Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3dc064b6e1cf464199cfed2b8939f8c7d1fc1de.cer
File:                     c3dc064b6e1cf464199cfed2b8939f8c7d1fc1de.cer (raw, json)
Hash identifier:          moHHbARxsFm3jj40xOcP2NzkkzDXaVZ9CNyQfCxjCeI=
Subject key identifier:   AF:80:5A:84:03:30:09:CB:1A:BA:3A:2B:D4:54:CB:7A:92:C7:D7:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E896FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19eb3ab8-9967-4fad-b068-0a898ec8d1b2/c3dc064b6e1cf464199cfed2b8939f8c7d1fc1de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19eb3ab8-9967-4fad-b068-0a898ec8d1b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2019 16:25:09 +0000
Certificate not after:    Wed 05 Jun 2024 14:52:26 +0000
Subordinate resources:    AS: 269742
                          IP: 45.180.22.0/23
                          IP: 45.180.44.0/24
                          IP: 2803:6960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15243004 (0xe896fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 16:25:09 2019 GMT
            Not After : Jun  5 14:52:26 2024 GMT
        Subject: CN=c3dc064b6e1cf464199cfed2b8939f8c7d1fc1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:49:21:da:cc:23:a5:f0:ef:31:9b:94:10:
                    e3:84:d6:b6:c4:1e:b9:6a:b8:c4:15:fa:ec:2e:85:
                    40:11:e6:48:7f:da:66:cb:fd:38:70:98:d5:b1:ef:
                    31:47:4b:6e:55:79:7b:d9:e3:a8:50:90:fd:23:ec:
                    40:c1:6a:04:ee:b7:30:8b:c2:99:2c:ad:4b:7b:f1:
                    f2:49:b8:70:9a:12:c5:20:ad:28:24:fc:c3:2f:8d:
                    a7:a2:79:a5:00:e2:b7:2c:c0:1e:63:b9:cf:3e:35:
                    1e:01:41:e9:db:ed:bf:75:fc:2b:07:9a:1d:c6:3a:
                    22:c1:44:25:a7:ad:32:c4:ea:90:83:54:23:87:fd:
                    00:c3:73:12:eb:70:62:5a:c3:ec:93:f1:7b:5b:a1:
                    4b:a5:bc:33:b3:01:f0:37:86:29:fb:53:f4:87:1b:
                    f9:b7:39:4a:74:fe:7d:7d:e3:e7:28:3b:ee:32:84:
                    1f:ed:92:10:be:31:16:1b:aa:0e:ae:ae:ff:fe:87:
                    90:17:fa:86:39:c6:1e:d7:1e:5e:9d:ad:c2:2b:88:
                    1f:0c:34:b2:35:d7:30:5c:df:14:d5:16:8d:cf:be:
                    01:dd:9c:bd:7d:12:17:67:60:ac:ea:e2:a5:4f:06:
                    35:da:44:0b:e0:f2:cb:bb:83:ac:ce:21:50:c7:4f:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:80:5A:84:03:30:09:CB:1A:BA:3A:2B:D4:54:CB:7A:92:C7:D7:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19eb3ab8-9967-4fad-b068-0a898ec8d1b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19eb3ab8-9967-4fad-b068-0a898ec8d1b2/c3dc064b6e1cf464199cfed2b8939f8c7d1fc1de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.22.0/23
                  45.180.44.0/24
                IPv6:
                  2803:6960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269742

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:d2:c1:a9:51:6f:c1:f1:15:96:3e:84:2a:07:ca:20:72:
         b9:3a:aa:09:8a:72:d0:5f:fa:ff:54:ed:5c:b6:39:b5:d0:0b:
         16:77:ee:ec:61:ad:39:c8:47:4a:8f:b1:9a:d1:b9:57:30:60:
         9d:ab:42:35:af:08:29:f8:83:f8:c6:53:ef:a6:bf:e8:47:03:
         d5:04:a1:a4:18:52:a8:53:ae:17:17:d9:2e:3c:b9:2a:db:0f:
         a2:6a:1b:9a:ff:57:29:95:d9:a0:0a:e8:1d:c2:23:f9:01:af:
         21:13:87:b8:5a:5d:8c:a2:3a:e5:d2:67:2f:af:d2:c3:a0:f5:
         33:b6:b9:16:45:68:1d:ee:aa:f5:79:a9:63:17:ad:48:4b:0b:
         74:d4:b9:f8:2d:87:da:68:f1:b7:9e:20:38:1a:0b:32:01:10:
         ef:67:73:13:3f:0f:1d:f7:fb:f6:1a:0e:b0:d4:c1:14:df:72:
         6d:3c:8b:32:05:27:b3:b6:80:a2:fd:a4:20:62:37:2d:1d:3f:
         b4:d0:30:5f:ac:44:c4:bd:3d:78:43:06:32:9e:77:0f:ec:80:
         23:4b:0e:23:10:4f:46:81:82:a3:df:54:e5:b0:4d:86:6e:72:
         c8:72:48:61:a8:90:02:cd:45:49:55:02:3d:13:e5:b8:b2:3d:
         87:0a:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----