Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e31962c7b69b60f9f76d1235172fc683230c33ef.cer
File:                     e31962c7b69b60f9f76d1235172fc683230c33ef.cer (raw, json)
Hash identifier:          eaw7PG1Vm/UMZ3ANNn1/LKugxGlMvzxdW75u5yYJ/Uk=
Subject key identifier:   CA:AF:AA:A1:D8:DC:EC:E5:5D:0E:23:93:FB:69:AF:C6:C3:58:E1:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F11BEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/e31962c7b69b60f9f76d1235172fc683230c33ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Nov 2019 18:41:52 +0000
Certificate not after:    Thu 08 Aug 2024 18:53:05 +0000
Subordinate resources:    AS: 269806
                          IP: 45.186.4.0/22
                          IP: 2803:6b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15801324 (0xf11bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 18:41:52 2019 GMT
            Not After : Aug  8 18:53:05 2024 GMT
        Subject: CN=e31962c7b69b60f9f76d1235172fc683230c33ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:32:f3:00:24:fd:3c:c4:68:0d:ca:87:36:
                    91:36:af:aa:b5:1f:fc:eb:72:cd:f5:f8:39:5b:26:
                    8d:62:59:7b:95:2b:53:be:fe:9e:b0:57:76:1a:23:
                    37:2a:e9:f5:10:0f:bd:9a:46:09:24:a6:2d:4e:e6:
                    cb:e4:aa:18:ff:03:04:cd:67:69:2e:14:ab:82:61:
                    51:2d:4f:a5:4f:d2:92:b6:3b:11:5c:2c:91:92:04:
                    c1:31:fb:c2:ac:b9:0d:89:a9:63:cf:0b:0a:65:9d:
                    bd:c3:8b:30:67:15:af:4c:2d:61:13:b0:80:33:12:
                    5d:71:30:63:34:f2:a4:ff:7f:d8:46:f4:04:64:e6:
                    41:1d:ad:0a:5e:a7:75:2b:5b:2d:5a:ad:5b:ef:ed:
                    2d:17:c4:55:bf:ef:58:49:25:bc:73:1e:9d:bf:a7:
                    b3:44:d5:f1:af:cb:0a:a0:e3:2a:4b:ed:91:d2:33:
                    77:55:fd:ad:68:a2:cd:f0:56:97:d6:75:10:94:fd:
                    aa:8d:fc:3c:3e:6d:98:94:cd:20:3e:54:32:c3:2e:
                    91:3a:3d:64:46:f0:b3:1f:5e:27:37:88:ee:d1:83:
                    96:7c:a2:8f:fa:53:e4:64:d5:54:0a:89:a8:d5:c4:
                    28:c0:ff:49:b9:8d:65:ae:73:3f:7e:bc:af:5b:07:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:AA:A1:D8:DC:EC:E5:5D:0E:23:93:FB:69:AF:C6:C3:58:E1:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/e31962c7b69b60f9f76d1235172fc683230c33ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.4.0/22
                IPv6:
                  2803:6b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269806

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:54:5d:fd:b5:95:01:93:b5:e0:5d:39:fc:c3:73:1f:04:
         c8:32:e4:7c:c9:b9:a9:ea:da:8e:c9:8b:d1:41:76:cc:8f:b1:
         c4:f2:fc:3d:f9:04:b3:87:df:34:c6:3e:e6:d6:92:51:81:55:
         ee:07:5c:a1:59:69:4e:50:38:59:f8:af:bf:1f:e9:94:8d:f4:
         03:fa:b5:4e:a6:16:41:39:45:59:ba:cc:f4:d9:72:2b:2a:94:
         d0:6e:f4:cf:4f:33:96:9c:09:a0:e1:6c:0c:de:65:d2:dd:d3:
         0f:77:5a:9f:31:87:4f:36:62:77:1a:61:4b:ab:0b:05:6a:f5:
         60:4b:75:59:dd:8f:93:6d:97:e5:92:8b:94:28:c0:40:5d:a4:
         e2:a7:de:bf:77:f6:f9:b3:0e:66:30:a9:12:30:92:78:e9:38:
         a7:73:51:a9:23:57:5e:db:aa:65:62:c3:d9:a7:a3:05:4c:a5:
         f1:fe:ec:8d:6f:4b:4d:0f:f6:da:40:96:5c:96:6e:dd:5e:96:
         63:59:9d:b0:d8:ee:bd:b1:0c:31:16:ec:6f:f5:72:fa:ca:34:
         73:58:a8:e1:1c:c8:08:1a:03:c1:55:8b:dc:35:04:87:f3:f4:
         97:6a:cf:91:2b:d2:39:00:37:2e:02:50:22:1e:66:9b:b3:2b:
         8f:33:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----