e1bc0246c1e1e322315.cer (raw, json)
Hash identifier:          35H4xIkB/BJrk59Y8XsbspCB2/BiXVVecPuB3pgcdVA=
Subject key identifier:   0D:C8:42:59:2F:E7:59:DD:93:BB:9F:D8:1D:AB:D9:FE:9C:AF:DD:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E57352
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Jul 2020 21:56:14 +0000
Certificate not after:    Thu 04 Jul 2024 01:39:12 +0000
Subordinate resources:    AS: 64115 -- 64116
                          AS: 64128
                          AS: 64132
                          AS: 64143 -- 64147
                          IP: 45.183.44.0/22
                          IP: 2803:cd60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15037266 (0xe57352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 21:56:14 2020 GMT
            Not After : Jul  4 01:39:12 2024 GMT
        Subject: CN=5e53a4a121c18653f9cf4e1bc0246c1e1e322315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:00:a6:8b:a5:5f:d2:eb:4f:92:43:ee:e0:
                    6c:7a:f1:d4:64:1c:a6:3f:62:4b:59:70:4e:41:5a:
                    c4:ae:13:22:24:f6:a0:87:54:a9:82:3d:1c:4f:67:
                    8b:62:c5:0c:19:39:bd:45:46:f0:1e:3c:2e:52:d5:
                    b4:e5:96:5a:73:74:e2:3a:cc:ce:d2:94:09:ce:92:
                    e8:67:92:37:d5:39:92:74:c1:b8:5c:0b:82:d8:94:
                    b3:5e:10:87:c7:32:9d:fd:d3:3e:58:b2:ff:ac:ad:
                    bf:cc:17:01:08:17:ba:1a:cc:99:4a:07:ef:cd:bc:
                    4d:39:fc:06:b5:e6:52:64:8e:8e:08:6d:e1:1d:42:
                    c6:d9:a5:16:7a:2f:a3:da:d2:d7:d0:a8:f8:e1:3c:
                    c6:1a:44:48:a6:dd:58:d0:5b:93:50:de:cc:6e:e1:
                    f2:ce:48:6b:df:24:92:60:66:fa:3b:39:a1:01:86:
                    e8:36:b2:9b:ba:f2:80:fb:d6:72:5e:ef:d4:77:1c:
                    a4:f7:7a:a6:54:a2:40:f5:b3:5c:7a:7d:1b:16:f5:
                    0f:cb:4d:b4:b6:71:e6:8f:43:1c:e8:e2:de:27:ee:
                    89:bb:26:4b:a6:b3:40:81:11:5a:c2:6a:ec:be:ac:
                    4a:76:79:f1:16:7c:03:3f:4e:58:5c:64:78:92:0a:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:42:59:2F:E7:59:DD:93:BB:9F:D8:1D:AB:D9:FE:9C:AF:DD:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.44.0/22
                IPv6:
                  2803:cd60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64115-64116
                  64128
                  64132
                  64143-64147

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:7f:98:6a:fd:e9:53:d4:53:15:98:b1:85:b4:69:24:b4:
         a1:c4:a0:c8:11:ef:b1:c3:6b:51:00:5a:d1:4a:26:95:ea:a0:
         e0:d3:2f:76:16:f4:d0:73:b3:9c:7e:b3:fd:5b:cf:da:67:28:
         b8:30:48:6c:d4:58:d6:2e:01:12:ea:ff:f5:54:a1:94:35:61:
         ef:9c:14:0e:d7:29:91:08:cc:4e:13:eb:3a:d6:2d:2f:e2:c5:
         f2:46:1d:0c:cf:f5:a5:8d:0c:7f:7c:2a:f8:d6:c0:92:67:24:
         d7:a0:f5:59:07:f5:7f:e4:5a:47:f0:6e:b2:5d:06:ce:76:2d:
         0e:79:a2:a9:30:8e:bf:6e:bf:6f:37:9a:b3:23:ed:c1:05:f8:
         b8:f7:80:aa:19:b0:79:47:c4:38:25:b9:5a:f2:05:d7:52:a3:
         d8:17:ec:f9:03:7a:02:5c:18:10:00:1d:6f:d3:d3:06:6e:54:
         81:92:d2:4b:b0:31:3d:d6:a6:96:3e:3f:58:fa:b5:c3:f4:84:
         c4:b7:82:39:3e:77:d9:1f:74:dd:63:a5:11:c8:a0:29:ad:5a:
         b1:72:9b:a5:42:4f:b5:c0:e9:ec:dd:fe:de:42:13:ca:e6:f2:
         52:e8:2f:8f:b5:05:e1:87:f2:0b:09:52:39:a0:a6:4c:87:1f:
         97:4f:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----