Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.cer
File:                     6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.cer (raw, json)
Hash identifier:          SN2Oc9clwnOKTceDhzzOGYgV+WB8gWwvQZv/yxlI4jY=
Subject key identifier:   F4:26:CD:01:4F:0F:A6:7C:31:97:03:93:2F:1A:57:5D:D8:FB:33:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA0F3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2019 19:37:18 +0000
Certificate not after:    Sat 20 Jan 2024 18:04:53 +0000
Subordinate resources:    AS: 266757
                          IP: 45.232.148.0/22
                          IP: 2803:a720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14290750 (0xda0f3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 19:37:18 2019 GMT
            Not After : Jan 20 18:04:53 2024 GMT
        Subject: CN=6b3ffbd6c9ed992f221e43c37fcf3dc89828f314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:51:1d:1e:05:dc:40:ce:0c:3b:ac:16:6c:
                    b4:f7:18:63:d4:4e:eb:24:a0:b6:55:38:a8:30:e4:
                    0b:19:af:8c:85:23:ca:47:0e:1d:21:38:ad:6a:da:
                    b7:12:2d:ab:a7:bb:a3:38:71:ad:b5:45:fb:06:56:
                    a7:f0:6c:83:37:1f:d4:ae:09:b2:a9:17:fa:7e:ce:
                    ca:d7:b0:60:65:65:86:3c:fa:98:d5:13:1a:72:03:
                    a9:f5:d7:33:2e:b9:e9:e5:56:7f:aa:65:52:25:b1:
                    ec:a6:b9:8c:75:71:d8:50:82:ed:d7:88:52:03:48:
                    43:5e:88:b1:5f:c2:2a:57:6d:65:09:33:06:e1:73:
                    e6:b0:91:94:d9:a3:f2:74:64:3a:88:f2:79:7b:88:
                    cd:91:30:fa:3c:92:a1:9e:26:30:ba:03:d8:11:16:
                    72:c7:81:bf:4a:52:6d:d1:15:c4:4d:3c:da:53:fa:
                    ee:fc:0b:f0:a0:2a:41:78:a0:5c:2e:46:21:99:1b:
                    5a:4a:91:c2:60:4b:40:1a:5a:fd:4f:fb:ed:5f:a3:
                    95:b4:30:1f:37:d2:40:c0:0a:df:c7:34:08:b2:1c:
                    61:f0:a6:72:fb:49:44:db:46:b7:ae:db:0d:00:e4:
                    16:71:f8:ba:8c:80:12:55:0e:77:e6:a0:96:0e:2a:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:26:CD:01:4F:0F:A6:7C:31:97:03:93:2F:1A:57:5D:D8:FB:33:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.148.0/22
                IPv6:
                  2803:a720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266757

    Signature Algorithm: sha256WithRSAEncryption
         02:a5:eb:36:4b:33:eb:4c:5e:f3:42:a3:2e:01:c5:ff:0f:45:
         ae:0c:d4:21:2d:27:e2:be:4f:4b:cd:18:ef:a0:6f:15:6f:14:
         f3:90:a8:52:58:6a:6e:ac:d6:29:dd:b8:e1:ae:d3:ed:7b:88:
         aa:f8:2c:82:8d:ab:9f:e8:d6:54:aa:46:c7:4f:a5:53:c3:69:
         5a:5d:e2:14:da:3b:ef:3d:04:60:d5:49:1b:1e:75:76:40:a9:
         72:4f:6a:d7:0d:bd:84:5d:dc:7c:9d:50:aa:10:33:46:72:32:
         74:98:8a:b4:15:ff:96:01:34:77:2f:e7:ea:14:6b:47:83:04:
         b3:3c:3c:0b:31:70:03:cd:78:d6:39:78:8d:53:fb:f7:b7:e0:
         e5:48:11:9f:38:9f:c0:9b:2b:5c:f0:62:15:95:8d:f0:88:2a:
         53:51:8a:ff:43:5a:f8:2b:40:ed:92:ff:0b:91:5a:22:f4:9d:
         78:f7:10:e0:ce:3d:b6:e0:cf:1a:11:43:b2:1b:19:37:4a:0a:
         5c:78:96:1a:60:b4:6f:1e:ff:8b:aa:dc:96:2d:8b:6b:62:29:
         e0:fc:16:04:f0:fc:fc:27:6f:f9:19:1d:0a:a6:e9:e5:ce:80:
         30:73:d9:d5:d0:98:57:97:ca:48:8c:55:5e:71:8b:c3:69:a8:
         a7:7c:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----