Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
File:                     4d446954aafa3d753308d3a0466a8574d0f27367.cer (raw, json)
Hash identifier:          6GkNdwwT6ldNcuO0nDfWhWJOB0tqlE+4PYsnqW7rtrw=
Subject key identifier:   54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F23DA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 28 Sep 2020 22:01:59 +0000
Certificate not after:    Mon 19 Aug 2024 06:26:44 +0000
Subordinate resources:    AS: 28441
                          AS: 270173
                          IP: 45.164.108.0/22
                          IP: 2806:30c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15875490 (0xf23da2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 22:01:59 2020 GMT
            Not After : Aug 19 06:26:44 2024 GMT
        Subject: CN=4d446954aafa3d753308d3a0466a8574d0f27367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:df:7b:42:fa:ca:25:b2:65:2e:73:8c:da:
                    7e:a5:dc:40:d4:38:10:81:15:9c:f1:68:e0:98:6c:
                    9f:b4:a4:06:ee:a8:9b:c9:32:36:8e:f3:28:27:4d:
                    fe:6a:61:34:78:b2:ab:2f:1e:90:07:b0:b5:22:c7:
                    e4:5d:52:d4:86:22:39:ed:ba:d2:25:01:32:fa:ca:
                    0b:59:39:c4:65:0c:40:99:3b:79:e7:e0:d1:31:ff:
                    40:a6:d6:f1:b2:f2:0d:6a:77:25:e1:6b:e3:e1:8a:
                    64:fa:94:62:41:7c:e1:44:23:ce:89:bc:69:20:d4:
                    6c:b5:62:65:c6:eb:51:76:81:0c:2c:1b:5e:d9:0d:
                    90:2f:4d:4a:ab:17:0f:f1:a7:27:0a:b5:7c:3e:fe:
                    86:b3:b1:23:2a:e1:78:e1:81:99:0f:3e:4d:be:44:
                    c2:5b:05:03:7a:62:00:48:cc:c8:70:24:a7:67:cc:
                    15:e8:7b:b7:e9:f5:3d:d6:32:95:2d:b4:a7:0f:eb:
                    db:f8:c9:b2:2c:1a:fd:ed:37:73:80:a5:3a:84:30:
                    90:6b:32:86:c6:6b:4b:d6:8a:95:e2:31:56:ab:47:
                    09:96:21:de:f2:23:21:d9:d6:9d:38:c8:6a:47:22:
                    20:8a:0d:7b:84:27:d4:f5:4e:69:b7:a3:d3:69:cb:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.108.0/22
                IPv6:
                  2806:30c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28441
                  270173

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:42:b3:2a:ad:79:d5:94:d9:ef:a6:d4:c3:ba:e0:81:9f:
         e9:7b:cb:8d:21:8d:1e:6d:c7:c8:a8:3d:6a:2a:e2:23:07:df:
         3a:13:3b:cd:13:4c:38:ac:3c:dd:1f:5e:63:98:4e:13:13:7e:
         b1:85:f3:7d:83:52:7f:0b:38:42:f0:66:16:16:c2:9b:85:27:
         69:29:1f:82:ad:e0:6e:8b:98:da:97:5f:4c:96:99:67:f3:23:
         c5:62:98:d8:6e:e5:5f:28:8d:9d:87:82:a9:58:01:64:23:6e:
         4e:da:4e:45:49:71:1d:84:3f:19:f2:01:49:57:3a:ff:10:61:
         a8:7e:91:d0:29:80:22:70:d7:7c:67:c4:f1:f8:74:21:4c:3e:
         b0:9f:4d:39:b1:91:b3:cd:30:ce:ef:b4:71:e2:bb:af:7f:6b:
         c3:8c:96:59:45:e5:2a:21:20:67:df:42:59:db:00:2d:9b:e6:
         ad:4b:e8:d3:37:08:38:c8:44:ca:98:1f:00:eb:c5:f7:ad:4e:
         b1:0a:ba:a1:2b:fc:5f:b8:e2:63:76:5d:a0:01:6c:08:a5:ec:
         52:3c:34:a3:72:b4:bb:a1:1c:39:77:da:d8:9c:7a:84:e0:c9:
         01:02:1f:95:eb:ea:e9:00:9b:a9:52:9b:5c:56:88:35:ed:94:
         ff:a4:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----