Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
File:                     d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer (raw, json)
Hash identifier:          PmlgEaaUOs1CSb2CBJB6j6/xGVl4TSrNoS7+36RYHbs=
Subject key identifier:   3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E05249
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Sep 2020 15:55:51 +0000
Certificate not after:    Tue 02 Apr 2024 19:28:54 +0000
Subordinate resources:    AS: 265740
                          IP: 128.201.20.0/22
                          IP: 2803:13c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14701129 (0xe05249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 29 15:55:51 2020 GMT
            Not After : Apr  2 19:28:54 2024 GMT
        Subject: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:be:38:ac:4f:54:b5:d3:39:48:5d:d5:39:
                    fd:61:95:3d:d4:a1:7f:c6:cd:c4:62:52:ce:20:b0:
                    27:f2:39:25:9e:19:3a:5f:e5:45:2a:07:39:18:92:
                    71:a7:e1:a3:12:ac:54:09:ab:d9:2a:c2:20:67:82:
                    c2:f7:d3:69:10:ea:52:31:8b:5f:15:57:3a:f6:7f:
                    6b:8a:21:26:c9:14:14:c9:bc:bd:22:cc:93:36:7e:
                    d5:0b:ee:18:35:6d:1a:0f:6f:a4:5b:b7:a8:6e:c5:
                    1d:5d:20:cd:98:8b:63:7f:69:36:6f:a6:f1:27:ce:
                    2d:62:f5:42:17:b5:d6:55:aa:9a:dd:10:15:e2:cd:
                    50:ef:43:fc:ea:ac:43:45:4d:2e:6a:9c:06:a0:c8:
                    95:c0:24:41:9b:fc:12:a7:ac:79:64:14:ac:42:b5:
                    f9:63:b5:60:6e:9b:76:8c:36:5c:24:3d:83:a7:c8:
                    1e:71:bf:ee:d2:7c:21:fb:21:15:b7:ad:d6:5e:b9:
                    44:2d:0d:fa:0b:a0:16:d6:40:0c:79:35:57:60:c1:
                    df:b3:60:b0:c5:d7:29:85:d0:c0:8f:f2:22:89:c0:
                    8d:47:87:ae:f9:e6:ce:d5:2a:d4:c1:aa:a0:57:0d:
                    49:88:02:a0:2c:73:d6:b2:51:31:b8:a2:3e:d4:8a:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.20.0/22
                IPv6:
                  2803:13c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265740

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:87:7c:b5:76:89:98:f3:8b:5d:06:0a:62:f2:6d:32:88:
         68:2a:7d:17:13:f9:bb:86:6a:8f:ec:83:3c:c0:da:f7:f7:6f:
         75:71:61:aa:cb:87:f0:72:4c:e1:3e:c4:d2:ec:63:78:2e:c2:
         08:ee:c0:d2:fe:f4:e2:04:4b:dc:c0:77:5c:61:e3:00:40:6b:
         6b:96:93:a3:8a:55:4d:09:eb:f5:a3:98:d9:79:99:6c:1b:cf:
         b2:ac:e0:97:4b:87:9e:e9:7a:8e:a3:35:88:3c:b4:d9:51:b2:
         ee:45:c6:d8:55:d6:49:be:ac:dc:18:ec:ad:0f:23:4a:a0:15:
         f7:17:6a:dd:95:91:68:31:4e:ae:74:c3:56:52:65:52:b6:03:
         0b:02:ab:48:ec:ba:82:4a:6b:25:63:71:db:dd:37:ef:f3:a3:
         2d:5e:f4:e4:9c:12:23:79:0a:13:06:ac:25:bf:a5:2c:a6:eb:
         99:69:7d:77:a1:bc:02:1e:38:23:94:30:a8:7e:aa:be:f0:23:
         7f:8c:62:ef:58:c1:af:35:d3:03:05:d1:e8:61:6d:53:87:08:
         bb:f1:6d:f1:3f:2f:82:f0:c5:53:ab:4e:fe:31:b7:e2:3a:48:
         2b:2b:b1:36:c2:bd:f1:2e:7b:5b:84:c3:83:e8:ca:aa:e4:84:
         2b:49:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----