Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer
File:                     ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer (raw, json)
Hash identifier:          X61T8qZXrWDEQ4irEs4/Ki0j9rWDpiuR6Iv+GBaVbU0=
Subject key identifier:   6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD37E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 May 2020 21:16:31 +0000
Certificate not after:    Sun 17 Nov 2024 20:10:06 +0000
Subordinate resources:    AS: 266703
                          IP: 45.230.80.0/22
                          IP: 2803:ad20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16594919 (0xfd37e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 26 21:16:31 2020 GMT
            Not After : Nov 17 20:10:06 2024 GMT
        Subject: CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:f3:d7:24:04:8f:de:8d:dd:cf:c5:69:8c:
                    32:5a:bb:ff:66:59:37:13:aa:25:24:68:b1:c1:37:
                    7f:33:92:5e:82:fc:53:08:36:87:b3:f3:ca:a4:29:
                    47:24:db:c8:1d:7e:8f:5e:f2:35:fc:81:94:90:ae:
                    30:34:24:cc:9f:42:eb:f9:89:21:21:18:2c:fe:70:
                    ea:85:dd:86:80:f6:f5:91:b7:ab:f8:48:a9:62:fe:
                    d7:c2:32:f4:8e:ba:8e:94:02:d6:7d:b7:ce:d1:eb:
                    89:73:70:23:d7:ea:cd:74:90:03:70:95:6f:45:ac:
                    33:c5:0b:7c:07:f0:60:47:b6:31:f2:f0:1f:62:ec:
                    bc:e1:15:d0:ee:d9:0f:bf:f3:cd:a6:fb:65:70:61:
                    1f:f7:a0:ea:56:48:c2:80:06:36:a7:4e:5d:d5:54:
                    01:da:c5:c4:2a:43:08:3d:5b:bb:bb:cd:35:e7:cd:
                    a2:84:31:a0:57:bd:35:21:3b:6e:73:ac:e2:42:51:
                    7b:82:90:4d:5a:8a:c3:cf:51:3b:49:30:1c:89:3d:
                    1f:ba:ab:e0:fd:3f:37:d6:95:27:66:b4:75:46:e7:
                    f9:62:cb:93:10:4c:5c:26:05:ea:74:65:a2:e7:14:
                    44:ad:9f:bc:0c:87:e7:82:bb:1a:33:65:cc:f2:b6:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.80.0/22
                IPv6:
                  2803:ad20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266703

    Signature Algorithm: sha256WithRSAEncryption
         09:71:6f:92:fd:34:d1:cc:b7:f5:3d:7b:83:a5:6c:6c:ef:09:
         7a:4f:2c:13:2d:35:58:af:49:33:1b:4a:85:51:65:31:97:0e:
         5d:5f:f0:95:67:48:8e:5d:7c:d5:fa:f0:67:3e:eb:fe:9a:f4:
         bb:ed:39:0c:bf:d8:11:25:42:ef:af:16:51:61:b9:6f:60:ab:
         36:63:b0:cc:a9:b8:f7:f6:06:73:c6:b2:74:b7:55:2c:b5:37:
         77:53:cf:5f:7a:c1:ef:18:69:75:92:e8:f1:41:cd:55:23:b5:
         b4:dc:d2:7f:f4:58:56:f2:36:b3:cb:a7:f9:8d:48:8f:f3:26:
         75:93:9a:8d:fa:0f:80:db:33:18:74:d7:8c:59:f3:32:3e:e2:
         f0:dd:cb:d0:2c:5e:3b:01:4f:c4:72:53:f8:61:fe:70:77:61:
         ff:06:4f:5b:73:ea:1f:a6:81:c7:db:78:92:ce:d4:91:87:c4:
         48:6e:a8:c7:9f:be:5c:c1:2c:14:67:1f:58:a8:60:c0:23:1d:
         d1:14:be:e6:78:5e:7f:48:15:df:0f:87:d9:e8:4e:b6:b1:cc:
         6b:a2:b1:3c:85:db:fc:0c:99:39:a9:6f:34:70:a4:5f:ff:31:
         eb:07:6c:11:2e:62:be:1f:6f:20:f5:b2:cd:ff:c8:2c:c3:7b:
         79:65:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----