Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845bbeaf321291f319d25e6aad16fc99ac388e15.cer
File:                     845bbeaf321291f319d25e6aad16fc99ac388e15.cer (raw, json)
Hash identifier:          FSgSByFxIquvs6A/OSPVFOI5CopiBhqngwhlVvEpHMM=
Subject key identifier:   6F:76:57:C1:A5:80:23:BE:79:7E:9C:DE:62:7D:63:1D:2C:BD:51:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F314E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/845bbeaf321291f319d25e6aad16fc99ac388e15.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Dec 2018 15:54:48 +0000
Certificate not after:    Mon 26 Aug 2024 23:35:47 +0000
Subordinate resources:    AS: 271921
                          IP: 45.165.40.0/22
                          IP: 2803:c9a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15930592 (0xf314e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 15:54:48 2018 GMT
            Not After : Aug 26 23:35:47 2024 GMT
        Subject: CN=845bbeaf321291f319d25e6aad16fc99ac388e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:d1:20:5a:75:7b:e5:68:5e:c9:f0:c2:8b:
                    ac:a8:58:61:88:6e:0b:52:56:e4:8e:16:8d:a2:46:
                    17:8d:5d:84:94:c6:f7:e5:75:c2:d1:c2:c6:02:c7:
                    f8:f6:e3:89:c9:ae:e2:b4:02:f3:42:7d:e9:d5:3c:
                    00:30:a5:19:d6:cc:96:8c:c3:f4:14:d5:5e:1f:46:
                    d3:21:60:85:69:15:c7:40:e2:26:d6:af:91:68:5b:
                    b7:36:f9:28:0e:15:ee:07:f0:5b:8a:72:47:94:5b:
                    1e:38:4e:23:2a:21:9c:29:e0:b2:5a:48:8f:1e:0b:
                    c2:da:16:42:34:9a:a9:ea:d5:ac:bf:fd:de:80:f0:
                    9a:db:98:bf:23:07:87:5c:ae:0f:ca:5d:69:15:d3:
                    a7:5f:50:49:bf:6d:86:2f:45:72:1b:92:81:47:5d:
                    a0:3e:7d:2b:e8:a5:da:00:43:55:0b:10:0e:5d:06:
                    28:31:44:0d:fb:a1:e4:df:41:c5:f9:46:24:b8:ae:
                    fa:0c:f6:43:c7:d7:4c:e7:a0:d4:76:9d:21:49:08:
                    1a:04:45:51:0b:ac:29:fb:30:72:39:30:2d:a4:b6:
                    56:13:22:55:06:00:5b:f3:2f:b1:0f:89:42:99:68:
                    aa:d1:e6:56:0a:67:6f:ed:22:d8:2d:fb:53:b1:3b:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:57:C1:A5:80:23:BE:79:7E:9C:DE:62:7D:63:1D:2C:BD:51:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/845bbeaf321291f319d25e6aad16fc99ac388e15.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.40.0/22
                IPv6:
                  2803:c9a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271921

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:14:4d:33:57:7f:ff:22:63:71:5a:a0:00:91:fc:a5:69:
         65:f1:da:fe:d3:c1:5d:d8:75:9d:03:41:98:04:5d:84:7d:19:
         ca:04:96:81:1c:2a:f9:7c:b4:0d:13:1b:bd:4f:ae:f1:06:e3:
         2b:8b:91:4e:f2:44:ad:d5:12:f4:71:2f:2f:f4:d8:54:8e:e2:
         09:5d:f1:44:54:16:2e:33:2d:39:79:d0:18:50:cb:39:08:e7:
         2a:6f:ba:2e:0b:c0:03:bc:4d:4a:c9:01:c5:6f:76:62:c5:ed:
         3d:2a:fe:cd:a6:05:d2:24:ea:aa:c6:a2:71:74:3c:fc:3d:29:
         78:e7:96:fb:46:c3:8a:8a:1e:7b:ff:6a:7f:a3:e6:4f:f0:03:
         fa:ba:b6:0d:e0:7b:b8:79:fb:b2:cf:9d:a7:11:47:4c:c4:f6:
         ff:37:36:79:f0:f7:2d:95:28:a2:b1:3b:a8:7f:a7:da:fa:82:
         12:2e:8e:14:f4:c6:32:a8:cf:3f:cc:82:84:a4:79:d0:1a:04:
         31:a6:df:fa:87:4c:72:78:90:52:6b:f5:d1:7e:39:73:33:21:
         42:ec:28:c5:02:dd:04:55:8b:20:c0:55:b0:86:80:83:56:5e:
         de:6c:41:77:44:6e:d3:3c:a2:07:f2:50:5d:1b:46:a8:ce:65:
         18:70:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----