Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/689a1db6d155180fadc9fecd92d7dd06e68bb024.cer
File:                     689a1db6d155180fadc9fecd92d7dd06e68bb024.cer (raw, json)
Hash identifier:          fI39hp2IB6GOlEKhi/o6U1C+LhGx17RKj8NWmQb6//M=
Subject key identifier:   52:F6:D1:46:3E:E4:1D:F5:35:6B:80:1A:7C:DD:AA:2B:42:D2:F9:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C8EEAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/689a1db6d155180fadc9fecd92d7dd06e68bb024.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2019 15:32:58 +0000
Certificate not after:    Mon 03 Jul 2023 18:18:29 +0000
Subordinate resources:    AS: 269774
                          IP: 45.181.78.0/23
                          IP: 45.182.116.0/24
                          IP: 2803:d60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13168300 (0xc8eeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  9 15:32:58 2019 GMT
            Not After : Jul  3 18:18:29 2023 GMT
        Subject: CN=689a1db6d155180fadc9fecd92d7dd06e68bb024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:f6:26:9e:7b:79:96:bc:77:dd:fd:11:f7:
                    34:9a:59:2f:e3:e8:b9:28:8b:89:93:fd:aa:42:e3:
                    a4:6b:63:4e:22:78:c1:e7:35:8c:1d:8b:d8:4e:1b:
                    e0:91:e3:86:2e:bd:d3:c5:8f:da:56:05:e6:16:34:
                    9e:0c:d8:cc:39:8c:2a:ac:dc:dd:60:75:81:85:1f:
                    a0:dd:74:81:0c:97:da:be:16:1e:82:77:fb:a0:1c:
                    ae:9a:25:55:9d:55:3f:f0:b0:6e:49:df:6f:fd:d4:
                    61:22:9d:2b:be:91:e3:ad:e5:e9:53:5c:ed:dc:64:
                    0d:d4:bb:dd:32:46:4d:45:b0:ba:20:fb:ae:27:c5:
                    33:41:b0:8f:d1:ad:82:05:06:3a:ff:e2:5f:62:71:
                    39:6b:0e:0d:cc:8e:f6:e6:1a:40:4b:f6:a9:87:88:
                    65:52:c7:7b:cf:c7:fe:3d:63:c5:bf:cb:d1:f4:02:
                    2f:dc:7f:92:77:11:27:f4:64:9c:ca:cf:54:29:01:
                    c7:ca:13:1d:f8:7e:ba:34:32:f3:6c:db:f4:e1:e3:
                    df:6a:a3:9d:13:1c:b5:6b:b2:70:d7:dc:b0:70:f0:
                    ca:63:2f:f8:37:66:8c:0f:e3:fc:91:6c:f5:ea:2b:
                    ca:39:c7:d5:10:c7:a4:c8:46:7f:e8:bb:7b:9c:df:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:D1:46:3E:E4:1D:F5:35:6B:80:1A:7C:DD:AA:2B:42:D2:F9:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/689a1db6d155180fadc9fecd92d7dd06e68bb024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.78.0/23
                  45.182.116.0/24
                IPv6:
                  2803:d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269774

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:79:59:ee:d2:da:58:c5:a5:e8:62:e1:84:4a:d4:f6:c1:
         c4:5a:bb:ca:d1:d4:6d:84:d3:5d:c1:27:60:c0:fa:4d:17:6c:
         49:0d:39:06:70:d2:73:39:30:18:e4:98:24:e0:4a:d9:d8:9b:
         9a:8d:6e:c9:3f:69:87:20:e4:18:9d:d6:1e:0d:fa:15:30:e0:
         87:8e:8d:66:10:98:a1:14:16:e5:3c:fb:c9:3e:0e:bb:32:8a:
         a1:b7:ee:09:ee:f8:cc:48:e0:16:89:0f:1f:b0:fd:3b:d1:e6:
         87:50:9c:6c:7b:5c:63:cf:ca:c6:e8:9f:38:45:03:cd:04:74:
         8f:1a:50:5a:cc:3b:60:4e:ee:2a:67:55:77:c7:fc:74:56:c3:
         f7:b5:54:4b:e7:13:7e:49:bb:22:7b:42:62:cf:48:54:04:5f:
         70:cb:4b:94:23:fb:2d:d3:3b:0b:18:39:89:af:b0:16:df:2f:
         07:e2:19:04:59:93:9e:82:a3:7a:4a:c4:f7:6b:da:3d:4a:bd:
         85:a5:55:93:25:a4:c2:5f:46:37:f8:a3:48:a7:9c:12:7c:60:
         35:96:d4:bf:aa:80:85:79:8c:e5:fa:3c:98:c0:a5:c9:dc:18:
         4f:d6:12:f4:48:e3:47:b1:bf:00:1c:34:99:0f:28:2c:90:40:
         cb:1f:34:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----