Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer
File:                     734d48b8ac986ac396d20b61f218f6d07558ab25.cer (raw, json)
Hash identifier:          TdQcm7VKwn0NM2rFZTazXegoxQ0jrNWqvDGggpAm45E=
Subject key identifier:   4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBAFCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/734d48b8ac986ac396d20b61f218f6d07558ab25.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2020 00:48:41 +0000
Certificate not after:    Sat 02 Nov 2024 15:53:33 +0000
Subordinate resources:    AS: 269809
                          IP: 45.191.4.0/22
                          IP: 2803:c4e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16494539 (0xfbafcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  9 00:48:41 2020 GMT
            Not After : Nov  2 15:53:33 2024 GMT
        Subject: CN=734d48b8ac986ac396d20b61f218f6d07558ab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:b5:2a:61:89:4c:7a:6d:47:8f:e1:a6:67:
                    c4:1a:b1:1b:34:d9:ef:0a:fe:2b:6a:63:70:cc:6b:
                    8f:f2:56:7b:8e:41:f7:a6:c1:9f:f0:32:24:6a:d9:
                    5e:39:f3:a1:18:92:41:af:86:76:ca:e5:3a:fe:54:
                    55:75:40:49:7e:d0:c6:ca:f3:20:f1:05:78:cd:83:
                    17:bf:26:b0:a2:87:b3:53:a5:86:ad:a4:f8:55:4b:
                    f8:f4:55:fa:da:f8:9f:fb:e1:0b:69:ec:01:e4:bc:
                    0b:42:70:98:aa:77:14:cb:c3:fd:e7:55:1d:86:db:
                    ef:d6:dc:8e:ed:e7:4a:60:1d:b5:00:5e:1b:79:14:
                    e4:f7:50:db:cd:c3:83:fc:1f:68:24:f3:45:84:01:
                    38:ed:6e:59:d0:03:5f:9a:4b:c0:1a:ab:34:38:6b:
                    07:09:90:97:58:8a:82:ba:56:a2:bf:05:cc:ff:e2:
                    f3:bf:a5:29:60:19:6d:4b:6a:d5:74:69:7c:87:51:
                    e6:8d:39:7f:97:ff:ff:df:8c:a1:57:20:a6:9a:7b:
                    75:b6:56:72:9f:9a:8d:c3:69:2b:9a:e6:48:f6:91:
                    61:17:c2:c4:30:4d:c5:86:4d:a7:64:87:cb:55:9a:
                    47:4e:8c:b1:4f:2d:36:a7:2c:1d:6a:73:df:1c:a5:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/734d48b8ac986ac396d20b61f218f6d07558ab25.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.4.0/22
                IPv6:
                  2803:c4e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269809

    Signature Algorithm: sha256WithRSAEncryption
         67:41:6a:b0:c1:c2:95:98:68:6a:a3:62:f0:ef:8e:c0:5c:c6:
         0d:4d:d8:a4:f8:f9:a6:75:ae:50:f9:21:5b:12:a4:81:12:88:
         f9:17:dc:76:87:2e:73:d1:2c:60:3a:92:fe:59:ed:b2:18:24:
         ad:e7:ca:b5:c7:c3:5b:83:48:57:92:cf:03:e2:fb:2b:b1:aa:
         79:9a:18:19:2f:4f:f3:05:0b:58:90:01:ef:28:e8:cd:8a:bc:
         09:fb:cc:f0:e3:14:a2:c5:88:60:1c:0f:a9:1c:d0:83:d7:37:
         cb:10:74:7c:35:26:93:82:fa:f3:54:3d:4f:ac:fb:79:29:13:
         25:79:2a:e3:e1:1e:cd:3a:1f:24:7b:c0:97:48:2c:ee:92:a7:
         a4:a1:91:d9:7e:06:43:5d:1f:42:e0:b6:57:8b:08:97:fe:96:
         19:bb:a7:7c:5f:5c:70:f3:2c:9c:5a:3b:b3:92:95:a8:0a:0b:
         ee:b7:d4:0f:ad:11:28:23:9d:16:68:21:fe:c6:1f:70:43:56:
         45:46:2e:03:e9:6f:d5:ae:1c:b2:29:ad:ab:75:ac:48:a5:d8:
         aa:ae:9e:47:f1:fb:fb:18:07:59:9e:07:57:05:ba:19:f9:67:
         76:53:53:3d:24:cb:0e:05:7f:74:a8:ea:28:c8:b4:f9:c8:53:
         d0:44:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----