Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d4b72fa13ffd9e28508b361f274290526653af.cer
File:                     85d4b72fa13ffd9e28508b361f274290526653af.cer (raw, json)
Hash identifier:          inQFua7+Z/tru6Oj9ssS899bmH//SwAORIfbk3VVGog=
Subject key identifier:   FE:E1:17:37:79:DC:4A:E4:FA:AE:FF:74:D7:F6:D1:41:79:0C:5D:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010308C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/85d4b72fa13ffd9e28508b361f274290526653af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 00:01:52 +0000
Certificate not after:    Fri 03 Oct 2025 21:14:47 +0000
Subordinate resources:    AS: 264688
                          IP: 190.107.240.0/21
                          IP: 190.196.224.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16976068 (0x10308c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 00:01:52 2020 GMT
            Not After : Oct  3 21:14:47 2025 GMT
        Subject: CN=85d4b72fa13ffd9e28508b361f274290526653af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:8c:61:e8:25:79:bf:98:34:10:01:37:98:
                    70:d1:36:f0:6c:b8:93:1f:b1:3b:5a:5f:31:61:e2:
                    41:b8:62:43:b8:92:a8:a6:89:18:e0:98:20:93:be:
                    a5:3d:9a:f7:b5:64:44:14:04:4c:99:95:94:e7:b6:
                    1b:d3:66:56:1e:e8:61:3d:6e:2c:a6:a4:04:3f:8d:
                    ce:56:f5:38:0c:bb:78:d1:da:47:50:c7:ee:49:ae:
                    97:36:0c:25:91:a0:7f:e7:52:3b:dd:a5:9a:f4:ab:
                    a8:56:76:20:84:65:78:1a:67:68:04:30:14:d1:d9:
                    9a:ee:23:35:e3:be:f0:43:c9:fc:66:fe:b4:31:5e:
                    27:f4:b1:69:9d:21:5a:bb:15:da:18:96:d6:b5:e7:
                    eb:65:5a:f9:0c:d4:d0:0f:09:7a:64:64:6b:52:1d:
                    38:c1:51:fd:13:0c:23:53:17:4b:c5:36:3e:9a:ab:
                    5f:02:75:f2:a7:db:1b:36:1a:a3:cf:f9:37:4d:4b:
                    8e:46:1e:34:00:40:c6:59:6c:ef:f6:a5:f3:bb:90:
                    38:cd:46:92:66:c5:e5:3b:72:21:5d:e4:25:80:2b:
                    5a:a3:c3:64:ca:d0:e9:b9:0a:2b:0a:62:67:40:10:
                    90:47:82:ef:c2:bc:43:21:5e:7c:3f:c8:6a:e9:6a:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:17:37:79:DC:4A:E4:FA:AE:FF:74:D7:F6:D1:41:79:0C:5D:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/85d4b72fa13ffd9e28508b361f274290526653af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/21
                  190.196.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264688

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:8c:36:b1:36:a5:3c:16:fb:9b:bc:5c:e1:0e:df:f7:42:
         32:68:90:20:f3:3f:85:db:7c:64:aa:fe:44:69:80:1f:e6:b7:
         91:ef:14:e5:c2:00:b4:4d:8f:46:2e:f1:eb:b9:8f:dc:06:ca:
         de:c1:4f:b8:47:cb:67:d0:3a:d4:b9:6e:ea:ce:f7:f8:08:29:
         dd:f4:46:bf:9a:f7:ff:6d:e9:11:08:10:34:56:70:4a:0d:46:
         19:9c:42:99:76:76:98:2f:7b:ac:45:bd:81:3f:41:0a:41:b5:
         28:c8:34:e1:06:25:e1:a1:5c:44:5a:bf:c4:2b:f1:a4:0b:a2:
         9f:ee:20:4e:10:3a:8e:59:9a:1f:50:1f:8b:83:b9:ec:9e:9d:
         2f:12:97:b6:8b:4d:01:71:97:d0:d9:5e:79:32:13:b8:c6:ff:
         99:4f:0f:42:33:38:7f:b8:13:70:1f:1c:ca:6b:a4:02:67:48:
         3d:f2:fa:6e:4a:2e:b1:7f:97:dd:df:91:8d:fa:9e:9e:9c:df:
         e3:da:4e:fe:ce:81:63:ce:97:da:9e:ee:96:21:ea:6c:10:29:
         b9:68:a6:95:13:2a:18:4c:19:e5:cb:62:29:12:ae:7e:ae:23:
         55:75:22:c1:1d:fc:c4:22:79:fd:a2:c6:14:57:a9:99:3d:66:
         e9:7f:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----