Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer
File:                     e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer (raw, json)
Hash identifier:          gEEvzHFlTf8LGgYTD7t9MPallG4dSE+3CqWT/EUvJHs=
Subject key identifier:   71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6CD9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2019 16:16:08 +0000
Certificate not after:    Thu 23 May 2024 18:15:45 +0000
Subordinate resources:    AS: 269728
                          IP: 45.180.140.0/22
                          IP: 2803:1160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15125919 (0xe6cd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 16:16:08 2019 GMT
            Not After : May 23 18:15:45 2024 GMT
        Subject: CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a1:5b:de:90:2a:ca:03:5d:1c:eb:84:5c:77:
                    f6:a6:b7:75:ce:79:41:21:06:2f:25:23:5d:e5:da:
                    49:3e:12:10:c8:15:a7:47:30:6f:47:2e:56:ea:a9:
                    81:38:28:61:f7:1f:d4:f3:c3:ed:70:22:ab:d5:53:
                    7a:ad:fa:28:6e:6d:b1:d5:5f:74:d8:dc:3a:97:37:
                    57:78:c1:95:12:9c:99:58:71:13:84:ea:d8:54:7e:
                    d4:2b:b1:71:4e:9a:bd:9d:cd:2b:74:75:07:6b:0b:
                    b8:d6:df:eb:2b:0d:ad:09:d7:32:78:11:ef:72:d7:
                    1b:64:fa:58:39:79:66:c4:8a:5c:9f:04:6d:0e:5c:
                    13:f4:78:6c:bf:14:e1:2d:a3:dd:dd:86:6f:b7:3f:
                    fb:bc:b0:a2:b1:b0:9c:83:9d:61:fe:cf:ee:bb:57:
                    d5:d2:e4:75:8c:7b:80:13:69:a8:04:1f:34:e0:4d:
                    97:b6:84:ce:5d:9e:da:48:e1:cb:52:8b:63:f9:d0:
                    9f:67:53:5e:3e:0e:5b:bb:5e:98:a6:8d:5f:51:c6:
                    fd:53:6e:38:f1:d4:9f:08:a5:55:15:9f:35:f8:3f:
                    77:61:3a:6d:06:f0:a2:dd:6b:43:73:30:d2:67:db:
                    b9:3e:89:71:f2:94:df:ff:4a:18:f1:e1:fe:85:02:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.140.0/22
                IPv6:
                  2803:1160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269728

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:b2:2b:74:a0:d9:b8:0f:96:b2:e1:0c:4c:c6:39:0f:d0:
         87:cf:d9:c0:a7:4b:5d:85:d7:00:a2:db:97:68:1f:1f:d4:85:
         67:e2:2e:e4:1b:8a:c0:ca:48:cd:c7:52:fb:7f:a2:9d:11:61:
         e9:36:d7:1f:a8:c3:3e:e9:7c:30:7d:a7:75:bd:81:e0:af:f1:
         ef:99:0b:e1:03:25:dc:ca:12:be:68:c6:8d:2b:26:51:bf:b3:
         a9:1c:af:d9:6d:28:e5:6b:f1:fc:c5:d3:f7:22:76:75:c7:22:
         99:a8:87:8d:b0:4a:9d:73:71:eb:59:c9:05:56:7d:25:6b:e6:
         05:8e:dc:03:92:83:61:06:7d:fe:5d:90:d4:19:8e:a5:3c:ab:
         6d:a0:23:49:da:93:ba:78:02:13:e9:e8:86:e1:95:84:ac:25:
         95:77:d5:47:25:17:55:14:59:16:71:73:9f:53:31:08:a4:8b:
         41:43:1f:87:85:d4:3d:61:20:79:2c:83:91:c9:72:d4:74:01:
         b9:66:30:9c:d2:24:48:45:c1:bf:8c:a7:db:dd:5f:4c:15:ec:
         a0:9e:4a:63:f6:9d:1c:28:e7:6a:2d:e5:52:17:05:ee:83:bd:
         b8:61:43:3f:44:39:85:90:d8:98:0e:9f:ea:1f:31:54:d2:36:
         45:58:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----