Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2ce394e96663b378431d47446cfee17ee08277.cer
File:                     ef2ce394e96663b378431d47446cfee17ee08277.cer (raw, json)
Hash identifier:          qb0SmxejUuATQoyNyc+cYCNxRCYbwYjrnZ/sxKwXokk=
Subject key identifier:   2B:D1:37:99:52:DE:AB:B6:C8:4F:03:F3:3A:D6:F9:EC:A7:E5:B6:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0359A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/ef2ce394e96663b378431d47446cfee17ee08277.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 Feb 2019 12:48:04 +0000
Certificate not after:    Thu 18 Jan 2024 05:00:00 +0000
Subordinate resources:    IP: 2803:fc10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14693786 (0xe0359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 12:48:04 2019 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=ef2ce394e96663b378431d47446cfee17ee08277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:58:ec:60:ff:32:aa:45:68:b6:64:e3:76:
                    c3:87:19:fd:0c:d6:8e:fe:23:43:71:c5:37:ac:93:
                    9f:53:a6:a6:99:0b:fc:d7:3f:92:a5:9d:05:62:5e:
                    0f:60:b2:9e:c2:b5:ae:8c:cd:1f:35:eb:77:f1:bb:
                    3f:31:f2:15:90:75:b0:49:ee:d6:4b:94:2f:72:81:
                    7c:5d:7a:fa:1a:70:5f:ff:01:91:b9:c3:c2:b0:4d:
                    26:d2:78:25:bd:06:92:0f:be:fe:c5:95:92:b4:da:
                    e4:04:da:e4:9a:5e:bf:74:5b:32:16:fd:66:e7:02:
                    88:16:ee:0d:a9:36:de:46:cb:37:da:e3:f8:2b:a4:
                    5c:23:cb:f6:14:ec:50:42:8a:ec:1f:16:e9:80:48:
                    72:cf:48:85:af:07:34:24:e3:4c:74:02:f4:92:42:
                    38:6b:c1:39:12:81:f3:4c:3c:01:8d:59:35:2a:cc:
                    08:6a:86:d9:d7:21:f4:a3:72:bf:ba:a6:7a:b8:cd:
                    30:6c:02:32:e3:8d:ab:04:ec:00:fe:9b:6f:6d:48:
                    35:62:0a:8d:4c:e4:b3:66:de:8e:c1:ed:5e:61:8b:
                    19:8b:fb:b5:a2:2a:26:e5:38:db:f3:28:87:ea:2f:
                    ce:f8:fa:54:03:9e:41:d6:04:80:f4:d6:30:79:b4:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:37:99:52:DE:AB:B6:C8:4F:03:F3:3A:D6:F9:EC:A7:E5:B6:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/ef2ce394e96663b378431d47446cfee17ee08277.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:99:ce:a8:54:c8:b5:df:8d:2c:29:eb:e5:0d:bd:a2:67:19:
         26:b7:82:72:98:3c:52:21:21:4a:9f:86:6b:6e:c8:e7:cf:8f:
         3e:25:ab:ab:42:6f:78:9e:ad:91:8d:f4:60:07:61:bd:91:3b:
         81:ef:0d:2c:e0:b1:b9:ac:08:41:59:c9:e0:2d:43:17:ff:6b:
         7a:1c:57:0d:d9:64:ca:8e:e7:82:e5:ed:1f:77:af:84:a5:d1:
         1a:a5:91:35:50:c2:cd:5c:c5:69:90:e0:d5:90:53:a7:85:df:
         3b:48:e1:6a:bd:d6:53:a4:87:f5:68:28:2e:d2:e5:76:5a:1b:
         69:99:cc:25:a0:bc:07:e6:ce:a9:20:fa:a5:60:b9:ff:7d:78:
         4b:cb:f8:97:75:9f:58:79:72:36:a0:77:96:3a:ad:39:e7:ea:
         98:93:f0:2e:3a:f1:60:68:dd:af:53:ab:55:b4:16:f8:18:60:
         59:91:0f:b4:3c:e8:af:d3:6b:d5:5f:11:45:42:49:ea:d6:c0:
         98:fd:03:5f:21:bc:7a:f8:b2:e9:44:15:c3:02:ce:4d:20:6d:
         99:99:de:cc:24:38:bf:c3:b5:3e:fe:6d:39:60:97:69:3f:6a:
         73:45:95:da:a2:c4:e7:15:3e:b8:e1:bf:94:3b:71:aa:71:b2:
         f2:1c:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----