Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e934f8b9376c3ced6bba33fde47f9cfccf71bcba.cer
File:                     e934f8b9376c3ced6bba33fde47f9cfccf71bcba.cer (raw, json)
Hash identifier:          Itbkf57goH6UlMzc+54O3fgnNRuJ9tv5egm3QBGv+Mo=
Subject key identifier:   89:1C:E7:82:B9:19:54:D0:79:49:36:89:F9:3F:D4:98:0D:9D:E7:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA5D37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/e934f8b9376c3ced6bba33fde47f9cfccf71bcba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Jul 2019 20:56:17 +0000
Certificate not after:    Mon 21 Oct 2024 22:04:02 +0000
Subordinate resources:    AS: 269803
                          IP: 170.81.240.0/22
                          IP: 2803:40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16407863 (0xfa5d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 20:56:17 2019 GMT
            Not After : Oct 21 22:04:02 2024 GMT
        Subject: CN=e934f8b9376c3ced6bba33fde47f9cfccf71bcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:e4:16:ff:d3:52:33:da:ed:4e:c0:ee:92:
                    e6:22:ce:e3:2c:70:15:5f:5b:1f:f5:c8:59:f9:37:
                    1a:2c:3d:52:01:0a:b8:a6:3b:d3:ee:82:58:7e:b3:
                    56:ac:de:00:f0:ea:77:46:91:4d:70:c1:14:c1:3b:
                    2d:7c:c8:16:1b:16:36:10:d9:c5:83:26:d1:f5:24:
                    e1:c9:35:59:76:08:f0:b8:6d:36:f4:b3:90:57:c2:
                    8a:ed:9c:8d:7a:6e:8e:d5:53:b1:73:3b:b0:25:24:
                    73:6c:23:25:78:07:8a:f4:31:27:98:11:71:0c:1a:
                    b7:ba:b5:4d:33:e4:36:0f:8e:e8:6c:3f:32:86:d3:
                    ae:e9:4c:a1:20:46:64:19:be:86:19:0a:6a:2b:a9:
                    3f:51:c0:1c:08:5b:aa:88:80:e8:21:3a:06:e3:ef:
                    f7:e7:fa:da:2f:3b:e4:6f:fd:4e:46:3a:c8:40:15:
                    fc:4f:ca:0a:b9:43:9e:ad:9f:20:43:66:f5:4a:c7:
                    a7:10:c2:7f:39:a6:85:ca:26:d0:54:ea:fb:ed:8a:
                    e0:9d:55:a1:0d:18:37:53:38:18:33:3e:55:79:0a:
                    31:72:93:b7:7c:40:59:12:ba:9c:a9:b3:df:90:7e:
                    f0:c5:b7:d5:f9:c9:b6:85:36:5d:5f:08:26:08:a9:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:E7:82:B9:19:54:D0:79:49:36:89:F9:3F:D4:98:0D:9D:E7:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/e934f8b9376c3ced6bba33fde47f9cfccf71bcba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.240.0/22
                IPv6:
                  2803:40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269803

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:34:97:32:16:8a:3c:37:87:da:68:f6:16:4d:cd:16:78:
         ac:70:ac:62:42:c0:86:78:24:3e:2e:eb:f2:74:fb:4d:7c:0c:
         7d:ce:8b:f3:91:9d:5e:7c:9d:4c:00:26:ea:2d:60:55:94:98:
         67:76:7a:d5:0d:7f:a7:ef:a2:7f:19:0c:21:fd:3e:17:5d:89:
         1f:37:dd:43:f6:8f:7f:33:7c:e0:ef:de:3d:aa:60:2b:55:57:
         c1:5f:6f:99:d8:41:84:ff:79:a9:56:18:5d:0a:66:86:fb:36:
         70:f8:3d:9d:a9:7e:f9:f3:28:c1:cb:ad:90:8a:2a:cc:91:dc:
         cf:0a:0e:92:ef:9f:f9:2c:c3:b0:1e:e6:7c:8d:01:f5:34:a8:
         a4:cd:dd:75:2d:e6:ad:a0:93:92:0e:8c:cc:91:2a:ac:18:e4:
         55:5d:bd:f4:07:0d:9f:b0:a2:0a:bd:ea:ad:20:1b:f1:2d:7b:
         83:13:7a:77:15:1e:f5:0e:64:ec:0b:f5:b6:55:c6:a2:df:91:
         d8:8d:ad:ce:ee:b4:40:25:33:ae:3b:1b:b0:64:6b:78:4d:5b:
         00:1d:19:8f:83:5d:87:8e:5b:ab:aa:e1:8a:c6:2a:2c:dd:cf:
         5c:d0:3b:f9:48:d8:ad:18:4f:d9:e6:dc:2f:e2:df:70:41:ee:
         e3:54:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----