Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df3418897f2874633d71f1d981fb08a7833248bf.cer
File:                     df3418897f2874633d71f1d981fb08a7833248bf.cer (raw, json)
Hash identifier:          yBQPIYCAmCQc0W7pLyxA8d14rKhz/48o3QfcCvUqGqE=
Subject key identifier:   C7:CD:F0:54:F0:89:E7:D1:47:05:8C:A4:C6:F4:2C:AC:43:DF:C2:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103549E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/df3418897f2874633d71f1d981fb08a7833248bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jun 2020 21:07:26 +0000
Certificate not after:    Thu 09 Jan 2025 18:36:21 +0000
Subordinate resources:    AS: 28549
                          IP: 131.161.244.0/22
                          IP: 201.161.192.0/18
                          IP: 2806:219::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16995486 (0x103549e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  8 21:07:26 2020 GMT
            Not After : Jan  9 18:36:21 2025 GMT
        Subject: CN=df3418897f2874633d71f1d981fb08a7833248bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:ff:c9:59:c3:fd:b5:e5:70:a3:8b:6d:a6:
                    fa:36:c8:63:27:30:a3:4a:ef:a5:0a:3a:2c:64:6c:
                    c9:3d:5e:40:06:4f:0f:96:a0:a0:63:3b:40:53:57:
                    d6:84:8f:cf:68:57:f4:00:f0:27:3d:e3:6b:65:40:
                    e3:96:a2:b5:d3:f8:8d:77:3d:4c:38:05:67:a1:7a:
                    59:30:db:f0:c3:d2:1f:94:f5:93:ca:b7:10:bf:95:
                    9c:91:29:11:1f:89:59:a9:d8:02:49:51:f8:bf:59:
                    c7:87:8d:2b:d7:84:b6:4d:7b:e2:90:3c:65:13:d3:
                    d9:e3:14:8e:49:60:6f:ca:c3:09:60:a8:78:4a:aa:
                    a5:24:c5:4c:f8:db:22:dd:a6:dd:fe:d5:05:a6:d8:
                    39:d1:c6:81:f4:23:10:a9:ad:5c:28:16:b6:65:e4:
                    40:24:6a:d2:fe:34:de:fc:00:69:5a:e4:12:0f:15:
                    63:a3:06:9a:af:b0:f5:c1:6a:93:0a:d5:6f:9b:d1:
                    32:ca:71:c2:b2:9a:fe:ff:c7:ad:60:68:6c:dc:ee:
                    eb:4f:70:da:63:73:a5:8d:f2:6a:d9:a6:bf:7f:d5:
                    69:1b:86:cd:f2:92:2d:0a:3c:87:e3:f5:b2:15:78:
                    ef:3c:10:76:ed:29:97:b4:3c:12:16:0c:f3:89:bc:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CD:F0:54:F0:89:E7:D1:47:05:8C:A4:C6:F4:2C:AC:43:DF:C2:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76ede2a5-b42e-4c6a-96b5-3ebceaf57e37/df3418897f2874633d71f1d981fb08a7833248bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.244.0/22
                  201.161.192.0/18
                IPv6:
                  2806:219::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28549

    Signature Algorithm: sha256WithRSAEncryption
         56:65:76:eb:4a:e9:08:cc:b9:36:49:b9:86:97:e9:a1:63:c9:
         12:10:33:c8:ee:b7:17:b2:27:8d:7d:12:15:f7:6c:bc:2d:89:
         e3:ec:8b:bd:bb:99:6f:76:00:a4:79:a0:76:7a:39:87:a9:f0:
         bd:5f:ae:6d:81:2a:3a:8b:a2:e4:48:7e:c7:4a:78:b7:35:b4:
         ac:d7:5d:ac:ef:65:2f:15:c9:f0:77:5f:ab:e5:d2:24:fb:8b:
         d1:e0:c6:e7:a3:81:50:09:b2:17:ad:66:3c:60:b3:ca:6b:4e:
         37:d3:e4:7a:8a:0b:8d:84:73:f7:c7:2c:27:fc:23:ea:15:e3:
         96:67:28:46:71:23:43:f7:42:21:dc:15:7a:db:33:32:6e:6c:
         c5:8d:d0:35:a5:c3:6c:e2:17:cd:d1:30:76:71:0c:1f:7c:f6:
         ca:45:d9:84:d1:bc:9a:9c:63:4a:51:35:96:09:3a:99:cc:66:
         29:ee:92:b6:7b:5e:66:7d:e5:88:4b:70:7e:44:9d:14:04:53:
         b2:2d:ed:ef:29:ad:ff:06:dd:58:5f:34:bd:23:ec:38:1b:2c:
         88:fa:75:5e:30:6d:92:dd:6d:f2:28:c5:a5:26:49:73:e0:64:
         dd:cd:78:c5:37:6b:f4:46:5f:3f:e2:84:d0:f7:48:fb:23:07:
         19:24:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----