Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
File:                     cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer (raw, json)
Hash identifier:          fUoxgph57UVKK88XI3dvSKrJdivdpzgxK+E6PeNfA2A=
Subject key identifier:   2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F382FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2019 13:07:53 +0000
Certificate not after:    Sat 31 Aug 2024 16:01:04 +0000
Subordinate resources:    AS: 263703
                          AS: 269827
                          IP: 45.186.208.0/22
                          IP: 143.255.84.0/22
                          IP: 190.97.224.0/19
                          IP: 2803:7800::/32
                          IP: 2803:d760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15958779 (0xf382fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 13 13:07:53 2019 GMT
            Not After : Aug 31 16:01:04 2024 GMT
        Subject: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:3a:ed:30:a7:75:a2:5e:7b:c5:43:59:cc:
                    66:29:45:6c:59:1b:22:32:c0:5a:82:16:cb:db:b4:
                    a2:f0:5b:b1:15:a1:3b:82:2e:19:2d:25:3e:1e:08:
                    5e:4f:79:24:39:6d:a6:0b:da:d4:39:96:b7:a1:68:
                    8b:9c:a5:e9:ae:22:47:65:5a:3e:39:bd:26:b5:9a:
                    7a:a2:fd:0d:d5:82:66:af:85:ad:1b:8f:d0:0b:27:
                    a0:46:e0:f0:89:f0:80:c2:14:d4:c3:42:77:d4:bf:
                    9d:74:91:94:96:84:aa:16:8f:dd:9b:08:f7:0b:c2:
                    b7:64:50:de:13:ab:80:67:ed:6c:bf:a0:91:e2:04:
                    3c:54:74:c6:79:55:af:b8:a9:a9:0d:50:b6:05:96:
                    57:61:a1:21:ca:61:7c:92:e7:8c:66:06:70:a9:50:
                    6a:5d:98:ce:35:7a:55:57:db:6a:c0:f1:1f:03:b9:
                    f3:64:f4:b8:1b:c6:7c:cd:c0:06:2f:e4:13:5b:7e:
                    85:fd:84:bc:e2:29:ec:af:8e:c3:24:4d:5e:80:b5:
                    b9:ba:8f:4e:38:6a:39:c0:2c:d7:59:93:01:d1:fc:
                    23:21:66:cc:d8:a1:7a:63:21:1e:dc:aa:da:c4:ed:
                    9b:bd:d7:2f:f5:b5:e0:f9:c1:59:65:8d:3c:4a:90:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.208.0/22
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32
                  2803:d760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263703
                  269827

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:2a:2b:ea:cf:6c:0a:4a:cb:2f:df:f8:58:e1:e6:74:e4:
         70:f9:e8:fc:b4:ff:34:6d:3f:06:c3:2f:d1:21:cc:7c:59:5b:
         8c:fa:27:22:79:e4:19:ee:1c:10:a2:c7:1b:31:63:b1:c5:06:
         db:36:5b:4e:5d:94:85:39:94:f6:5f:e5:61:5b:a4:2e:fb:05:
         7f:84:88:75:a9:06:3b:e5:23:a6:72:60:4a:0c:ab:73:a6:26:
         de:7d:4d:47:ab:ed:65:47:9b:d1:85:35:ff:24:56:3f:19:be:
         de:a9:a6:f4:39:ba:49:f2:0a:09:6d:dd:fe:38:c9:45:74:37:
         98:22:fd:c9:30:89:04:58:b0:09:19:50:11:e2:c9:2e:be:c4:
         f5:4e:4f:c5:7b:00:5f:03:10:2a:38:c8:e0:90:47:03:24:f3:
         e8:83:80:b2:03:c0:d7:d3:ed:b0:7c:6e:e1:dd:91:da:38:e9:
         00:52:67:f9:93:df:9f:b3:94:c2:f4:46:78:bf:ff:47:74:8c:
         77:65:ce:3d:a5:ce:dc:70:b8:70:34:4d:c1:fb:ff:47:bc:56:
         d0:b9:13:e4:62:58:be:73:73:2a:ee:23:f8:ce:8f:4e:89:ce:
         82:be:6f:a0:c1:66:a3:b5:4e:7b:0f:ea:84:c8:f4:ba:d0:31:
         65:dc:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----