Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.cer
File:                     ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.cer (raw, json)
Hash identifier:          OE9YCPsiDZJqGsvhYrT0x4l2vMxo2lddfeaY/NtbRlc=
Subject key identifier:   99:0F:80:7D:3A:92:E7:29:88:03:22:F0:A7:45:7C:2B:F2:60:93:8F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB1CB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 Mar 2021 23:00:13 +0000
Certificate not after:    Mon 24 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 16906
                          IP: 200.31.160.0/19
                          IP: 2803:cb40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15408312 (0xeb1cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 15 23:00:13 2021 GMT
            Not After : Jun 24 15:00:00 2024 GMT
        Subject: CN=ae3b6dcb33e6143b4093d7f50d6cdab29eaec143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:8d:c4:a5:66:18:90:15:d0:df:7e:e8:7b:
                    b5:ac:c6:33:61:92:a9:87:dc:f9:c1:84:bd:a0:1f:
                    17:73:42:9d:4e:72:83:af:8b:c8:72:37:b1:5e:d1:
                    a4:d2:68:97:d9:70:a9:f0:5f:e6:a2:8b:14:9b:69:
                    58:cf:b7:0b:db:bb:28:34:f6:db:b5:74:50:1b:d7:
                    d4:67:74:c2:c7:0c:41:55:75:0d:49:a5:c5:f4:63:
                    09:5d:c9:70:4a:ea:00:c5:da:8a:e6:f9:5b:f2:c1:
                    c5:15:36:d3:50:f5:3a:54:79:42:e0:83:43:2a:8f:
                    ad:55:a5:f0:37:a4:b0:41:a6:e0:78:7d:fc:ff:d2:
                    1c:b1:10:b1:d9:74:62:7e:20:3b:e9:41:be:cf:44:
                    75:29:3e:5d:ae:d4:c7:49:b8:9a:71:93:0c:99:95:
                    55:f3:08:91:f5:5b:65:22:b3:1b:bd:d2:fa:be:30:
                    67:e6:d7:08:a7:84:75:52:95:53:d9:03:a4:ef:18:
                    ad:31:ad:c9:db:61:47:c6:cc:ff:46:ed:7a:2a:27:
                    86:ad:e2:06:04:a7:ee:e2:9a:25:2d:0e:7a:e7:ff:
                    be:cc:97:a0:8f:43:95:93:0f:d3:fe:18:b4:a5:b5:
                    14:31:5f:fc:f2:8e:a8:47:7d:75:e3:03:b3:4b:75:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0F:80:7D:3A:92:E7:29:88:03:22:F0:A7:45:7C:2B:F2:60:93:8F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.160.0/19
                IPv6:
                  2803:cb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16906

    Signature Algorithm: sha256WithRSAEncryption
         2c:0b:7b:12:6c:54:28:20:a8:24:83:76:cd:4c:09:e3:ed:e9:
         c5:51:32:fb:0a:f9:18:ae:86:db:df:15:f7:41:16:4e:a4:c0:
         d5:4a:a8:fa:fd:d5:9f:6a:46:b7:d3:eb:94:56:92:5f:49:f4:
         40:5b:cb:a0:37:0f:9e:e3:f0:8f:d3:07:89:9e:ce:63:f4:87:
         53:b6:a2:2f:c1:6e:56:94:a7:a7:f9:30:ed:03:08:f0:ef:ec:
         c7:cd:f8:12:a9:da:b1:82:39:a8:9c:1a:86:b4:30:c7:0c:fe:
         81:27:92:63:2f:45:fb:08:74:d7:0a:5d:57:70:d6:9c:83:8a:
         47:2c:74:ce:fb:b6:97:46:95:4c:74:0b:9a:b5:f2:fb:3f:ce:
         03:2a:ba:f3:83:b5:65:f9:7a:fe:53:c9:de:87:f9:fd:60:27:
         c6:dc:a6:e4:3f:c9:cb:66:ef:b6:32:ee:43:92:a4:08:9c:53:
         37:d5:41:41:c9:85:26:5c:12:22:bd:14:b0:29:55:58:55:53:
         5e:6c:0d:80:5e:0a:bd:e8:0e:5c:b9:74:73:13:ee:99:8d:12:
         95:8c:04:52:a0:b6:51:17:6d:18:9a:19:03:68:2f:03:7a:13:
         9f:4c:89:4b:63:d0:b1:88:d3:2b:40:72:5d:de:fe:34:1f:a3:
         f9:0e:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----