Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
File:                     580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer (raw, json)
Hash identifier:          eaU6tSkuwvxbdBiE4aYeWIxLyPzHq625bMR0GxBbI4g=
Subject key identifier:   C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103D291
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Aug 2020 12:38:24 +0000
Certificate not after:    Mon 13 Jan 2025 15:57:44 +0000
Subordinate resources:    AS: 267798
                          IP: 45.173.16.0/22
                          IP: 2803:3fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17027729 (0x103d291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 12:38:24 2020 GMT
            Not After : Jan 13 15:57:44 2025 GMT
        Subject: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:e9:ca:5f:5a:41:58:88:ba:04:8d:7d:95:
                    ab:e2:13:65:e8:d6:38:a1:dc:ed:e2:8a:3f:7e:28:
                    3e:9f:22:f2:1c:c5:00:c7:28:34:40:02:a1:fc:4c:
                    45:f9:f1:49:12:9f:95:29:60:28:77:df:36:f8:a1:
                    0b:8a:fd:7b:bb:3c:f0:a2:df:3a:30:ba:2e:49:90:
                    9f:9b:ef:5a:4b:5a:35:ef:dc:73:91:c6:62:ba:ed:
                    63:f7:63:ae:b3:a8:d5:96:b3:65:01:f6:cb:a0:d9:
                    41:46:16:39:cd:52:be:5f:3f:b0:f7:80:8f:f3:03:
                    e2:5e:92:d0:91:c1:e7:35:16:7e:4e:5f:2a:8e:e1:
                    e7:1f:97:05:f5:1e:45:04:fc:8b:51:5c:59:cc:d7:
                    1e:f0:7c:26:37:76:0b:04:9b:1b:d1:13:71:c4:0b:
                    16:9f:5a:07:0d:55:9b:ce:7a:d2:ef:84:36:e4:e4:
                    51:66:37:b4:47:3c:2f:b3:0e:61:ea:ce:be:d9:6f:
                    9b:8d:1c:81:68:ca:77:b3:64:3e:4a:8e:2b:f2:c7:
                    29:d1:17:d7:e5:d6:22:5e:0c:91:e9:5b:11:17:88:
                    00:5d:17:8a:93:2f:a1:0d:66:63:3d:29:33:45:ae:
                    2b:32:06:eb:fb:6c:7a:34:1f:11:6e:60:94:46:c5:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/22
                IPv6:
                  2803:3fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267798

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:f5:09:43:99:cf:0e:1d:45:3b:3d:4c:2b:42:99:79:54:
         c6:66:d0:cf:37:dd:67:99:36:cf:7a:82:a1:6d:52:21:1e:6c:
         7b:07:f2:fe:45:e8:9f:cc:4b:7f:50:21:df:38:32:65:59:41:
         bd:5f:b7:bb:f7:de:28:e0:e7:be:0a:52:7f:5e:c4:aa:5d:7c:
         eb:1a:1a:b3:e9:93:4c:8c:ee:56:22:f1:45:9f:de:a0:5e:d1:
         0c:ee:4e:65:07:8a:dd:19:09:a6:c2:f9:d5:de:97:af:ce:42:
         17:eb:6a:df:8b:a9:7b:fd:4c:2c:24:2e:8d:38:e2:2c:5b:29:
         e3:79:c7:75:dd:db:77:96:3a:07:5a:fb:82:99:2d:1b:4a:f4:
         d9:16:33:3e:b7:b2:08:58:63:d7:5d:01:15:1a:f7:70:a4:25:
         2f:f8:4d:b4:7b:90:b3:b7:fa:6f:f5:7c:bd:f6:cd:80:93:25:
         67:c4:49:2f:49:7f:ce:4c:c9:cc:52:e3:c5:f1:84:0a:2b:fb:
         5e:a8:ec:aa:29:5a:32:38:6e:04:ba:b8:58:87:e7:15:84:5f:
         81:7e:8d:90:52:09:1a:75:e6:0d:49:8f:ae:ab:52:3f:af:e0:
         3b:e0:38:19:20:31:33:d9:51:c3:68:05:5f:ca:19:fc:98:05:
         61:03:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----