Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.cer
File:                     5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.cer (raw, json)
Hash identifier:          mfEdPruuhdyYkEODkUD9GJDp+toMfhiJ+kRKxi7rg6U=
Subject key identifier:   3D:A6:CE:6D:5F:A4:66:2B:A4:A9:05:F3:61:97:87:25:05:43:B1:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD5995
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Jun 2019 21:07:03 +0000
Certificate not after:    Thu 29 Feb 2024 19:51:57 +0000
Subordinate resources:    AS: 28056
                          IP: 200.0.18.0/24
                          IP: 2001:13c7:6003::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14506389 (0xdd5995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 24 21:07:03 2019 GMT
            Not After : Feb 29 19:51:57 2024 GMT
        Subject: CN=5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:ae:4d:a7:48:5a:7d:31:06:13:65:15:c8:
                    46:b3:61:51:1a:f8:a3:51:80:1d:db:ee:68:d8:54:
                    a5:ae:86:73:12:17:5b:a1:8b:db:7b:d2:24:97:14:
                    ab:1d:56:4a:d5:ec:0f:38:46:d4:f4:5e:e1:9a:41:
                    4e:40:89:65:ea:3c:85:2a:bd:c1:21:16:9a:51:31:
                    1e:ae:7b:be:c9:cf:b6:c0:1a:45:e6:95:c8:9c:f8:
                    49:78:27:cb:3c:e4:87:72:8f:09:2f:45:3e:c0:16:
                    6c:7f:51:a4:f2:5a:77:ec:62:59:5e:0a:13:5e:05:
                    f3:b9:ab:56:ed:fc:b2:bb:a9:ac:fa:1f:74:a9:d7:
                    e3:ef:bc:c9:a3:4a:e8:db:14:e5:3c:84:68:d7:da:
                    65:ea:48:4b:96:11:fa:f2:92:da:a7:ad:3e:e4:8d:
                    3c:3b:78:2a:c0:7c:2b:af:da:b3:5d:08:be:be:a8:
                    ab:f6:72:be:0a:50:fd:40:ff:c5:db:78:1b:a7:29:
                    27:7c:00:6e:ce:06:ca:05:2c:61:9f:38:72:85:61:
                    80:5e:cc:57:c8:22:00:e2:c9:32:d3:2a:16:6e:ab:
                    fe:b2:c2:a0:a1:78:fc:f0:ee:69:57:8c:5d:4d:4c:
                    65:e2:72:70:93:f3:28:bf:b6:f9:90:8a:c4:ac:f8:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:CE:6D:5F:A4:66:2B:A4:A9:05:F3:61:97:87:25:05:43:B1:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.18.0/24
                IPv6:
                  2001:13c7:6003::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28056

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:b2:31:3f:2f:03:3c:b7:d4:ac:26:8d:05:77:df:63:b8:
         06:20:26:3a:d4:dc:ab:62:58:db:fe:83:66:58:c1:bb:41:b0:
         39:78:64:59:77:68:c1:17:d7:e4:aa:db:17:1b:e7:57:4a:4d:
         ec:42:11:27:81:17:48:66:2a:59:b4:5c:1e:b0:77:f3:9d:54:
         c2:2c:6f:f3:72:12:6e:5a:df:e1:55:ee:45:82:92:03:f1:f7:
         0a:eb:69:5e:29:dc:ef:69:84:24:c8:82:29:31:7b:43:76:b9:
         27:fe:e7:63:5a:f3:a3:eb:29:19:12:ec:40:82:b8:52:f6:ab:
         a1:53:c3:06:80:49:b3:64:ac:8b:9a:16:76:46:aa:b2:d1:6c:
         e7:59:40:64:dd:59:e1:85:53:10:ac:23:84:0e:f2:74:e1:e1:
         3a:69:58:b8:0a:51:14:3a:f9:a1:93:d4:31:b5:f6:04:f7:65:
         e8:f6:e5:2c:02:36:fa:23:a1:8b:51:b7:e4:22:15:53:57:a3:
         29:2c:50:b4:c5:0c:52:61:96:c0:3a:1e:0b:6d:f5:4a:42:f3:
         ab:f7:87:9d:32:05:09:9f:e0:1d:a2:e6:1f:b0:10:a1:5f:a3:
         b8:f6:37:06:69:f1:72:c1:a5:f3:01:91:e5:2c:ec:88:c5:61:
         99:d9:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----