Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer
File:                     cb320b79e8976c901f192c3b7778287f392e9486.cer (raw, json)
Hash identifier:          hrfrdXkbXz0vK6vPiLhu6mBC3ceR0KVP6QIEF06rlp4=
Subject key identifier:   AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E54C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/cb320b79e8976c901f192c3b7778287f392e9486.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Aug 2018 19:33:08 +0000
Certificate not after:    Mon 13 May 2024 21:59:36 +0000
Subordinate resources:    AS: 266852
                          IP: 45.239.120.0/22
                          IP: 2803:c2a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15027354 (0xe54c9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 23 19:33:08 2018 GMT
            Not After : May 13 21:59:36 2024 GMT
        Subject: CN=cb320b79e8976c901f192c3b7778287f392e9486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:bb:b8:62:41:10:79:76:b9:31:3f:26:fc:
                    d5:58:a3:be:3e:c2:ce:da:97:f3:b3:3b:2e:24:f5:
                    0c:25:7a:98:28:c4:bd:3c:5b:52:2e:9b:56:80:0c:
                    d2:7e:b1:e3:45:9f:81:26:5e:e0:cd:b7:56:cf:95:
                    fe:19:e2:54:db:a8:38:f8:ae:5e:7e:27:ec:3f:f4:
                    31:48:7b:13:31:51:2c:20:4e:af:a7:39:b5:5b:65:
                    4f:d5:b7:bd:c9:99:38:0e:d8:d5:10:78:d6:07:0a:
                    3d:40:03:c3:7c:87:ae:44:9d:dc:63:d6:4e:19:4c:
                    e6:5b:dc:02:bf:b4:8d:18:90:98:9c:43:64:30:84:
                    c5:92:36:e6:38:2e:62:1d:63:5e:bc:e8:30:05:18:
                    9d:cf:2a:ba:82:af:d0:21:c7:c5:5d:f1:d4:59:38:
                    99:97:b6:66:8f:bc:96:b2:b9:9c:b6:b6:fe:e9:60:
                    0c:49:2f:71:f1:85:02:21:c6:a2:de:75:ff:03:de:
                    c2:31:06:3a:57:d8:bc:40:96:3d:81:56:b7:c4:3d:
                    f1:5d:a1:58:3d:b5:e7:2d:11:22:a3:1a:74:4b:40:
                    37:1d:46:4a:3d:92:cb:b7:47:d8:42:8f:44:b1:19:
                    63:d7:b2:8b:83:3e:b1:d8:79:6c:65:18:67:5c:f1:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/cb320b79e8976c901f192c3b7778287f392e9486.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.120.0/22
                IPv6:
                  2803:c2a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266852

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:b6:eb:88:d1:9d:a3:6e:4e:12:a6:db:04:b8:5d:e3:6c:
         98:66:6e:8b:23:40:9b:eb:ae:5b:a1:09:77:5b:6a:06:31:48:
         34:09:e5:28:74:83:6b:e5:61:0a:11:81:3f:33:38:bb:b2:82:
         20:a7:68:61:7d:ba:de:53:35:87:9d:56:c7:d3:11:40:8e:f1:
         82:e8:ec:53:36:b7:f1:48:de:29:45:65:9b:5a:34:29:89:e2:
         a8:0a:5d:58:05:dd:da:d3:ff:f5:ab:47:1d:9d:e6:b5:5f:4d:
         2c:74:c9:d2:40:ec:ea:90:50:7c:16:5a:e3:79:f3:86:cb:6c:
         1c:73:1f:aa:3e:76:b2:27:69:a9:11:3a:48:d8:a9:0c:94:1d:
         50:2e:6d:4f:a8:dc:dc:3d:ef:b0:c4:b6:a6:0e:0e:49:4c:fd:
         b1:83:06:bb:95:17:ca:e5:cd:db:62:5d:58:ba:86:28:87:03:
         23:00:80:0a:e1:50:90:12:74:61:4d:9f:53:55:aa:3f:fa:fe:
         cd:a6:40:b9:ef:8f:32:6c:e0:18:5f:5f:69:29:17:c6:45:9c:
         18:a5:30:75:d8:9a:3e:67:ae:bc:73:3b:e1:bf:05:25:ac:4e:
         81:25:bd:42:81:c6:8d:77:c0:53:ee:a5:fe:b7:08:3f:43:0d:
         3b:20:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----