Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
File:                     fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer (raw, json)
Hash identifier:          1UDAXC6EDfnp0Iex5sSpsgyiclu347fWB25ihTputVY=
Subject key identifier:   F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4CF87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Sep 2019 19:01:50 +0000
Certificate not after:    Fri 26 Jul 2024 21:01:54 +0000
Subordinate resources:    AS: 273039
                          IP: 45.185.16.0/22
                          IP: 2803:5360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16043911 (0xf4cf87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 27 19:01:50 2019 GMT
            Not After : Jul 26 21:01:54 2024 GMT
        Subject: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:f5:20:3c:41:66:19:02:1d:3e:59:c0:8c:
                    b2:73:92:5d:72:55:27:17:fa:8c:6f:8c:3d:d2:fb:
                    b4:c7:75:4d:a9:40:8a:bd:cb:0c:e7:d8:eb:08:ab:
                    ba:c7:b8:35:1b:12:c6:9e:9a:ac:2b:f4:fb:1d:f2:
                    5c:15:7c:8e:47:c4:61:6b:dd:10:15:52:0e:42:c4:
                    2b:b9:4a:c7:17:c3:12:4e:a6:ce:05:8d:d8:cc:36:
                    5c:57:6f:c7:51:8a:c5:40:00:3a:88:4d:6e:53:28:
                    9f:0e:b0:d9:36:3f:2c:08:24:eb:a7:a0:52:5c:f5:
                    79:e0:43:95:db:ed:7a:fb:be:f0:e9:06:d8:26:bb:
                    4d:8d:e0:e3:3c:e8:c5:36:a7:60:5a:ee:9a:4e:8b:
                    a8:e4:39:fb:0b:ac:a3:16:db:e9:ad:c7:f3:76:01:
                    74:1b:7b:d9:8e:61:09:48:fa:99:a5:09:5f:a2:c4:
                    0e:12:36:e8:29:f6:4b:b2:2f:6b:db:14:46:ab:c7:
                    21:36:cc:43:0f:93:06:87:69:0e:a9:cd:69:b8:0a:
                    ff:1c:e3:47:ab:ae:51:8d:ba:5d:a9:0c:a2:d1:d8:
                    cd:8c:85:1b:48:76:ef:45:48:01:c5:6e:f6:7d:06:
                    fc:61:0a:e5:de:24:ac:c4:e1:49:43:c4:80:32:3b:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22
                IPv6:
                  2803:5360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273039

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:ce:6b:e8:80:7c:54:e7:9a:45:4b:5c:27:a6:0d:e0:8c:
         ac:11:01:d2:e0:20:85:f7:3a:d7:f2:d9:a2:42:50:37:20:4a:
         8c:42:7e:ed:aa:1b:7f:3b:63:57:cc:79:e9:0c:86:8b:4c:60:
         b9:3a:cb:70:fc:7e:cf:8a:7d:5c:ff:1d:61:42:b2:21:c7:87:
         18:57:2b:69:dc:aa:bd:e6:01:8a:ac:20:9d:89:c7:01:18:f7:
         1f:4f:ae:c7:1f:8c:2f:c5:7b:3a:fb:50:4e:02:df:92:7c:ec:
         de:a1:0e:18:42:dc:68:14:73:44:1d:c3:61:8f:e8:c1:fd:1d:
         3b:38:27:db:bf:86:db:87:0d:5a:ec:74:f7:f9:ff:f2:29:b9:
         cd:c0:ae:21:57:5b:ad:ce:db:16:9e:b9:b1:8b:32:88:36:70:
         ab:1f:8e:33:9c:92:fa:b7:27:71:d2:28:47:2d:43:40:82:3c:
         6e:a9:16:9b:f6:26:49:a3:78:fb:85:44:18:32:cf:93:8b:87:
         eb:61:22:29:fb:36:11:32:fa:78:72:df:b5:b8:4b:16:5d:8d:
         99:40:ab:8d:2f:a0:d0:24:89:41:5b:db:25:81:5b:0e:39:04:
         f5:3a:cc:1a:4f:83:34:63:2d:51:af:6c:84:25:5f:c3:f0:41:
         d3:ae:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----