Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7089837ed143928c98c17d7d506b131ca4b69538.cer
File:                     7089837ed143928c98c17d7d506b131ca4b69538.cer (raw, json)
Hash identifier:          ixft8ieZsz7jcL7CqpyGHNVW46LBSlzKIngnMjFp6VY=
Subject key identifier:   D3:BC:4B:27:34:DB:02:75:B3:7C:AB:CC:DE:3C:7E:3F:63:43:31:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010231C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/7089837ed143928c98c17d7d506b131ca4b69538.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Feb 2019 16:01:05 +0000
Certificate not after:    Wed 25 Dec 2024 17:10:43 +0000
Subordinate resources:    AS: 52442
                          IP: 190.104.80.0/21
                          IP: 2801:19::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16921026 (0x10231c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 16:01:05 2019 GMT
            Not After : Dec 25 17:10:43 2024 GMT
        Subject: CN=7089837ed143928c98c17d7d506b131ca4b69538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:db:58:d5:4d:61:27:38:09:1b:b1:e1:cc:
                    9f:d5:7a:63:3d:e6:36:9e:6b:66:38:e4:81:bb:ff:
                    58:64:2e:1b:12:e2:6b:70:96:47:68:b3:0d:87:09:
                    81:f7:6a:53:f4:09:f9:9d:d8:83:0e:d1:34:c1:28:
                    fe:aa:c6:b0:95:fc:1a:43:fd:d8:8c:50:32:0e:f6:
                    89:fe:80:69:14:dc:35:73:27:a4:56:4d:37:78:ed:
                    ab:b7:26:4e:f4:75:ae:8d:d2:da:02:1f:24:60:04:
                    fe:27:cd:f9:17:94:90:a6:37:da:3a:5f:20:43:75:
                    08:3c:44:a5:e1:90:55:d0:38:81:ed:ca:91:90:8c:
                    5b:65:94:0d:a3:3f:20:b7:38:5a:7e:f2:d6:91:7c:
                    89:82:1a:3c:e4:ca:d3:14:84:c9:f0:79:dc:83:d7:
                    43:87:05:15:eb:af:3e:45:ca:ca:af:46:13:dc:13:
                    a2:a6:f5:8c:47:0b:c5:d3:9f:62:0d:60:f0:d4:e6:
                    e2:9b:db:40:c0:93:83:f8:2f:5c:94:dc:52:66:82:
                    ec:41:26:5f:2a:56:11:80:a1:74:52:6d:31:0c:7d:
                    57:51:cf:aa:55:57:67:07:9b:30:3a:1c:bc:c4:82:
                    85:4b:7b:f5:97:ba:90:33:02:4e:5e:4c:b4:ad:ae:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:4B:27:34:DB:02:75:B3:7C:AB:CC:DE:3C:7E:3F:63:43:31:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/7089837ed143928c98c17d7d506b131ca4b69538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.80.0/21
                IPv6:
                  2801:19::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52442

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:e3:60:f4:1a:36:c5:07:eb:24:72:fd:2a:ac:c4:29:dd:
         05:7d:f3:98:41:47:b0:02:f0:4b:f7:66:3c:2e:64:a0:cc:a1:
         88:cf:b3:45:1e:ae:24:ff:fa:bb:51:d5:8a:d6:34:b3:09:b7:
         16:b9:70:fa:4e:5f:cf:b1:40:ee:2d:36:69:5d:81:21:94:11:
         9b:46:b0:46:f7:ed:ef:0c:46:a6:7e:a0:9b:5e:5b:ba:c2:1c:
         56:c4:12:b1:e6:94:ae:8b:b9:c1:22:df:65:6b:ca:71:5d:b4:
         b5:5a:ab:4e:cb:ec:84:c2:fe:90:85:53:85:2a:1a:0d:b9:8b:
         fd:7f:d7:ca:52:79:27:83:45:e6:39:3a:69:d3:27:bf:10:a7:
         0c:fa:ea:d7:c0:0a:c3:e2:8c:d9:fc:62:d8:84:01:ff:59:77:
         2b:dd:c3:fb:b8:08:39:98:f9:4f:0e:b3:31:2a:a3:4f:4c:bb:
         fa:fd:df:63:00:46:e7:21:19:13:05:12:5a:3f:ec:58:de:bd:
         d9:09:0f:cb:9a:31:2e:6f:0f:e9:dc:35:ad:97:27:9c:c1:f5:
         18:77:46:d5:92:69:bf:a1:c5:be:e1:c3:9f:2f:f8:4f:d4:e6:
         88:45:67:22:e5:32:8b:34:54:16:52:0b:a0:6d:a3:cf:7a:e7:
         63:84:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----