Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer
File:                     d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer (raw, json)
Hash identifier:          cE50YXA5KIPpuGbPEKncoZigi7TC18mHBh3AlHNCHPk=
Subject key identifier:   A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDC9C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/d6c012e30dc831b6875f6cfcb5639d3f391769b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Oct 2019 15:31:45 +0000
Certificate not after:    Tue 16 Jul 2024 19:59:13 +0000
Subordinate resources:    AS: 269783
                          IP: 45.184.108.0/22
                          IP: 2803:a360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15583680 (0xedc9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 15:31:45 2019 GMT
            Not After : Jul 16 19:59:13 2024 GMT
        Subject: CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:47:1f:8a:d3:fe:4c:87:63:a9:27:33:11:
                    dc:22:5e:68:1a:c6:95:05:e1:21:ec:15:68:ad:6c:
                    19:af:69:a4:f5:e8:53:66:3f:6d:14:7e:17:cb:f2:
                    16:ea:ff:80:fc:6b:e1:ef:94:3f:b3:7e:18:a6:98:
                    2e:4f:cd:20:80:4b:b7:8e:d2:b2:ce:00:57:62:81:
                    f2:6f:b7:f2:ad:53:ea:b5:3a:25:86:3a:48:66:e8:
                    82:44:5d:74:58:41:54:10:c8:74:19:81:88:16:75:
                    ba:0a:6e:7e:8f:8c:99:ad:7f:82:d7:e4:39:f7:19:
                    6d:6e:b1:0e:c3:c7:c0:06:b3:61:59:49:4b:c8:a8:
                    39:a7:f8:28:bf:3d:bb:e0:af:f6:5e:9a:5c:2b:78:
                    26:aa:d4:de:1d:e9:ca:eb:b6:56:1e:8a:55:f9:05:
                    ea:63:70:c5:3f:ca:4c:af:d4:25:5e:22:3c:d1:9b:
                    28:8d:1e:75:81:db:f4:17:df:89:53:8a:63:ca:cb:
                    cc:a7:d6:cb:fd:cb:84:8e:3b:a6:23:f7:f0:de:78:
                    25:3f:62:e0:aa:a4:3e:d4:16:26:22:91:da:51:91:
                    44:ff:d9:0d:fd:fc:00:5e:76:5b:65:d1:93:62:ee:
                    fb:d7:57:2c:c9:2b:65:74:18:18:a3:84:4a:66:53:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/d6c012e30dc831b6875f6cfcb5639d3f391769b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.108.0/22
                IPv6:
                  2803:a360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269783

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:e8:7e:23:c9:fb:11:6c:83:4f:4a:ac:3c:4b:96:2e:3a:
         06:a9:62:d2:2f:2f:30:64:27:5c:4d:78:8d:e7:e5:fe:6c:f3:
         62:c7:b1:1c:cb:63:ea:93:51:a9:e1:e4:28:d4:32:af:31:6a:
         9a:74:d3:7a:7d:5d:9c:9a:1d:56:e7:5a:e6:e2:8d:55:ff:3e:
         04:ab:cd:44:42:4a:0e:5f:db:30:06:60:a7:fd:0d:d8:de:6f:
         83:13:18:af:f3:e8:42:f5:65:b8:52:91:d7:d5:88:b2:97:06:
         1b:d2:03:57:df:76:e7:e0:f3:ed:cc:bf:a3:00:30:c5:b0:7c:
         84:86:dd:15:ae:bc:48:96:f1:da:b8:70:64:7c:32:14:db:f3:
         73:dc:18:96:f5:98:e8:4f:0e:5e:4b:bc:53:4c:82:39:3d:6a:
         74:2a:1a:26:29:da:7c:72:c7:13:7c:76:e5:b4:c2:03:fd:e3:
         9b:9a:34:20:1c:32:6b:f9:5c:13:47:ef:e9:cb:74:4b:fc:10:
         fa:ad:16:5d:f3:9f:c1:56:59:e9:0d:78:6f:66:90:3b:cf:d6:
         25:ba:24:d7:8e:df:95:21:70:94:05:bd:2b:0b:43:48:50:fe:
         0c:96:11:da:fc:ec:33:34:fc:1b:b3:42:f9:3e:5b:e3:bc:bd:
         53:0a:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----