Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20561c0e6e4a53a86130af5c55d968e60b1940cd.cer
File:                     20561c0e6e4a53a86130af5c55d968e60b1940cd.cer (raw, json)
Hash identifier:          QSj2u0WDsuMfKkxKHm5Pjn1TiaMw6N8wLEq3RX9Vv4A=
Subject key identifier:   99:51:67:0F:72:6F:79:94:1D:22:C9:47:BD:8C:62:9E:0D:06:CF:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01075C5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/20561c0e6e4a53a86130af5c55d968e60b1940cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Nov 2018 15:20:15 +0000
Certificate not after:    Tue 18 Feb 2025 17:47:38 +0000
Subordinate resources:    AS: 266780
                          IP: 45.234.112.0/22
                          IP: 2803:9f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17259613 (0x1075c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 15:20:15 2018 GMT
            Not After : Feb 18 17:47:38 2025 GMT
        Subject: CN=20561c0e6e4a53a86130af5c55d968e60b1940cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:c4:bc:59:10:89:07:39:5d:f4:f0:b3:eb:
                    c6:60:2d:da:56:11:33:b1:3d:1f:be:6f:f3:a8:58:
                    a8:79:d2:4d:20:fb:c5:08:33:cc:0c:07:71:a7:ad:
                    75:f0:80:88:72:87:38:ec:45:69:81:3f:8c:b4:dd:
                    c8:dc:62:fb:64:0d:a2:75:7e:6a:90:ad:a7:f0:27:
                    26:ca:e7:b1:73:c8:c6:50:60:de:e4:69:e7:84:1e:
                    0e:e2:60:ff:08:97:a9:6d:37:01:27:24:44:f7:e6:
                    89:5a:6a:bc:4a:19:74:cd:c9:1a:3f:6e:85:36:12:
                    88:5a:26:e4:e3:68:96:16:0c:b5:ff:48:6c:7c:e9:
                    9d:c5:99:11:88:a6:a3:97:2c:ad:80:78:df:80:02:
                    07:89:b1:6a:1b:57:75:48:ad:b4:64:26:2a:00:3e:
                    71:94:a4:2d:4a:4a:80:b7:77:a5:21:52:6b:e8:79:
                    8e:e8:fb:0d:58:7b:28:ae:65:23:cf:09:39:fc:83:
                    ef:4e:81:bd:f0:c0:a8:55:1d:8b:91:51:78:6c:37:
                    00:2b:cf:d5:2f:39:0e:f4:13:47:9e:88:af:03:86:
                    49:38:08:f4:91:68:65:2f:54:79:d0:5f:36:b7:84:
                    38:72:a5:27:1a:28:7c:c9:76:85:1f:58:df:a6:d0:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:67:0F:72:6F:79:94:1D:22:C9:47:BD:8C:62:9E:0D:06:CF:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/20561c0e6e4a53a86130af5c55d968e60b1940cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.112.0/22
                IPv6:
                  2803:9f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266780

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:f3:ee:25:01:9a:47:1b:9c:33:93:c8:a9:5c:05:cc:3d:
         78:e2:4e:d2:b3:09:80:eb:34:6f:33:de:d2:36:16:41:95:08:
         6c:48:c7:8f:cb:b3:b4:70:30:45:b8:63:16:f5:9a:f2:82:97:
         fa:b1:ac:1a:12:aa:57:1f:86:03:ad:5b:0f:40:01:e2:ce:d4:
         36:38:4b:f2:47:9a:59:1a:e8:58:10:a8:cd:32:43:07:9a:ec:
         44:6f:63:2f:35:90:96:b5:30:72:04:c8:d4:f4:b4:77:81:4d:
         6e:91:41:30:2d:65:30:f6:58:4a:e4:cb:79:66:63:51:b0:55:
         d4:f7:9b:88:37:ba:e6:23:da:6f:8c:f4:37:59:47:b3:30:52:
         e0:d7:62:82:45:e3:f1:f4:5f:29:29:e5:66:9d:39:0f:f0:04:
         aa:ed:24:c6:0b:5d:d6:87:bb:6d:ad:dc:4e:60:57:77:a6:54:
         39:33:af:49:63:1e:3d:8b:27:2f:cd:f2:4c:cb:64:7c:e4:a6:
         da:f4:b0:d4:34:0f:fc:14:20:c1:83:47:98:c7:ec:65:ed:20:
         22:ba:97:8b:8d:2e:9c:12:40:ed:03:d6:e0:d3:d6:4c:6a:c2:
         b1:c0:1d:95:27:08:4c:c8:29:50:2a:f9:7d:93:dc:ea:56:bf:
         f8:a3:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----