Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b70872ac3bd5b53300dbe9cc03701c80ac3c4281.cer
File:                     b70872ac3bd5b53300dbe9cc03701c80ac3c4281.cer (raw, json)
Hash identifier:          vpR9BiDaK3KYa6II5FNATrurrQRH6AxDJzJ/azPE2Qg=
Subject key identifier:   7F:43:1A:CB:F6:80:69:A3:CC:08:F7:7F:8F:80:DB:39:11:75:AD:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E07D19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fba14599-5c6a-4062-bd32-d6afd13cc902/b70872ac3bd5b53300dbe9cc03701c80ac3c4281.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fba14599-5c6a-4062-bd32-d6afd13cc902/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2019 12:05:20 +0000
Certificate not after:    Thu 04 Apr 2024 22:30:19 +0000
Subordinate resources:    IP: 45.177.68.0/22
                          IP: 2803:9a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14712089 (0xe07d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 27 12:05:20 2019 GMT
            Not After : Apr  4 22:30:19 2024 GMT
        Subject: CN=b70872ac3bd5b53300dbe9cc03701c80ac3c4281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:20:66:3d:2f:7a:1e:a2:61:46:7e:58:27:
                    23:47:02:50:4e:00:7d:15:93:5a:1e:8f:06:d5:d2:
                    51:e9:ef:ce:d7:f6:f0:31:4e:45:f1:f1:97:3c:d9:
                    51:6f:19:50:a7:c2:dd:18:19:d5:36:1c:a2:de:78:
                    e9:50:3c:31:8b:79:5b:ac:64:b7:33:70:80:48:4f:
                    08:85:29:b4:2e:aa:cd:50:96:42:11:ed:c0:55:b5:
                    94:54:a8:83:e0:4e:f8:82:52:66:f8:89:e9:bb:c0:
                    de:82:e2:78:5f:94:bc:07:8f:14:72:e2:48:af:4b:
                    35:cf:b4:bc:21:58:20:7c:26:62:28:90:ed:f0:cb:
                    ac:c2:85:09:98:6d:5c:14:19:7a:5a:85:55:99:c8:
                    5b:05:5f:4a:00:cf:a2:c1:b3:c7:3d:4e:28:e0:cf:
                    2a:6c:bd:53:15:51:ad:0f:10:48:8f:79:98:02:a6:
                    35:8f:b8:fb:ef:a4:5d:29:89:1b:37:d9:dd:19:c9:
                    7e:be:e4:fa:a9:57:8f:0e:99:35:ac:c8:00:fe:f9:
                    61:a5:6c:ca:7a:b2:56:cd:bb:3d:e8:0f:01:bf:a3:
                    86:e9:a0:c2:77:26:52:73:d4:c5:0d:43:1b:4f:d6:
                    8a:9f:62:9e:23:07:10:30:b7:6a:32:70:7d:92:c0:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:43:1A:CB:F6:80:69:A3:CC:08:F7:7F:8F:80:DB:39:11:75:AD:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fba14599-5c6a-4062-bd32-d6afd13cc902/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fba14599-5c6a-4062-bd32-d6afd13cc902/b70872ac3bd5b53300dbe9cc03701c80ac3c4281.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.68.0/22
                IPv6:
                  2803:9a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:1c:b7:1c:e9:29:59:dc:6b:5c:a0:51:23:88:12:1d:24:
         83:b0:ca:6f:f1:38:a4:f9:bb:91:65:c3:34:9f:3f:1f:6d:39:
         4b:da:b8:a8:0a:3f:86:7f:06:0c:45:a7:6e:59:0b:49:b5:d4:
         10:67:f0:d4:8f:23:3f:89:4b:26:60:01:12:bd:88:4d:53:53:
         d6:59:4d:51:57:41:8d:cb:91:96:52:6b:8d:7e:df:e1:c3:a7:
         61:1f:61:0f:ef:6b:15:78:54:6d:7a:06:c6:19:fb:7b:c5:5e:
         ca:9d:e4:f3:9d:2c:08:30:74:63:b4:a7:4c:31:06:d3:ff:8e:
         da:66:5c:69:ea:8c:b0:12:35:df:b5:1b:9c:12:27:51:15:5e:
         6d:c2:53:e8:50:cb:30:b5:a4:a9:02:ae:56:57:d2:1a:25:68:
         b9:a7:be:ae:63:a6:70:2a:4f:94:4b:14:04:b0:f2:13:5d:af:
         fa:0f:f6:7e:94:a2:66:d2:b5:9c:56:98:98:ca:34:6a:d8:8d:
         6f:01:57:15:52:8b:b1:d1:61:6e:8e:90:5b:3b:9c:4e:7a:93:
         62:0b:c1:b6:44:d8:3d:e0:e2:1a:37:a2:68:e6:c5:78:0c:3b:
         95:8e:c6:11:36:4c:67:84:7c:56:b6:fb:e9:52:a6:ed:c6:f1:
         aa:fe:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----