Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer
File:                     e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer (raw, json)
Hash identifier:          24KF9JpruFkqbTdA7LBNDRchnaUo7D1B1ms2p2+lJcY=
Subject key identifier:   E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D92027
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/e5542707278f94f915cf6c50f07f27b7ca4d3a19.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Jul 2019 15:06:26 +0000
Certificate not after:    Mon 08 Jan 2024 18:21:17 +0000
Subordinate resources:    AS: 267791
                          IP: 45.172.176.0/23
                          IP: 2803:afa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14229543 (0xd92027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 15:06:26 2019 GMT
            Not After : Jan  8 18:21:17 2024 GMT
        Subject: CN=e5542707278f94f915cf6c50f07f27b7ca4d3a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:36:89:07:4f:0e:ed:0b:f3:f8:20:28:ca:
                    70:c2:d5:9a:62:8d:fc:d5:78:2b:69:73:7a:d9:71:
                    06:6e:d8:38:b2:ad:ef:f1:5f:22:e3:e6:59:b0:6a:
                    5e:4b:b2:1f:9b:f1:d7:d8:65:54:89:ac:e4:89:f0:
                    84:35:2b:f9:b1:bf:09:16:6a:02:1b:20:c7:01:cb:
                    04:42:e4:52:d0:49:5d:3e:8d:0a:3d:9e:09:4e:45:
                    0c:75:d9:dd:57:71:f6:14:52:54:36:ee:9d:e8:17:
                    d2:07:37:30:4e:1e:f0:fc:e9:bd:38:35:11:06:15:
                    f6:76:ac:30:f8:96:dc:0a:9c:89:20:90:82:07:e7:
                    0a:72:ff:f8:25:18:92:c4:00:40:a3:7a:63:db:c9:
                    53:91:89:e4:9b:08:53:ae:7c:cd:01:09:2d:e9:55:
                    74:c2:61:8f:2b:4b:c3:d6:c8:07:a4:47:42:54:b2:
                    84:10:22:ca:35:41:36:ef:3a:9a:08:9a:59:dd:96:
                    3b:0f:f7:a5:ff:04:19:0c:23:d4:f5:a3:26:c5:b6:
                    75:1f:9c:75:8f:26:ed:4b:db:92:ce:4e:a4:b7:83:
                    61:dd:a8:c6:cd:54:c6:e8:5c:9c:bf:ca:cc:b6:b8:
                    c1:2f:0d:c3:86:4d:fd:c7:f1:70:49:65:37:36:ba:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/e5542707278f94f915cf6c50f07f27b7ca4d3a19.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.176.0/23
                IPv6:
                  2803:afa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267791

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:66:50:d6:8d:b7:a2:a2:ed:5e:f6:15:7f:56:b4:04:27:
         c6:ea:a2:ed:24:8d:f0:11:bf:a0:54:0a:2b:60:4a:f4:36:91:
         2e:47:34:a4:d6:5a:15:b4:cb:48:64:60:78:0d:78:2d:25:01:
         e8:d3:3a:e9:ed:71:35:e9:69:d6:03:4f:bc:ad:9a:84:29:53:
         d1:3c:82:ac:fa:93:1c:67:14:5c:4a:30:0e:7b:d9:94:1c:ed:
         27:ae:e9:37:3b:d4:cc:d1:43:85:c8:07:54:54:d7:0f:12:6e:
         f3:f8:e9:5a:d7:57:e8:71:9a:22:ab:b5:2e:67:54:ef:26:17:
         19:bd:8f:d2:64:5f:7f:eb:7c:f1:90:93:5e:3b:bd:09:c8:e6:
         61:32:cc:2d:3d:24:f5:f6:d7:4c:91:44:b5:d8:b1:a2:69:ea:
         d2:21:68:19:7b:11:7e:1b:95:80:3f:9c:08:40:b8:35:e6:ee:
         da:c0:74:6b:41:fc:e2:95:d5:03:2f:58:61:e1:d2:11:eb:00:
         76:18:b4:00:74:57:95:fc:3a:25:af:48:d7:b0:cf:b7:dc:21:
         a1:e7:f1:29:fa:c7:a3:8c:ed:68:0d:de:c7:c6:62:63:8c:1d:
         2d:4b:8e:5c:1c:2b:a9:85:d5:b9:5d:e6:39:a2:af:5c:93:b3:
         6f:d6:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----