Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2feb953d8aa89e28df4f1882ec311330f36983cd.cer
File:                     2feb953d8aa89e28df4f1882ec311330f36983cd.cer (raw, json)
Hash identifier:          rtneloVu2bEYDM7wGsiJhVeGUEDvndYXPiVmXjETPO4=
Subject key identifier:   63:85:9B:20:6A:D8:71:30:C0:36:30:74:69:5D:5F:20:84:31:E1:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2A588
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/972414a0-9f79-4f8a-907f-f77fadf4080d/2feb953d8aa89e28df4f1882ec311330f36983cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/972414a0-9f79-4f8a-907f-f77fadf4080d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Oct 2019 16:27:23 +0000
Certificate not after:    Thu 22 Aug 2024 17:54:13 +0000
Subordinate resources:    AS: 269817
                          IP: 45.186.204.0/22
                          IP: 2803:8760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15902088 (0xf2a588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 23 16:27:23 2019 GMT
            Not After : Aug 22 17:54:13 2024 GMT
        Subject: CN=2feb953d8aa89e28df4f1882ec311330f36983cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:a6:05:a3:37:65:a5:b6:4c:8c:8c:e7:41:
                    4e:30:7d:e5:dc:bc:7d:f9:6f:91:f3:d6:5d:4d:ed:
                    eb:04:a8:71:2f:a8:37:4b:1f:98:1f:05:30:99:66:
                    0b:b8:41:97:6e:ec:62:92:65:0c:ce:f8:6f:f6:ea:
                    ff:61:1b:68:0f:37:9e:df:32:a8:ac:00:42:b4:ba:
                    f6:20:e8:ae:b5:24:c6:24:68:b4:d9:25:31:da:aa:
                    77:56:e8:b3:7c:a6:df:c0:be:82:5a:75:1b:cd:a9:
                    25:ef:a3:76:38:c3:05:34:a1:84:bd:f1:77:79:2e:
                    a3:5d:53:87:13:e1:a7:07:63:65:24:5b:76:41:33:
                    6e:db:1c:34:8b:d7:9a:9f:b9:d3:c1:70:e8:3a:77:
                    92:3c:c4:d5:81:22:bf:7f:92:28:3e:42:27:24:ad:
                    f7:f4:e0:ad:82:5c:8a:d7:17:06:b7:6f:40:4a:f0:
                    61:cd:45:2e:5e:95:48:ec:ad:39:b9:3b:f6:90:b9:
                    51:e5:8a:1a:06:4d:2a:e8:c3:e9:db:12:df:65:19:
                    d1:d9:46:3e:33:27:4e:32:35:fa:e3:10:60:b7:95:
                    9d:4d:01:29:17:38:be:e8:ac:37:a5:20:3d:d7:02:
                    f7:14:ab:ab:44:9e:ac:1e:6d:70:c8:5e:32:74:2c:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:85:9B:20:6A:D8:71:30:C0:36:30:74:69:5D:5F:20:84:31:E1:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/972414a0-9f79-4f8a-907f-f77fadf4080d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/972414a0-9f79-4f8a-907f-f77fadf4080d/2feb953d8aa89e28df4f1882ec311330f36983cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.204.0/22
                IPv6:
                  2803:8760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269817

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:92:5c:c9:7a:21:1f:b6:dc:03:42:28:03:28:09:ab:b5:
         43:1b:9f:96:60:e8:ed:52:89:46:06:01:4e:07:b0:cd:7f:68:
         3c:33:18:e0:7f:36:96:0d:f0:ff:42:2d:c0:d1:ec:b9:14:a0:
         ae:e7:ed:48:1e:f6:b9:df:d7:32:59:ee:69:74:18:5d:1e:8c:
         b1:68:0e:09:ec:32:ac:82:cd:8b:65:38:ba:6e:ea:59:ff:6d:
         da:f0:e7:18:ef:fa:c4:49:17:f5:3c:99:e8:75:27:bb:f4:8c:
         80:82:df:67:0d:05:5c:9e:83:77:13:d5:ea:7d:ee:98:2d:1f:
         52:13:0f:ff:90:75:a2:8e:63:e4:fe:72:36:b0:57:b7:7a:e9:
         ab:8b:85:21:9a:d0:46:bb:85:d2:d5:13:81:c2:db:c8:33:3a:
         56:c4:65:38:ef:eb:02:b0:84:bc:f8:a8:b7:ec:70:d4:16:50:
         b4:1e:22:cc:cd:f8:ed:b6:5f:45:cc:5f:f1:54:2d:c8:99:c4:
         45:46:9c:4a:77:fd:06:e1:95:0b:71:a2:93:2a:3d:51:0a:b5:
         39:5d:8d:f0:ce:58:c3:2e:a8:ba:11:66:5d:c8:b7:0f:c1:ec:
         0f:8d:c0:c3:fe:ba:14:a6:48:a3:b4:33:94:05:ca:8e:8e:04:
         e6:98:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----