Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer
File:                     d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer (raw, json)
Hash identifier:          P+sN1YRuQJfJl0cw73+Mlm0WLGYRjzFrwxxio4bK5aI=
Subject key identifier:   22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEEA9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Jul 2020 08:46:38 +0000
Certificate not after:    Tue 30 Apr 2024 15:42:53 +0000
Subordinate resources:    AS: 270051
                          IP: 179.43.0.0/22
                          IP: 2803:4de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14609052 (0xdeea9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 08:46:38 2020 GMT
            Not After : Apr 30 15:42:53 2024 GMT
        Subject: CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:5f:4c:71:46:24:43:8e:f3:1f:86:84:bd:
                    3d:a5:fd:49:e4:8c:9f:2d:44:54:12:4a:bc:1d:8a:
                    14:0a:c4:ec:cb:e8:10:3c:7f:f2:c1:7b:be:64:69:
                    f8:34:96:0a:6e:d3:09:9d:80:f7:66:e4:01:69:a1:
                    a5:eb:7a:f0:67:55:28:38:66:52:85:07:c4:ad:33:
                    a1:c7:8d:63:ec:7e:f0:de:c9:9e:8e:8b:f4:b2:6e:
                    31:9a:b8:6f:e7:2d:01:d5:eb:58:b0:de:38:ea:6c:
                    0b:9d:f7:08:e3:9d:16:92:b5:9f:f0:e3:f5:a0:cc:
                    20:6c:1c:46:e2:b9:93:45:d3:8f:22:f3:aa:0f:01:
                    e5:b9:ab:d1:46:2e:c9:f6:f6:63:0e:75:60:b7:43:
                    7f:29:9a:ea:6f:e9:a1:35:0c:81:52:1d:6f:90:13:
                    b4:54:b6:3e:83:e4:d9:10:87:e6:70:95:ba:9a:4e:
                    4b:48:bd:7b:f9:ed:13:f4:44:2d:94:71:6f:83:40:
                    c2:f8:7d:b6:ab:a8:0e:2d:11:ce:9f:71:05:f8:65:
                    8e:5a:49:94:23:db:d8:76:c5:5d:95:65:2f:ec:e2:
                    3f:56:18:01:a9:71:a8:5b:4b:a6:44:58:4a:0a:25:
                    91:73:a4:4c:7a:c3:74:63:c8:5a:64:e7:80:e6:a0:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.0.0/22
                IPv6:
                  2803:4de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270051

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:9b:4b:72:4a:e1:b6:a8:99:dc:95:38:0c:23:66:32:61:
         cc:5e:ba:8a:ce:ec:15:8b:32:73:e6:6d:12:73:6e:d0:4f:89:
         e6:9f:3b:bb:fd:38:05:f0:74:81:21:80:27:5c:24:90:2b:ca:
         6c:d7:37:28:00:19:59:b9:36:4a:df:ab:b7:f5:d2:00:9c:63:
         56:8f:f3:48:00:f4:78:df:a0:b2:f5:83:0b:d3:71:ec:b3:db:
         e3:f6:88:93:12:b2:af:1c:8d:e3:ca:0f:6f:d4:af:c3:7f:1f:
         14:5c:00:94:dd:bc:cb:be:ff:78:b9:ed:de:8f:1a:e1:85:97:
         61:91:c9:08:f3:bf:bb:67:e3:3d:65:1b:15:70:06:ac:c8:fd:
         94:0f:14:2c:5b:72:e3:04:5c:e9:22:2a:ed:64:77:1b:86:2d:
         4c:64:16:3b:f7:46:ac:e4:85:6c:bc:35:b5:27:f5:9f:4a:33:
         a0:86:c9:79:17:e0:b2:a9:3d:2d:cd:b2:01:1a:23:13:e9:af:
         e1:a3:ed:b3:b5:dc:a8:8d:bf:6c:93:18:53:5a:c2:78:f5:fb:
         ad:ab:f2:f7:8e:b3:cd:2e:7f:65:bc:8c:ad:15:0c:17:45:4e:
         7a:3b:27:51:90:a8:61:55:4a:2c:ae:48:7d:df:ea:bc:5f:b4:
         e2:50:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----