Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
File:                     2ea1715958333398146179fdbf2e485fe6525742.cer (raw, json)
Hash identifier:          Tox8abmnMyLfp+L9xqpuCvTH5GaoI7QuyWi/1jR1Tso=
Subject key identifier:   60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9B943
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2020 02:04:54 +0000
Certificate not after:    Thu 22 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 52266
                          IP: 201.219.252.0/22
                          IP: 2800:700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16365891 (0xf9b943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 02:04:54 2020 GMT
            Not After : Aug 22 05:00:00 2024 GMT
        Subject: CN=2ea1715958333398146179fdbf2e485fe6525742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:75:4d:d1:c0:a8:7d:19:7e:3a:8a:76:3b:
                    5e:d1:e1:b5:74:ca:7b:aa:6b:72:d2:73:95:db:8d:
                    30:22:f1:9a:ff:4a:9b:0e:ec:1f:7d:2f:e4:87:0a:
                    ea:32:2f:53:33:ce:36:ae:d2:ad:d0:b2:58:f7:f3:
                    16:7d:29:f5:f5:2b:b8:2f:b5:62:6c:e4:e0:9a:9b:
                    44:84:e0:c6:ff:bd:de:a5:6f:47:01:6f:75:8d:9d:
                    aa:c0:1a:74:5c:66:06:65:5a:5a:ae:07:37:f9:8f:
                    53:99:f0:58:ad:9d:be:36:a8:2f:c0:41:f3:6b:f9:
                    47:b3:19:4b:d9:70:34:c7:ff:7b:b6:6f:79:2a:d5:
                    3b:cb:5d:e1:86:c7:f0:90:fb:44:e5:e3:a2:cb:2d:
                    7a:c3:f5:8b:72:d0:6f:22:cf:33:05:1d:22:43:bc:
                    da:b6:8f:bd:db:b9:7f:b3:0d:97:bb:ac:89:c7:9d:
                    20:ef:bc:29:e7:9c:e3:7b:a4:f8:d5:82:14:e1:3d:
                    ed:6a:cc:fb:14:43:9c:4b:da:97:16:05:b2:1b:8f:
                    ab:06:32:10:70:3b:ef:74:47:07:3f:eb:cc:74:af:
                    97:a5:6a:55:2f:a5:46:12:52:b4:dc:a8:00:e6:08:
                    1e:3f:0e:8d:20:bd:1f:19:53:89:c2:54:e3:0e:a6:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22
                IPv6:
                  2800:700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52266

    Signature Algorithm: sha256WithRSAEncryption
         b5:98:18:30:cf:d1:15:97:f3:fc:8e:8b:c4:26:f0:87:c6:3c:
         ef:2f:a6:40:ad:b8:5d:ea:88:0d:95:90:53:eb:72:04:97:bb:
         1a:5b:cc:59:de:ac:18:ea:3c:7f:dd:f6:56:41:84:fb:04:48:
         e9:39:d8:89:c8:db:f7:48:cf:d7:5a:20:6f:02:28:5b:8b:4b:
         53:e6:f1:31:dd:5a:58:67:47:8c:fa:82:6a:2f:37:a9:6e:10:
         77:bb:ed:4a:53:a3:1c:30:a4:eb:dd:a4:1c:1f:48:ff:ec:8c:
         8a:b1:83:5b:27:30:a3:b5:d7:c6:a4:cd:d4:10:6e:a7:50:8d:
         6c:a2:c5:61:7f:69:0a:54:99:2e:fc:69:d8:ec:94:b1:63:05:
         e1:2f:67:a0:45:02:68:40:f8:3c:7c:b8:6d:08:87:42:99:b7:
         e6:ff:72:6e:42:85:5e:3e:f9:b6:8e:67:68:b4:d5:16:c9:8d:
         5c:cd:30:6a:b3:ea:76:d3:17:31:5e:d0:ba:4c:44:5d:fb:29:
         63:1c:aa:0e:a3:4b:92:64:f9:03:8a:6b:84:c2:2b:67:66:5f:
         ef:d2:01:63:7e:44:6a:b6:ac:68:2c:13:7d:7e:76:c1:f8:21:
         ad:7e:6a:ff:74:da:49:8b:5b:32:de:a0:08:f6:1c:66:24:fe:
         cf:06:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----