Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63547c3eaeb70b09ca5e9d625da3c4010f555dbe.cer
File:                     63547c3eaeb70b09ca5e9d625da3c4010f555dbe.cer (raw, json)
Hash identifier:          3lLUoP/z4D8yE2zDdPZIfeXLRgFVA04iV4gJVo8FfvE=
Subject key identifier:   57:BF:D8:33:AF:03:43:4C:7A:64:8B:63:57:C1:B4:56:A7:27:FB:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5B2E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cba08347-7177-42fb-9551-beeca2cb88e9/63547c3eaeb70b09ca5e9d625da3c4010f555dbe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cba08347-7177-42fb-9551-beeca2cb88e9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2019 19:24:15 +0000
Certificate not after:    Tue 17 Sep 2024 20:29:59 +0000
Subordinate resources:    AS: 262203
                          IP: 200.124.121.0/24
                          IP: 2801:0:200::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16102120 (0xf5b2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 14 19:24:15 2019 GMT
            Not After : Sep 17 20:29:59 2024 GMT
        Subject: CN=63547c3eaeb70b09ca5e9d625da3c4010f555dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:0d:43:de:88:25:bc:5b:01:02:4f:80:a2:
                    5e:42:65:51:aa:30:4a:14:26:37:a6:8b:e3:ac:73:
                    a3:56:8f:82:e5:b3:c8:8b:3b:a5:09:f0:d9:d0:64:
                    14:76:7c:99:b2:03:4d:78:a4:7e:b0:a9:f5:37:47:
                    d9:02:e2:71:df:be:f3:b9:d5:9c:18:45:ef:f8:c2:
                    ea:b6:e4:48:f9:38:63:4d:40:3a:9e:9e:a5:ab:91:
                    61:45:15:c5:48:a3:93:59:7f:0a:b9:9f:ba:4d:1e:
                    3e:03:70:bb:78:4e:64:02:e4:35:84:39:9f:a2:f8:
                    c6:a8:8c:bd:0d:b0:0e:23:5d:f3:f8:68:32:77:97:
                    48:81:2c:ce:07:44:1d:dd:9e:73:f9:bd:ac:99:91:
                    11:d4:81:56:b5:00:93:10:1d:29:0c:1b:56:cb:73:
                    1a:9e:83:c1:ca:0a:11:74:02:bc:23:df:a9:50:89:
                    f0:a3:ec:bb:3d:c1:64:df:e9:3b:f0:76:78:9e:ff:
                    da:38:f3:68:a8:43:51:02:c2:67:22:98:fc:79:da:
                    55:0f:8d:c2:73:e2:35:26:33:00:5e:7e:72:61:58:
                    97:42:b9:e7:72:c4:7a:c9:9e:33:7b:76:ea:1a:83:
                    ed:38:16:98:50:74:47:01:d2:8e:f6:a1:5e:8e:d7:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:D8:33:AF:03:43:4C:7A:64:8B:63:57:C1:B4:56:A7:27:FB:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cba08347-7177-42fb-9551-beeca2cb88e9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cba08347-7177-42fb-9551-beeca2cb88e9/63547c3eaeb70b09ca5e9d625da3c4010f555dbe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.121.0/24
                IPv6:
                  2801:0:200::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262203

    Signature Algorithm: sha256WithRSAEncryption
         0c:62:11:90:8d:fa:d7:ab:fc:73:0b:a5:cf:9e:ac:a3:51:11:
         9b:7e:a5:5f:c8:10:f5:5d:8f:ef:e8:c7:38:4e:65:a9:24:be:
         64:7b:e9:70:6a:c2:46:9b:40:b6:de:92:23:25:65:94:9c:34:
         3d:a5:22:9b:ba:95:45:7c:7a:e7:34:55:5a:83:7b:2d:46:88:
         b2:f9:e0:34:42:ea:fb:f1:23:fd:c3:32:99:8f:3b:33:9b:35:
         d2:5b:f3:7c:fd:d0:32:e0:10:92:f4:df:ea:f0:04:3c:7a:bf:
         07:75:74:88:50:fe:4b:64:1a:f4:46:c9:98:2b:80:70:de:1d:
         03:99:04:40:b6:cf:19:5a:35:bb:ea:a0:5c:f2:bf:70:0a:a2:
         4f:e1:26:ad:91:b7:7f:ff:86:98:38:69:de:60:9f:16:f9:41:
         c9:b2:29:da:de:17:5f:c6:c8:05:ca:26:41:1d:ae:d0:91:96:
         1f:a8:9f:a3:d6:fc:e5:1c:ea:e6:9d:e2:50:6a:cd:bc:c9:67:
         0b:6c:7f:4d:ea:c8:ca:1d:cc:47:e7:4e:88:b7:f6:96:9c:b6:
         03:3e:15:01:f7:86:d3:0e:db:9a:ad:c2:9d:27:49:cd:fe:12:
         e3:8e:3a:75:43:3f:13:36:f0:fc:2a:03:d8:6a:05:09:ee:d2:
         8b:26:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----