Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db69e9d926a8fd56475445765b011adad2f2d430.cer
File:                     db69e9d926a8fd56475445765b011adad2f2d430.cer (raw, json)
Hash identifier:          f3lnWowaRs88HZfQCmtm3JLaqO6BpZ0h3FjEMD3tkSc=
Subject key identifier:   73:31:E7:AE:AE:29:D6:9F:96:AB:D4:EF:80:B2:8B:C0:3F:30:DC:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7D5DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/db69e9d926a8fd56475445765b011adad2f2d430.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 07 Oct 2018 00:36:54 +0000
Certificate not after:    Fri 31 May 2024 17:18:03 +0000
Subordinate resources:    AS: 266872
                          IP: 45.160.28.0/22
                          IP: 2803:6aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15193566 (0xe7d5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 00:36:54 2018 GMT
            Not After : May 31 17:18:03 2024 GMT
        Subject: CN=db69e9d926a8fd56475445765b011adad2f2d430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:1e:3b:e2:bf:7b:3a:0c:62:4c:f3:10:77:
                    70:88:a1:45:68:92:fd:cb:51:7e:a1:a8:22:7f:37:
                    e2:3b:db:52:3a:e3:8e:42:c1:56:55:cb:fc:39:72:
                    d1:df:56:93:ae:15:f6:80:b2:81:4a:53:c1:01:4d:
                    ed:29:ce:0d:80:3d:fb:97:87:08:c4:c5:73:15:07:
                    20:62:79:cc:98:78:5a:af:59:f9:94:09:c5:d5:1a:
                    4a:69:31:fc:c9:8e:a3:9b:d7:ab:08:6f:07:fb:0e:
                    3d:49:62:00:17:fe:a9:14:a5:65:43:42:3d:b1:2e:
                    ce:b8:d2:7d:f9:5e:1b:af:35:1e:2d:f9:3d:06:3a:
                    85:17:80:e1:ec:0b:74:7e:bc:f6:57:26:c1:52:d9:
                    ca:67:77:2e:82:b8:bf:a7:d3:a7:ce:48:86:3d:eb:
                    3b:1f:46:43:ff:f5:e6:02:b8:84:7f:c4:18:26:ed:
                    1c:a3:bd:2e:07:03:73:5e:3e:4a:73:7a:96:f5:32:
                    a0:e7:99:62:ad:da:7d:6a:2e:9c:4a:56:ad:9b:80:
                    14:07:e9:a8:da:b5:da:3b:f4:44:a6:54:b8:11:5e:
                    9c:68:8a:7b:59:71:56:33:ac:bc:e2:b2:3a:5f:bb:
                    8c:0b:3e:0b:9d:3d:0b:57:6e:16:69:1e:ac:39:af:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:31:E7:AE:AE:29:D6:9F:96:AB:D4:EF:80:B2:8B:C0:3F:30:DC:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/db69e9d926a8fd56475445765b011adad2f2d430.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/22
                IPv6:
                  2803:6aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266872

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:e4:96:22:cc:72:8b:25:0b:d9:97:c8:f9:01:ac:d2:b4:
         20:d7:e6:76:4b:f5:68:7f:30:b7:82:4c:72:f7:50:dd:30:ce:
         2d:b0:52:bb:6c:11:0f:cd:5f:e3:e9:d1:0b:20:de:0e:46:84:
         50:09:c4:a8:b1:af:69:90:bb:ba:34:3d:91:37:9b:81:32:7c:
         a1:cb:f7:e6:fc:84:11:13:ad:97:5a:6c:84:9b:d6:6e:5a:01:
         8e:d2:ba:a7:c7:f9:5c:19:05:7d:4d:d7:84:fb:9d:46:a3:32:
         63:c6:6a:8b:1e:93:3d:11:c0:a0:1a:0c:fc:52:33:26:cc:2c:
         65:0b:a4:ae:47:1b:a3:7f:f9:b0:c9:4e:7f:2f:71:23:b9:56:
         da:d4:a7:db:d5:de:41:59:a5:4d:13:94:2b:35:7b:99:cb:25:
         2e:01:a5:5d:56:57:8e:9d:01:b8:33:07:62:63:9d:a2:45:94:
         f3:58:bf:46:b6:16:7a:00:2c:19:43:bb:85:8a:14:88:1c:4d:
         e2:3d:3c:aa:3c:c8:bf:72:7d:7c:67:b7:67:3b:f0:3f:96:64:
         4f:58:ee:06:40:55:b8:96:33:00:64:55:78:fe:e2:a1:2e:85:
         c3:a1:c5:e6:57:3d:8f:4f:43:f1:e3:b1:68:77:b2:9e:12:c6:
         8a:6c:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----