Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.cer
File:                     6414ea9bc4d9056b40ed2fb4c762184bca3b8608.cer (raw, json)
Hash identifier:          a9wQUjpvxwSWXFUuQyZqyWDNe1g8Zhqiv+JQ+0rREBk=
Subject key identifier:   31:EB:7F:D1:83:FB:EA:8C:6E:86:03:18:5A:82:F1:2A:22:91:65:90
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3E69A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Sep 2020 17:48:03 +0000
Certificate not after:    Tue 03 Sep 2024 21:20:02 +0000
Subordinate resources:    AS: 265865
                          IP: 45.226.58.0/24
                          IP: 2803:9620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15984282 (0xf3e69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 17:48:03 2020 GMT
            Not After : Sep  3 21:20:02 2024 GMT
        Subject: CN=6414ea9bc4d9056b40ed2fb4c762184bca3b8608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:f7:56:da:4b:5f:ce:ea:d5:17:f3:94:2c:
                    40:5f:b9:3d:33:68:84:63:6e:ac:d6:09:17:5d:f8:
                    f3:ca:8a:9d:80:16:d8:aa:de:9a:10:c2:30:d9:af:
                    7d:34:f3:6d:b9:a0:2d:58:ae:20:b7:2b:8b:18:23:
                    26:8d:eb:43:a9:58:48:19:00:d7:c5:a4:03:49:fc:
                    81:3b:cd:49:b9:1e:8b:cf:af:57:fc:69:28:6c:23:
                    8b:3f:6f:df:0b:a7:cb:22:87:7c:03:7a:90:af:8d:
                    8b:43:a0:38:16:91:4a:06:b1:d9:f1:7f:21:59:1a:
                    d2:e3:da:aa:4a:dc:85:7e:96:97:1a:01:f8:fa:f9:
                    bd:9b:88:a1:2f:6e:d9:14:29:51:51:e3:90:73:f9:
                    67:18:e7:9e:ba:c7:6c:ed:58:94:53:49:c7:64:1c:
                    77:b1:38:4b:f6:05:2c:20:49:95:8f:e3:95:a6:f1:
                    ef:d6:62:0d:a8:7f:26:4e:01:2e:32:8a:ca:31:72:
                    dc:80:74:79:18:5a:11:87:e8:1e:0e:5e:b6:90:73:
                    6d:77:ab:9c:bd:35:5c:56:b4:23:83:ec:38:3f:54:
                    77:3d:93:9b:ac:9c:0f:5e:e6:da:2f:14:3b:95:7d:
                    70:7e:b4:81:c5:9a:03:f1:a1:38:a9:cd:ef:1a:50:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:7F:D1:83:FB:EA:8C:6E:86:03:18:5A:82:F1:2A:22:91:65:90
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.58.0/24
                IPv6:
                  2803:9620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265865

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:ac:ae:11:27:50:fb:38:2f:cb:e9:52:04:2e:43:2a:2c:
         ec:76:48:fb:43:a0:e8:ef:4d:11:58:16:bc:0b:75:e4:4c:5b:
         ef:c3:41:14:43:71:9b:6b:7e:fe:e7:8c:c1:bb:cb:26:d8:f0:
         1f:4d:d4:bf:88:cb:e4:de:e6:4d:21:41:52:9b:9e:53:6b:b6:
         ab:58:4b:ef:30:8d:22:59:64:f6:6d:0e:b7:88:ce:23:2e:3a:
         c2:8e:04:3e:25:aa:12:ce:5d:31:f4:63:cc:93:86:89:fb:12:
         49:a9:26:4e:a2:54:0d:2b:b9:29:66:55:02:b5:69:41:e6:0a:
         cc:67:44:98:ea:ba:b4:91:76:dc:1d:5a:7f:d9:24:7c:b4:dc:
         29:26:48:a7:4e:c3:5d:dd:44:d0:2e:8b:84:18:9a:ab:30:2e:
         10:30:77:74:03:a8:06:3f:3f:66:d2:34:31:b4:2f:aa:f6:a4:
         63:85:6e:c9:c7:b3:25:bb:7d:26:6f:5b:85:0d:82:72:22:aa:
         4a:1c:b4:6d:bf:8a:ec:25:7d:d6:7e:09:59:db:d8:16:69:84:
         64:85:4b:90:0a:a6:b3:4f:2c:b0:31:c0:b0:1f:9e:2c:3d:2e:
         ce:71:fc:ae:bf:c7:c2:4c:97:2f:ec:19:ba:87:44:4c:72:67:
         09:99:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----