Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
File:                     8fd397f8d47b3a369017afd14e695229eb571750.cer (raw, json)
Hash identifier:          yp/QifxhdAdHMPIsv3+TWOXfsqJbPwmSfTZHYvVRap0=
Subject key identifier:   45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC6048
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 May 2020 13:54:33 +0000
Certificate not after:    Sat 17 Feb 2024 20:08:17 +0000
Subordinate resources:    AS: 265755
                          IP: 138.117.12.0/22
                          IP: 2803:f040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14442568 (0xdc6048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 12 13:54:33 2020 GMT
            Not After : Feb 17 20:08:17 2024 GMT
        Subject: CN=8fd397f8d47b3a369017afd14e695229eb571750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:d7:6d:33:ec:96:25:7b:5e:4c:f6:95:14:
                    cb:e9:8b:34:96:ad:24:30:b2:b8:fb:e2:88:ae:75:
                    67:63:b6:f5:e9:8b:c3:78:01:1e:23:bc:62:11:48:
                    21:ff:6c:44:4f:18:b7:50:82:6f:b3:ec:49:a6:7b:
                    33:dd:6a:fb:47:ed:06:3c:d4:4b:d8:43:fd:b7:c5:
                    bb:77:f7:13:48:57:42:10:5d:a7:3c:34:38:83:13:
                    ef:a1:3d:d4:af:29:b5:a9:2a:12:bb:25:8c:b0:f3:
                    f6:5e:17:f3:89:18:2f:7f:cc:98:c2:2c:83:0a:d1:
                    6e:8b:9b:62:5e:36:f2:e1:be:8f:30:c3:96:c9:4f:
                    7e:ff:0e:76:04:05:4e:6f:5c:17:84:8f:64:d7:bb:
                    7d:d9:08:fc:89:eb:73:09:a3:c0:e9:19:e1:5a:d1:
                    8b:4b:e4:bb:34:47:0f:6a:68:f9:9d:b5:2e:94:f0:
                    d6:c1:b8:08:9c:7b:42:cf:1a:32:da:ff:c5:f3:23:
                    72:f4:dc:48:3f:57:a9:54:0d:d1:14:5a:f0:0a:58:
                    7f:45:be:82:5f:86:94:91:86:83:7d:e2:83:ff:e2:
                    5d:9e:17:c5:23:af:81:63:bc:e9:ff:04:23:af:15:
                    5d:47:53:21:56:66:e9:30:95:27:dc:75:aa:d8:56:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.12.0/22
                IPv6:
                  2803:f040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265755

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:14:23:2a:e2:3a:ce:5a:93:f7:f7:67:d7:9f:30:84:49:
         96:fe:f0:11:7b:23:99:41:8b:27:f5:f5:a6:e0:d3:42:cf:23:
         70:d9:7f:8d:6a:36:72:4f:75:91:46:33:35:d8:b6:7d:2d:6a:
         df:b9:af:08:4c:ed:0c:cf:49:81:ac:91:0d:b3:83:5c:87:7c:
         bd:6b:f4:04:f5:4f:dd:f6:e3:5d:0b:19:93:ff:13:5e:5b:fe:
         51:ab:88:98:b1:81:4c:ae:c5:97:c5:d6:80:8f:ad:65:6f:d3:
         dd:5e:24:2a:dc:5c:a2:00:a1:ad:74:4a:c7:9e:40:a0:63:41:
         56:d1:f6:9e:84:d1:15:dc:00:94:fd:a0:5f:a0:d5:84:22:9d:
         ae:64:e7:89:55:e6:9c:88:61:6c:dc:7e:d2:97:b3:e8:aa:87:
         b5:96:e2:b8:44:62:48:c5:9d:0a:42:f1:d5:a4:60:fb:1a:6e:
         9e:f5:f7:5a:4a:f7:2f:6e:bc:2d:29:72:ad:52:26:4a:dd:22:
         02:cf:81:1f:79:fa:6f:96:db:35:a2:31:6f:d7:74:e4:c2:3c:
         6e:79:55:e8:22:97:f1:f0:6e:fe:c6:fa:7d:59:d1:cf:b5:a7:
         43:16:76:34:8f:7f:21:60:9d:83:75:81:8a:1a:c8:fa:42:4f:
         9f:42:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----