Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df3418897f2874633d71f1d981fb08a7833248bf.cer
File:                     df3418897f2874633d71f1d981fb08a7833248bf.cer (raw, json)
Hash identifier:          PIrSWGnjyjiEtCLhnWD9emz1JFgtsXwXeNgYmMcgGnU=
Subject key identifier:   C7:CD:F0:54:F0:89:E7:D1:47:05:8C:A4:C6:F4:2C:AC:43:DF:C2:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D93237
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/df3418897f2874633d71f1d981fb08a7833248bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jun 2020 21:07:26 +0000
Certificate not after:    Tue 09 Jan 2024 18:36:21 +0000
Subordinate resources:    AS: 28549
                          IP: 131.161.244.0/22
                          IP: 201.161.192.0/18
                          IP: 2806:219::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14234167 (0xd93237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  8 21:07:26 2020 GMT
            Not After : Jan  9 18:36:21 2024 GMT
        Subject: CN=df3418897f2874633d71f1d981fb08a7833248bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:ff:c9:59:c3:fd:b5:e5:70:a3:8b:6d:a6:
                    fa:36:c8:63:27:30:a3:4a:ef:a5:0a:3a:2c:64:6c:
                    c9:3d:5e:40:06:4f:0f:96:a0:a0:63:3b:40:53:57:
                    d6:84:8f:cf:68:57:f4:00:f0:27:3d:e3:6b:65:40:
                    e3:96:a2:b5:d3:f8:8d:77:3d:4c:38:05:67:a1:7a:
                    59:30:db:f0:c3:d2:1f:94:f5:93:ca:b7:10:bf:95:
                    9c:91:29:11:1f:89:59:a9:d8:02:49:51:f8:bf:59:
                    c7:87:8d:2b:d7:84:b6:4d:7b:e2:90:3c:65:13:d3:
                    d9:e3:14:8e:49:60:6f:ca:c3:09:60:a8:78:4a:aa:
                    a5:24:c5:4c:f8:db:22:dd:a6:dd:fe:d5:05:a6:d8:
                    39:d1:c6:81:f4:23:10:a9:ad:5c:28:16:b6:65:e4:
                    40:24:6a:d2:fe:34:de:fc:00:69:5a:e4:12:0f:15:
                    63:a3:06:9a:af:b0:f5:c1:6a:93:0a:d5:6f:9b:d1:
                    32:ca:71:c2:b2:9a:fe:ff:c7:ad:60:68:6c:dc:ee:
                    eb:4f:70:da:63:73:a5:8d:f2:6a:d9:a6:bf:7f:d5:
                    69:1b:86:cd:f2:92:2d:0a:3c:87:e3:f5:b2:15:78:
                    ef:3c:10:76:ed:29:97:b4:3c:12:16:0c:f3:89:bc:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CD:F0:54:F0:89:E7:D1:47:05:8C:A4:C6:F4:2C:AC:43:DF:C2:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/df3418897f2874633d71f1d981fb08a7833248bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.244.0/22
                  201.161.192.0/18
                IPv6:
                  2806:219::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28549

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:5b:43:fb:0e:44:7a:1c:5d:fc:ca:3a:d9:16:49:16:11:
         69:b7:d6:f6:94:e4:b2:51:61:60:b0:5a:1b:46:27:cb:91:ae:
         4b:0d:30:f8:70:17:a6:44:55:dd:db:e9:45:c9:a7:f6:34:b0:
         d9:10:25:ac:38:1b:64:53:62:90:11:18:2e:1a:79:11:15:9f:
         4a:89:2a:01:74:8e:75:a6:62:03:f4:84:03:4b:65:ee:73:29:
         4b:f1:50:f6:45:8f:4d:72:48:a4:ff:2d:65:ec:ce:55:d8:4b:
         a0:1e:11:6a:92:b5:da:8e:2e:e7:1f:a3:c8:ff:29:ba:2a:21:
         ca:63:38:b8:38:ed:f2:1d:f2:60:42:be:f7:c5:fe:62:16:df:
         ea:37:2d:5d:84:87:15:d8:51:18:55:15:cb:95:0c:07:0e:f4:
         ce:ce:d6:f1:41:ef:1f:13:4c:24:35:a9:4a:59:13:a7:8d:e7:
         0a:37:f9:20:21:54:5f:ee:30:f7:c4:16:74:b5:89:b6:55:30:
         32:8e:a0:f7:01:53:64:56:b4:51:50:a5:50:4c:d9:fa:2a:ff:
         79:35:a7:5f:27:38:00:6b:76:45:fa:ed:ef:8b:ce:f0:c7:85:
         8e:49:80:85:b5:b8:8a:de:02:99:76:fc:23:92:11:90:0d:ce:
         f0:3d:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----