Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d949111f644a0c953637714a300b3386bfda6951.cer
File:                     d949111f644a0c953637714a300b3386bfda6951.cer (raw, json)
Hash identifier:          RZiE3gdzEc8SipNpb4BYVMkhsegAOmKn8AvVHztPru0=
Subject key identifier:   D0:1A:6E:E3:FB:09:33:A6:1D:8A:FA:1F:24:1E:0C:4B:9B:CC:FC:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF40C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4dba2423-1e8b-4151-9295-b50cff0b907a/d949111f644a0c953637714a300b3386bfda6951.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4dba2423-1e8b-4151-9295-b50cff0b907a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 Oct 2019 14:31:54 +0000
Certificate not after:    Wed 20 Mar 2024 21:03:56 +0000
Subordinate resources:    IP: 138.118.112.0/22
                          IP: 2803:7840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14631109 (0xdf40c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 14:31:54 2019 GMT
            Not After : Mar 20 21:03:56 2024 GMT
        Subject: CN=d949111f644a0c953637714a300b3386bfda6951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:11:0a:9b:96:ea:72:c7:54:d1:86:47:5e:
                    55:be:b7:ea:0b:23:04:ce:71:f1:fc:62:67:2b:3a:
                    db:6e:c7:cf:a4:c6:47:56:c6:0e:78:16:60:c1:f1:
                    ee:bc:31:bf:09:71:8a:6a:ef:11:3c:69:ec:d7:36:
                    21:89:fb:34:cb:43:e6:26:42:41:03:0f:2a:91:55:
                    1a:57:c4:cd:04:b1:cd:2a:33:cc:49:a0:9f:35:3f:
                    da:03:1d:19:43:32:c6:07:46:a6:d0:7c:d3:38:4d:
                    16:80:d1:9c:12:8d:93:c7:07:c3:3a:22:db:db:1d:
                    0f:2e:4d:ec:e5:d3:26:1c:2d:9c:4a:6a:73:10:dd:
                    0a:25:c3:35:34:d3:04:38:3a:0b:95:a0:03:9f:b7:
                    b8:69:50:eb:33:e2:1e:d9:11:49:30:7c:91:e0:11:
                    7a:53:1b:43:ed:ac:1e:a0:aa:f0:b3:d2:a3:db:8b:
                    5e:c1:bc:f8:77:01:68:ae:a3:c1:a2:2a:c9:90:9f:
                    d8:16:1e:5f:67:6e:2b:b9:49:35:63:c6:7a:c0:9d:
                    ba:45:bd:33:c3:93:b6:33:f0:d5:88:0f:5c:60:57:
                    f1:a6:fa:a7:01:23:67:bc:01:e3:db:f5:db:68:8d:
                    9b:c9:a0:c0:b7:f7:d3:3b:d0:30:af:b8:a9:e3:26:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1A:6E:E3:FB:09:33:A6:1D:8A:FA:1F:24:1E:0C:4B:9B:CC:FC:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4dba2423-1e8b-4151-9295-b50cff0b907a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4dba2423-1e8b-4151-9295-b50cff0b907a/d949111f644a0c953637714a300b3386bfda6951.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.112.0/22
                IPv6:
                  2803:7840::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:66:09:ec:75:2f:94:9c:ff:20:b5:87:25:e9:08:a2:50:
         cb:5c:d3:af:12:79:21:1d:e8:16:ac:43:f6:77:46:0e:50:2f:
         0b:c6:0f:26:ec:d5:b1:83:9d:50:34:72:06:72:22:73:f2:9f:
         fd:22:b4:f8:c2:9c:97:4e:25:89:84:1f:41:d3:24:5d:db:ac:
         53:89:b5:47:24:39:a6:91:d0:3c:18:4c:02:92:2c:6f:ef:44:
         17:11:53:e3:af:e3:bb:01:1d:e9:9f:ae:78:bb:8e:a2:28:cc:
         e7:94:f3:77:19:34:75:e8:55:84:aa:37:55:73:3d:eb:c3:bf:
         04:53:a8:e0:4c:34:d4:59:ee:b0:ea:e3:ca:32:50:36:00:02:
         98:18:fa:d3:09:d9:cb:b9:df:5f:34:d3:c5:0f:47:e0:07:76:
         45:c8:d8:be:05:f7:6a:50:c6:cc:9d:6d:69:7e:51:67:8e:6b:
         36:2f:98:f6:0e:9f:d3:b0:a0:ee:3f:83:40:0a:b8:8e:b1:db:
         de:49:74:c9:5a:bf:f1:09:ee:ec:09:bf:17:43:a9:ee:d0:e5:
         18:44:86:cc:5c:0f:c1:70:23:a2:c3:aa:98:81:8c:9a:99:2a:
         a9:e0:1a:9f:bc:f0:bd:3f:1d:4b:70:ed:c5:40:2f:56:1c:18:
         e4:e0:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----