Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.cer
File:                     974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.cer (raw, json)
Hash identifier:          RVS/KpAlKARrcc02ijw5HvO1kmg8qYLt2+mjeQCJ0Bw=
Subject key identifier:   4F:05:07:E1:F7:0B:8A:60:9C:EA:BA:80:43:03:39:C2:C9:D8:6D:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0874E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2019 16:12:53 +0000
Certificate not after:    Fri 05 Apr 2024 17:54:26 +0000
Subordinate resources:    AS: 266819
                          IP: 45.237.220.0/22
                          IP: 2803:4a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14714702 (0xe0874e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  9 16:12:53 2019 GMT
            Not After : Apr  5 17:54:26 2024 GMT
        Subject: CN=974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:c4:b2:ed:cb:dc:c6:12:50:38:67:f5:44:
                    29:80:d7:33:f0:ad:11:0f:5b:4f:bb:6c:7b:53:5c:
                    02:bc:e9:80:9c:74:e2:4a:82:ba:e6:63:e9:82:2a:
                    87:07:e1:84:65:d1:cf:55:a2:5b:d8:57:a7:3a:59:
                    58:37:d8:78:85:34:a1:03:5b:17:61:0b:cc:39:73:
                    2e:49:95:29:5f:2b:52:2a:7b:70:8a:4e:aa:0b:01:
                    6a:dc:dc:e8:aa:30:90:e1:1a:b9:5c:b2:2e:65:06:
                    81:35:19:0d:41:20:76:28:23:50:b8:4a:33:31:a7:
                    c6:ac:12:84:8a:4b:ba:a5:b0:66:f3:c0:35:e0:c3:
                    d8:a6:42:ef:f2:1f:f3:31:33:4d:7d:36:5f:5b:c9:
                    06:0e:92:63:4b:39:fb:45:c6:b8:3a:22:20:d6:c0:
                    2c:85:14:67:0e:0a:60:90:2d:df:8f:18:2b:36:4a:
                    0a:67:3d:3e:7e:d7:c0:a5:7b:40:2a:a2:4d:b8:82:
                    4b:d2:de:a4:10:e3:00:df:9e:75:16:4a:cb:88:56:
                    40:32:5a:f4:07:eb:5a:ea:71:ee:27:d8:f5:9e:74:
                    40:87:34:1c:f2:c1:a1:12:30:c7:60:5d:c0:8b:42:
                    de:09:a4:b2:0e:bb:71:ff:d3:f3:e8:08:00:3f:b0:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:05:07:E1:F7:0B:8A:60:9C:EA:BA:80:43:03:39:C2:C9:D8:6D:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.220.0/22
                IPv6:
                  2803:4a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266819

    Signature Algorithm: sha256WithRSAEncryption
         22:cd:6b:cb:9d:02:a5:c8:9f:66:83:6c:5b:a5:97:cb:95:d8:
         2d:55:53:f6:1c:6e:d6:a3:e1:2a:c5:a7:37:1b:d1:84:73:70:
         a5:d6:ef:95:d4:3e:45:df:a6:8d:41:34:15:cd:31:69:de:25:
         c9:37:74:80:ca:6c:2a:0c:e0:55:3a:e0:61:28:45:04:d9:27:
         ce:91:f5:84:f7:22:88:31:53:41:5e:76:c8:3c:2e:8e:ab:c8:
         f5:4d:c4:2e:d6:4d:03:38:ea:79:5a:91:0b:9b:f3:a0:ed:80:
         47:7c:b1:3f:64:f0:2c:0d:2f:84:3a:d2:6d:41:9c:3b:66:2e:
         93:df:a8:ff:6a:a6:58:5e:96:ff:1b:e5:75:f9:c0:52:ce:58:
         16:49:8c:ac:19:84:80:ad:7e:05:9d:29:48:54:62:cc:22:79:
         64:ca:9b:fe:ef:8e:ee:bb:45:0f:42:20:01:8e:3d:1a:08:74:
         2f:a9:a5:76:ec:39:99:39:5e:31:20:90:ae:f7:c5:ee:09:40:
         bb:ba:69:6e:9a:f6:8b:86:d2:cb:9f:a1:94:37:78:80:e8:7e:
         3d:98:90:fd:89:8d:2c:d6:ee:18:71:bb:ee:9f:4b:44:ec:51:
         56:bf:5f:b3:44:cd:b4:30:5d:0e:67:29:70:4e:4c:62:a3:b6:
         0b:b5:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----