Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.cer
File:                     eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.cer (raw, json)
Hash identifier:          3svOQRO12ZXUVDhzQTrqNUITqag8WwDdcK/dM8p4QIY=
Subject key identifier:   CF:15:CE:28:E0:9E:14:19:5C:B1:40:92:71:0C:CF:87:87:4A:BC:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE16A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 May 2020 17:50:43 +0000
Certificate not after:    Fri 19 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 28111
                          IP: 190.0.160.0/19
                          IP: 190.112.0.0/19
                          IP: 2803:1e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15603368 (0xee16a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 26 17:50:43 2020 GMT
            Not After : Jul 19 06:00:00 2024 GMT
        Subject: CN=eceaebee3a7bbef322f7a029f03f5f54f0cddbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:f6:db:21:77:56:dc:0f:38:0f:90:e8:7a:
                    14:59:48:ba:f2:67:23:e5:ee:c5:a6:66:d2:6e:f0:
                    6c:c8:3e:ca:d7:6a:96:d8:40:ad:2e:2b:47:ee:76:
                    68:10:52:87:3b:34:7b:ea:71:f2:0a:77:95:b2:41:
                    29:11:f6:78:42:b7:7b:43:58:74:c1:7e:45:43:cb:
                    c3:2a:6f:4c:20:4e:c1:3d:00:3c:7e:df:e6:7d:cc:
                    41:6c:7a:df:1e:05:ee:43:3a:63:ba:a6:0e:28:8b:
                    87:55:02:7f:0a:ab:eb:af:07:05:b7:96:ae:3e:97:
                    67:b6:88:5a:43:15:71:24:ca:b3:d8:9a:2a:ea:b1:
                    2c:e2:21:d7:94:21:68:4c:64:34:d9:7f:0a:90:6e:
                    9c:c9:c2:7e:35:15:92:2d:78:ed:4e:19:41:ee:1b:
                    4a:df:9d:d4:d2:78:03:f2:6d:7d:47:f0:0c:4a:3b:
                    ba:e6:8f:00:dd:b5:d3:06:b2:db:a4:96:88:21:81:
                    95:77:de:ec:ae:1a:b6:a6:ba:c1:10:dd:01:4f:7f:
                    89:68:e4:e8:24:92:f6:88:a9:8c:63:d2:d7:f0:65:
                    88:22:cf:51:03:9b:37:a8:70:05:88:40:b1:dd:d8:
                    1e:a3:74:ac:20:90:54:52:cb:fe:a6:77:3c:81:e4:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:CE:28:E0:9E:14:19:5C:B1:40:92:71:0C:CF:87:87:4A:BC:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.160.0/19
                  190.112.0.0/19
                IPv6:
                  2803:1e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28111

    Signature Algorithm: sha256WithRSAEncryption
         39:df:c2:c7:06:ef:e6:74:55:14:15:07:b8:8b:d0:b7:de:b3:
         6b:0b:c8:fc:f0:b3:1c:da:5d:ec:2c:25:13:3d:cc:b6:29:fb:
         18:4f:f5:1e:70:c8:08:3d:f3:30:bd:bd:17:e5:e5:0e:ee:3c:
         dc:f4:b8:b8:d5:33:31:96:0c:7b:0e:4c:96:da:55:63:ca:ac:
         19:54:71:40:15:44:8b:e8:f7:67:38:ca:11:fc:b4:7c:3b:9f:
         05:08:fc:d7:21:6b:a5:db:11:4f:2f:a6:f2:87:49:dd:6f:6f:
         73:76:ae:42:b0:9d:e5:da:54:13:44:94:8e:36:49:d5:39:3e:
         6c:04:f8:14:c8:f7:5d:54:fe:54:9b:97:a0:eb:dc:29:47:53:
         db:58:6e:17:5f:98:9b:bd:ec:90:93:02:cb:04:99:c9:40:39:
         09:32:9c:e4:93:29:c6:87:7b:66:fb:52:a1:28:ed:3b:07:ae:
         34:35:0b:a7:93:fe:a1:73:f6:43:ba:27:e1:b2:93:3e:a3:af:
         4f:cc:0b:65:09:68:f0:6c:c6:59:10:c1:37:a4:4c:b2:11:58:
         16:ad:91:3b:f1:39:4d:96:46:c2:2a:85:a8:34:eb:07:62:a9:
         75:0e:dd:02:30:95:aa:00:ea:a1:ea:af:c2:31:6f:de:f4:8d:
         04:07:16:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----