Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cf0cc3b46ca121a9b585af8dae250da2643731b.cer
File:                     8cf0cc3b46ca121a9b585af8dae250da2643731b.cer (raw, json)
Hash identifier:          9hznSkarXuvSnyk+aRQzgz5NwB03X524S7iypHYlBhc=
Subject key identifier:   68:F6:72:C9:9B:8B:DE:78:37:34:62:C3:6D:BE:D4:E5:1F:9E:42:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD044B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/69e91799-5153-4479-90d2-b49582b67d5e/8cf0cc3b46ca121a9b585af8dae250da2643731b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/69e91799-5153-4479-90d2-b49582b67d5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Jan 2020 21:53:06 +0000
Certificate not after:    Sat 16 Nov 2024 22:14:50 +0000
Subordinate resources:    IP: 2801:19:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16581707 (0xfd044b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 21:53:06 2020 GMT
            Not After : Nov 16 22:14:50 2024 GMT
        Subject: CN=8cf0cc3b46ca121a9b585af8dae250da2643731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:21:d6:b8:78:8f:b5:66:65:71:29:c9:c3:
                    7e:3a:9a:41:c0:49:62:8f:71:c6:d9:5b:e7:7b:76:
                    f8:24:12:da:5a:f6:d6:6c:f3:f8:d3:4e:36:15:be:
                    14:0a:8a:c1:5f:d0:36:30:4d:b5:21:34:f0:4a:0d:
                    78:6f:52:9e:66:f5:a7:f8:2e:81:40:5c:2d:bb:90:
                    c3:8f:b9:39:51:9f:3e:56:f0:e0:5c:44:46:cc:96:
                    18:6f:b6:3e:bd:38:a8:dd:00:41:2b:a0:b9:32:22:
                    49:f0:a7:77:13:48:45:79:c0:2f:c4:35:62:00:a4:
                    e6:41:d8:64:e2:dd:7e:63:43:95:04:24:40:36:b3:
                    d8:d3:bf:e3:b6:55:c5:1a:75:d7:61:1b:a3:52:8c:
                    c3:37:4e:b5:a2:54:24:4c:30:57:77:8f:15:f1:12:
                    8d:0f:9d:32:7e:c7:c1:67:d2:4c:26:98:73:77:f3:
                    c2:f5:d1:ff:20:66:85:dc:88:1e:e8:4f:f5:7f:38:
                    cb:46:05:8a:a0:4e:55:a9:48:fa:2c:c6:83:e4:95:
                    a9:e6:b1:95:0f:ec:4e:4f:c9:05:2c:8b:51:73:8e:
                    e8:c7:9b:ed:48:0f:9e:57:7b:82:47:16:48:f8:10:
                    ae:11:ba:66:e6:a1:0c:6c:b3:d0:d1:8d:62:be:76:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F6:72:C9:9B:8B:DE:78:37:34:62:C3:6D:BE:D4:E5:1F:9E:42:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/69e91799-5153-4479-90d2-b49582b67d5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/69e91799-5153-4479-90d2-b49582b67d5e/8cf0cc3b46ca121a9b585af8dae250da2643731b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:4f:90:8d:81:93:e6:6b:fe:8b:fe:1e:91:c9:ac:f9:10:
         f4:2d:f9:3f:d3:70:69:c7:3b:5f:f1:c0:f6:84:91:e1:55:a4:
         aa:ca:87:ab:0d:0e:9f:d3:9f:97:4b:16:cb:65:03:15:77:46:
         6c:4f:4e:32:94:9d:67:47:ab:77:d5:fc:2f:4f:70:22:26:eb:
         7d:de:3d:1e:14:61:93:45:06:fa:99:0d:7c:04:ba:b4:ec:92:
         08:8a:cb:a8:f3:0d:bd:c5:ed:bf:8f:02:29:10:79:d2:ea:17:
         84:be:6d:6e:6b:ae:3f:a5:3e:40:5e:f5:93:2c:8a:b5:63:c8:
         da:5f:76:0f:ac:45:07:2a:09:d7:20:ab:d7:e9:3c:eb:04:2f:
         21:e3:58:f3:57:b1:c5:7f:24:9a:2d:3a:8f:6b:78:85:9c:a6:
         aa:38:0d:e7:d0:4c:2e:94:19:d1:0b:b2:5f:4e:da:cf:31:8d:
         7e:6d:6e:df:f1:49:b2:ae:56:24:13:20:4e:ca:08:0d:eb:e4:
         55:45:e8:34:4d:3f:8b:c5:e1:ea:15:7f:46:11:b3:59:7c:bb:
         2f:86:a4:02:02:d3:b0:6c:4a:bf:89:56:7a:e0:bc:62:cd:af:
         3d:2c:f1:57:4f:3a:a0:ec:41:14:7a:0b:13:7c:16:a0:5f:2e:
         4c:29:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----