Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.cer
File:                     85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.cer (raw, json)
Hash identifier:          DtRCUjVXfKojJyCgoCW+rhDHvDRWVmQR13qtMNZsiQg=
Subject key identifier:   20:AE:FF:D0:A2:02:AA:14:52:26:B7:6E:56:6C:10:AD:2B:D6:A9:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBAFBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Aug 2020 18:13:34 +0000
Certificate not after:    Sat 02 Nov 2024 16:18:11 +0000
Subordinate resources:    AS: 269887
                          IP: 45.191.88.0/22
                          IP: 2803:a4e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16494524 (0xfbafbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 26 18:13:34 2020 GMT
            Not After : Nov  2 16:18:11 2024 GMT
        Subject: CN=85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:31:f9:48:3a:97:94:18:e4:a9:35:49:6d:
                    d3:fe:d0:76:b2:f7:de:6f:43:f3:61:52:db:80:4f:
                    0c:39:27:d2:02:d8:d2:bd:f6:31:fd:82:fe:aa:57:
                    7e:91:54:9e:f3:c8:ac:80:a6:0d:20:ee:2f:cf:46:
                    13:be:cc:a5:bb:04:c7:fb:ed:9d:8c:f9:21:9d:21:
                    0a:1a:00:e6:24:96:93:69:42:06:32:ef:be:6f:0f:
                    25:a5:51:74:2c:f0:0d:b3:71:ff:b5:e2:ff:79:e6:
                    3c:30:c3:84:cd:bf:bf:bb:2a:0a:c1:76:7a:22:9f:
                    ca:55:c9:87:9e:7b:51:9d:8a:2f:b1:d0:39:e4:af:
                    7f:02:41:56:a2:a0:45:86:74:83:ce:71:32:c5:d9:
                    85:11:49:f4:69:88:17:ea:ca:26:4c:c6:b6:c1:a9:
                    4c:58:07:0b:fb:06:b7:44:e7:9b:91:c9:31:71:8e:
                    01:33:6a:03:6c:ce:28:64:ca:70:1e:f4:d3:c7:16:
                    cf:58:dd:d7:be:5f:0d:56:9f:6a:75:34:d2:f6:46:
                    c4:30:e9:dd:cb:74:78:1d:a9:fc:47:75:0b:fb:97:
                    b5:08:d1:72:d3:03:9a:19:14:8a:00:39:34:a6:a9:
                    a1:83:ae:23:c6:0b:25:31:ca:d8:a4:73:16:2b:c2:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:FF:D0:A2:02:AA:14:52:26:B7:6E:56:6C:10:AD:2B:D6:A9:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.88.0/22
                IPv6:
                  2803:a4e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269887

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:ca:cb:f8:05:86:d4:52:8c:4a:a4:08:68:30:3c:08:fb:
         36:db:b6:60:97:e7:12:f2:dd:10:88:4a:f3:cd:d0:6d:60:19:
         76:1a:38:eb:23:ef:a2:63:02:11:e9:ce:1d:62:f4:47:ec:fb:
         77:97:69:73:e6:fc:b0:e7:ad:5f:bc:3f:47:fa:e3:8a:24:12:
         fa:3c:80:a6:15:d5:0e:dc:ef:1f:ec:8a:e3:57:7c:f4:90:75:
         e0:2f:dc:05:a3:81:89:e1:c7:b0:d5:2e:58:4c:07:18:53:63:
         64:9c:06:1d:4f:91:a7:71:41:ab:05:f2:61:70:4c:c8:c9:0a:
         9a:09:4d:28:25:b5:b4:83:4e:73:2d:2e:00:95:70:19:57:50:
         03:ce:58:69:fd:c5:7b:be:9e:10:60:d0:36:15:05:f8:92:5c:
         73:b2:f0:69:2e:c4:f1:d5:d1:f8:89:0b:d6:81:86:15:ae:b1:
         00:7d:c8:b4:64:d5:f3:6e:03:76:52:42:2d:0b:a5:87:b3:1d:
         f8:4f:fa:c1:a5:43:5d:b4:e9:eb:b0:4b:a9:a2:22:d2:12:84:
         ce:a2:a0:4b:de:09:51:98:4e:89:d0:73:63:2e:00:22:ff:ca:
         21:c3:2f:d0:27:42:79:51:70:91:e2:c9:87:53:ad:c8:33:2a:
         fb:94:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----