Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.cer
File:                     8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.cer (raw, json)
Hash identifier:          H7jHI2SV0GlJByjZu420hqIdJoLqcu6pm3ryACM/8sc=
Subject key identifier:   CA:A2:37:45:E3:C8:C6:97:4F:6A:67:C0:B7:6E:0E:3A:B0:69:C4:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE7AC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 May 2019 15:29:44 +0000
Certificate not after:    Wed 13 Mar 2024 14:39:52 +0000
Subordinate resources:    IP: 45.173.228.0/22
                          IP: 2803:5c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14580420 (0xde7ac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 14 15:29:44 2019 GMT
            Not After : Mar 13 14:39:52 2024 GMT
        Subject: CN=8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:51:b1:2c:3a:fe:12:30:6b:6a:9a:31:fc:
                    e4:aa:13:62:8c:d4:54:08:df:eb:12:e2:df:20:b8:
                    bb:81:13:54:d1:df:64:b4:9e:e2:f9:ed:1e:6b:eb:
                    d0:3c:f4:01:cb:9b:49:5b:dc:5b:13:86:62:91:b9:
                    55:d6:b5:a9:c4:a6:3e:ff:d0:fb:a2:65:af:28:42:
                    0b:02:3b:c2:7a:e4:ee:b3:d5:b1:8d:78:5a:e1:a6:
                    e9:2f:83:ff:1c:56:5c:19:ee:c6:56:95:34:f6:b9:
                    98:b0:51:45:b7:0d:19:83:6a:a9:4a:60:05:4e:3b:
                    83:a5:c7:89:fa:74:49:14:02:01:20:e5:d7:a0:6b:
                    44:57:ef:8a:09:bb:8e:93:5b:99:33:bb:70:c4:4e:
                    9c:a5:10:da:fa:d3:28:d7:b4:1f:cd:35:86:8e:fb:
                    e6:96:ce:ae:0c:cd:1c:19:85:de:77:92:5d:46:e7:
                    07:ed:32:ad:98:c1:a6:27:de:62:c6:ef:dc:2c:c5:
                    68:15:f5:73:ed:c9:cd:9e:b7:68:c2:b7:9c:1f:18:
                    a7:f2:aa:60:ca:18:37:c3:53:e4:de:f3:3f:28:e8:
                    13:f0:93:e9:13:02:14:e0:ec:22:d4:7e:72:cd:4d:
                    3f:9e:49:f6:84:7f:ca:db:14:40:f7:21:0f:85:60:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:37:45:E3:C8:C6:97:4F:6A:67:C0:B7:6E:0E:3A:B0:69:C4:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.228.0/22
                IPv6:
                  2803:5c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:07:f1:91:49:de:64:95:01:d1:2b:1f:1d:00:83:6b:56:c5:
         3c:37:50:3e:32:09:da:4c:ea:37:fb:c8:cd:27:88:fa:33:dd:
         85:5f:e5:60:0b:ee:e9:9f:e8:01:16:31:22:d9:15:8b:72:37:
         e8:97:ea:aa:86:59:74:97:a8:f6:82:d8:8b:4d:f8:d6:19:7b:
         be:7a:74:db:2e:19:05:1e:26:32:c1:5a:0d:76:13:5a:f4:f7:
         e8:c2:fb:55:7d:e6:9c:9f:0e:d6:50:d5:a3:23:f9:81:35:ad:
         2e:c6:cc:4d:b5:de:af:d9:fb:95:d7:8b:90:c4:2b:ba:b8:d1:
         9b:82:ec:52:f3:87:ca:f2:b0:6f:45:fa:21:62:9e:e1:96:8f:
         c1:0a:a5:23:79:cd:70:ed:15:47:c1:f1:05:47:ef:2b:fe:0e:
         8e:ab:81:87:07:fa:d0:dc:9e:a2:79:d4:27:6c:d3:43:db:b4:
         2d:76:c4:81:05:a0:6a:79:a1:23:f4:e7:0a:16:91:fc:a0:b7:
         6a:18:6b:3d:02:8e:08:ba:5b:cb:f4:1a:38:00:9b:ff:78:bf:
         fe:8d:09:80:b5:02:b8:ac:cf:95:ee:bf:ba:b8:94:9e:69:0f:
         21:b6:88:ae:c3:55:e5:10:06:80:ce:a0:8d:c6:6f:ec:f6:02:
         21:f6:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----