Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6d77baa9937f62e953ae062b4a1e076cbffad05.cer
File:                     d6d77baa9937f62e953ae062b4a1e076cbffad05.cer (raw, json)
Hash identifier:          cH2BT9hrYkb5lN824YvQHPlplV6P77jNNMFD+bctWrc=
Subject key identifier:   B9:19:BF:8D:C2:74:37:95:DB:F8:5D:BB:1C:1C:C3:B0:24:F4:41:5C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E83E6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/d6d77baa9937f62e953ae062b4a1e076cbffad05.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Mar 2020 16:15:02 +0000
Certificate not after:    Mon 03 Jun 2024 20:45:04 +0000
Subordinate resources:    AS: 263811
                          IP: 138.204.160.0/22
                          IP: 2803:d240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15220335 (0xe83e6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  3 16:15:02 2020 GMT
            Not After : Jun  3 20:45:04 2024 GMT
        Subject: CN=d6d77baa9937f62e953ae062b4a1e076cbffad05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:95:70:ec:b1:fd:77:22:16:05:99:e6:12:
                    3e:b0:dc:60:35:a6:15:6a:1f:e7:24:ba:cd:f8:eb:
                    2b:1e:fb:be:91:35:47:f1:8d:2f:71:3e:4a:d5:dd:
                    bd:65:28:d3:b0:1f:c8:f0:e3:11:15:bf:11:89:f5:
                    e9:1b:72:1f:e4:ee:22:86:e1:17:1a:a9:e8:31:a3:
                    e1:13:06:ff:f1:aa:52:6d:22:7b:99:09:5f:e1:33:
                    ff:1b:ba:42:05:36:b4:c6:35:6f:3e:39:30:db:fe:
                    54:cb:ea:0b:7c:9f:d6:17:31:fd:b5:20:74:c0:6d:
                    1f:60:fc:82:e5:92:35:77:05:a4:81:21:95:bc:a4:
                    c5:0c:56:1f:cf:e6:49:bf:33:f2:42:e6:0c:65:7e:
                    77:62:13:23:7b:b4:19:af:f7:c0:7a:22:88:54:3e:
                    66:a8:79:4a:27:1d:8a:6b:6b:de:3d:94:52:13:c8:
                    d9:77:3e:40:cb:81:0a:a6:5d:2f:bb:31:ba:0a:79:
                    76:26:f1:19:c9:7e:e1:64:63:36:a3:6a:b4:a0:b3:
                    ac:ad:f7:33:90:9c:fb:39:f0:f2:93:2b:7f:dd:80:
                    43:2c:99:7e:3d:f5:db:9e:89:1d:00:6f:a7:32:89:
                    86:59:95:70:9a:b2:6d:56:b9:de:34:d4:32:42:9c:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:BF:8D:C2:74:37:95:DB:F8:5D:BB:1C:1C:C3:B0:24:F4:41:5C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/d6d77baa9937f62e953ae062b4a1e076cbffad05.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.160.0/22
                IPv6:
                  2803:d240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263811

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:4d:36:fc:a5:e8:7f:bf:25:b4:f7:3a:d5:56:04:7d:b5:
         09:b3:6b:62:77:a3:d0:7e:93:c1:22:b2:cf:d7:8e:e3:2f:3e:
         b0:5d:9a:e1:69:ae:c3:4f:d6:89:b8:20:06:15:af:7e:f2:6b:
         d7:c4:fd:a9:7c:e6:f3:8f:9e:09:83:20:f2:86:a1:5d:80:37:
         38:ce:ef:e7:0b:c0:97:72:8b:69:bf:de:52:08:f2:1b:13:39:
         56:ec:af:87:df:23:34:31:8a:81:35:0f:5a:29:fc:2d:9d:04:
         3a:09:1d:1a:7e:32:bf:7b:31:3e:55:d3:22:d0:9b:cb:9d:fe:
         52:e9:d8:d7:78:76:43:23:b8:ee:bc:f2:2c:f0:d3:ae:bd:66:
         ae:3f:73:55:ca:c1:6f:fc:fb:d3:9d:a5:f8:3e:b4:70:33:f5:
         3f:1c:9e:2c:f3:00:26:7a:4a:2a:cb:9b:40:6f:0b:f8:bd:fb:
         90:17:1e:28:ec:80:e5:83:0e:b3:80:eb:be:ec:00:1d:e5:2f:
         fa:a9:39:8f:33:d2:42:aa:86:d5:6c:37:af:64:d9:8e:6e:f7:
         c2:ac:5b:b5:62:42:04:a4:20:3f:f5:96:9b:93:e6:ec:b7:32:
         96:b0:90:08:41:6d:06:16:a9:4c:5f:25:cf:3c:db:e8:3f:8c:
         15:ad:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----