Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a22b288c1e4ed251559cdd04140e06dfc07d0f.cer
File:                     35a22b288c1e4ed251559cdd04140e06dfc07d0f.cer (raw, json)
Hash identifier:          1nq8FB2I7H9M5zImjfKQewwWbjtqThFOZSP9tYEjaWI=
Subject key identifier:   BE:F9:D4:94:52:95:E6:89:56:33:74:C1:CD:31:F1:07:66:19:30:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101AF60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2019 00:14:26 +0000
Certificate not after:    Fri 20 Dec 2024 17:14:49 +0000
Subordinate resources:    AS: 267776
                          IP: 45.171.220.0/22
                          IP: 2803:e7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16887648 (0x101af60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 00:14:26 2019 GMT
            Not After : Dec 20 17:14:49 2024 GMT
        Subject: CN=35a22b288c1e4ed251559cdd04140e06dfc07d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:3f:29:ce:03:dc:c0:6e:f2:6e:9f:df:10:
                    09:61:5e:66:34:85:01:5c:52:96:62:f5:aa:a1:6d:
                    0a:ac:50:4d:41:68:d4:d4:2d:d3:9f:d4:a5:13:0a:
                    11:75:e3:0c:65:f9:a8:85:b0:6c:04:2a:19:1c:7c:
                    9a:73:68:0e:02:01:78:60:f2:3e:f2:1c:c2:40:aa:
                    2c:bc:8c:9c:8d:38:db:e0:74:56:ac:43:6d:25:93:
                    97:8a:f1:e6:3a:2c:c6:11:16:a5:ee:c8:0f:d0:e8:
                    8e:03:7d:d1:ed:cc:c6:bc:47:31:1a:22:14:8b:79:
                    40:8d:14:74:9d:1e:b9:55:7b:75:20:47:d9:7f:4b:
                    ea:d6:88:66:5d:98:55:8d:a5:d4:28:17:22:5a:04:
                    f5:b3:02:34:85:de:bd:42:18:f2:ae:3f:0b:96:af:
                    4b:5e:c2:62:a2:75:c3:42:a7:bd:c0:4f:7c:2b:44:
                    f4:47:9f:11:b8:3a:48:64:6b:49:be:14:79:27:71:
                    a5:bd:b3:db:77:18:ed:20:ae:ce:ad:94:75:d0:9e:
                    3b:de:96:63:9c:d0:29:5b:7a:2e:b2:b6:de:ff:d7:
                    86:56:bf:e8:bc:5c:27:64:c9:12:1b:b5:d6:bd:ae:
                    c1:43:a7:5c:5d:eb:59:bd:d7:f5:46:80:14:95:e2:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F9:D4:94:52:95:E6:89:56:33:74:C1:CD:31:F1:07:66:19:30:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.220.0/22
                IPv6:
                  2803:e7a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267776

    Signature Algorithm: sha256WithRSAEncryption
         57:27:f6:39:da:e8:3f:1e:12:11:39:28:04:e5:de:dd:40:d7:
         d4:ec:22:01:0c:66:dd:a3:3d:a2:ac:d5:fb:61:f0:1d:4f:c7:
         6d:0e:c5:85:71:33:21:7e:99:58:e4:02:67:5e:0d:1a:1b:75:
         b5:e1:a3:6c:aa:76:b7:3d:be:14:63:94:b5:99:e6:4a:3f:e9:
         7d:3a:95:21:61:27:54:97:af:a7:ee:7a:87:21:71:e2:ed:08:
         2e:65:e4:8d:4a:16:a1:97:89:f4:c9:1d:29:de:70:65:84:cf:
         3e:36:ea:34:8e:a0:c0:57:70:f3:b2:ba:b4:08:50:81:4e:6d:
         39:d4:b1:56:6e:b6:e3:b8:c9:9a:12:e5:47:39:00:cc:44:a3:
         2b:89:e6:8b:59:70:b3:84:91:b4:dc:3a:f3:38:a8:2c:08:4b:
         15:8b:bf:53:f3:b2:0a:f9:c4:fe:34:04:05:4e:2f:56:0c:f1:
         f1:4c:f0:8e:e2:32:93:d6:59:51:ec:7d:66:f0:48:2e:a6:cf:
         c3:ef:e6:66:fe:44:17:cb:f3:6f:85:38:77:f8:54:8d:71:ca:
         47:8f:05:68:97:65:cb:e0:05:3e:7c:55:c7:21:22:80:96:ab:
         94:b1:9b:e2:33:ef:69:95:1d:d9:26:16:12:9f:c6:be:44:08:
         f1:03:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----