Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9249d6078896379eaa31ec8630fd15d97793e5d.cer
File:                     e9249d6078896379eaa31ec8630fd15d97793e5d.cer (raw, json)
Hash identifier:          KpJx/Nj7N6/wnwoD04Gpa/ZU6+gXBSbfA68emAXjQF0=
Subject key identifier:   37:8A:05:D0:C7:20:08:96:73:1A:23:6E:D0:92:16:78:45:AC:CD:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBDEF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/e9249d6078896379eaa31ec8630fd15d97793e5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jun 2019 20:50:08 +0000
Certificate not after:    Mon 12 Feb 2024 17:23:25 +0000
Subordinate resources:    AS: 267928
                          IP: 2801:1d:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14409462 (0xdbdef6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 18 20:50:08 2019 GMT
            Not After : Feb 12 17:23:25 2024 GMT
        Subject: CN=e9249d6078896379eaa31ec8630fd15d97793e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:14:a5:2c:f8:13:8d:c1:58:db:17:f5:fc:
                    fe:e6:56:7b:e8:d4:8b:ab:9a:b4:9d:8e:4d:2b:96:
                    c0:28:b7:c5:1a:16:ab:f0:90:9c:b0:a0:db:8f:09:
                    1b:74:97:1b:5d:3e:c4:8c:f7:d9:b1:97:16:54:c7:
                    91:39:a5:59:5f:71:fa:0c:07:27:70:72:90:41:b9:
                    7e:7d:fd:2e:52:94:70:d9:f0:25:54:77:8d:d8:f3:
                    3d:d2:41:98:ef:82:39:63:3e:a8:8f:9a:c3:b4:53:
                    29:98:dc:4e:e9:73:97:31:e7:8a:06:31:40:2a:f9:
                    d1:92:86:c1:db:7e:86:ff:c2:20:70:32:53:1c:23:
                    20:71:0f:c1:fd:96:84:c7:e0:dc:b6:e6:11:01:ea:
                    c0:7c:a3:70:da:5d:ec:b1:a9:89:e5:75:46:05:38:
                    fd:22:0d:8e:b9:64:e0:ae:9c:a5:56:ad:94:6b:0d:
                    df:b6:d1:03:bb:1c:c7:52:3b:9e:e8:d5:ee:37:dd:
                    6c:38:28:f6:35:ef:10:66:0e:d2:c7:c3:b9:26:c0:
                    69:35:94:4b:9e:53:f2:6e:1f:96:6d:2b:17:ca:09:
                    cd:3a:dd:cd:2f:7c:a1:bb:e1:cc:40:83:3c:4f:27:
                    19:37:f5:83:32:cf:38:59:46:81:0f:2a:0e:99:6d:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8A:05:D0:C7:20:08:96:73:1A:23:6E:D0:92:16:78:45:AC:CD:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/e9249d6078896379eaa31ec8630fd15d97793e5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267928

    Signature Algorithm: sha256WithRSAEncryption
         c3:51:dc:2c:0c:aa:9e:c1:db:74:26:a9:23:2e:7b:a0:f0:bc:
         b4:99:49:03:bc:20:83:ea:ae:94:b5:de:62:f6:0b:f3:d1:a3:
         ec:12:c0:d8:30:1f:1c:aa:b0:fe:43:e8:3f:b8:10:a9:64:48:
         86:84:91:56:18:6d:46:d5:b9:ce:72:64:a2:29:67:16:5f:d1:
         94:fb:fc:9a:73:8c:de:93:7e:6c:6f:12:77:6a:d9:14:e7:31:
         eb:a7:87:13:b4:c5:3b:de:7c:f7:5e:f2:04:91:d1:5b:71:33:
         1d:64:44:a8:d3:75:b3:37:de:29:85:cb:6d:f1:d6:04:19:0f:
         35:9f:06:cd:4c:76:ad:00:9e:34:0e:4e:e6:8d:c6:65:e8:fc:
         12:0a:aa:ed:fa:8d:32:16:3e:ae:51:31:94:d2:b9:a5:a5:8b:
         91:a3:b2:9b:b7:6d:b5:ed:c6:18:0e:7c:48:fc:02:83:94:dc:
         d2:4f:31:40:59:00:af:61:28:5c:6e:6c:53:45:37:9e:ad:bb:
         ef:b6:d1:5c:ea:6c:67:a6:14:ea:42:7e:3a:f7:98:92:11:be:
         e1:9c:24:30:59:91:7c:59:73:e2:85:6d:ac:41:c1:5b:c0:22:
         2f:2e:36:72:e0:2d:7d:43:1b:ae:96:97:98:61:ff:18:b4:a0:
         fc:93:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----