Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02560e9f9d9ae9402341a28273afd5c0caf17950.cer
File:                     02560e9f9d9ae9402341a28273afd5c0caf17950.cer (raw, json)
Hash identifier:          dXbV/s8D+BwDjCQBTQajs/U93VR4aInRG7IzMZztpI0=
Subject key identifier:   18:DC:46:1A:AA:6C:8A:CD:96:8B:4D:86:A2:8B:6B:F1:A5:BD:9E:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCD43A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/02560e9f9d9ae9402341a28273afd5c0caf17950.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 28 Sep 2020 22:07:06 +0000
Certificate not after:    Fri 23 Feb 2024 15:26:58 +0000
Subordinate resources:    AS: 267833
                          IP: 45.175.100.0/22
                          IP: 2803:a460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14472250 (0xdcd43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 22:07:06 2020 GMT
            Not After : Feb 23 15:26:58 2024 GMT
        Subject: CN=02560e9f9d9ae9402341a28273afd5c0caf17950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:7d:bc:f8:7b:02:6c:f3:8a:e7:97:0a:50:
                    0e:ae:06:94:c5:d6:2b:fa:ce:e5:aa:ee:4f:e4:8f:
                    f3:88:d1:a5:34:45:0f:19:f4:68:4e:32:fe:16:7a:
                    04:3b:62:76:44:59:3a:52:a1:32:75:a6:ca:ce:27:
                    a2:aa:c3:4e:26:35:1e:e5:1e:c3:db:35:6d:f1:2d:
                    3e:ef:52:f2:a1:88:25:47:8b:4a:43:6c:28:6d:e9:
                    8d:f1:56:c1:da:2b:62:d0:4e:f7:3b:20:be:68:1c:
                    f9:1f:d3:b1:31:97:dc:fe:dd:b3:bc:c5:31:11:1a:
                    1d:19:75:9c:ea:99:b0:1f:86:c4:12:75:70:56:75:
                    16:d7:dc:59:b2:35:9c:7c:c9:7b:a2:a8:6e:09:be:
                    14:bf:ba:e5:be:a3:3a:36:ab:7e:bc:65:33:b8:de:
                    1e:ba:de:89:3b:55:4c:98:3c:28:44:be:dc:8e:0b:
                    54:44:81:3f:c7:a9:b5:63:78:37:65:02:38:f7:3d:
                    67:b0:32:9e:56:18:90:a3:ad:ee:e1:2c:34:c2:9c:
                    7d:48:2a:19:1b:f6:ac:9c:73:4a:74:75:f6:80:93:
                    71:9f:d1:9d:a3:56:d5:ca:54:47:af:30:a2:6b:cd:
                    f6:af:68:f6:ab:c5:07:46:f4:70:a1:23:09:52:26:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:46:1A:AA:6C:8A:CD:96:8B:4D:86:A2:8B:6B:F1:A5:BD:9E:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/02560e9f9d9ae9402341a28273afd5c0caf17950.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.100.0/22
                IPv6:
                  2803:a460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267833

    Signature Algorithm: sha256WithRSAEncryption
         86:53:6b:5d:fa:47:f9:d1:bb:c3:a0:32:9c:c2:51:6f:bf:d5:
         45:be:5e:a3:1d:0d:8d:49:40:35:2a:10:2f:9b:40:b4:fa:48:
         67:d8:2e:fc:03:1c:90:ed:18:94:3c:21:8f:64:e2:0e:93:61:
         68:31:2c:4d:07:6e:a2:39:8f:e6:15:52:42:78:6e:a4:1b:05:
         ae:51:cf:c9:50:d4:43:3d:ae:06:18:ab:3e:5c:54:b4:55:4f:
         ef:e0:73:ed:40:8f:80:6c:90:7b:b6:a0:3d:1c:81:08:a9:69:
         c3:c4:12:63:70:b1:50:8d:04:31:c4:5e:25:da:c8:6a:4b:3f:
         ef:1c:cc:61:11:41:f5:52:e5:97:73:cf:32:4a:9e:e9:87:98:
         2e:9f:55:92:96:00:9f:cf:8f:80:7b:bc:bc:fc:2d:3d:35:41:
         4c:da:8d:35:84:18:7e:4e:70:8e:26:74:71:78:36:3b:cd:08:
         65:5d:81:21:77:b4:49:5a:48:d1:09:b7:95:8c:bc:ce:46:5b:
         37:12:58:01:0b:51:cb:5e:a3:eb:78:fd:5a:3a:9d:12:e8:f9:
         b1:0f:1d:ab:8b:fa:24:a9:9b:ea:59:a5:68:e8:c4:00:9d:8e:
         fb:07:6a:29:f0:a3:cb:b4:45:45:31:75:af:d9:b0:8e:07:8a:
         d4:93:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----