Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/892a2462df3541f86912f2af9707f9b6f589eb8a.cer
File:                     892a2462df3541f86912f2af9707f9b6f589eb8a.cer (raw, json)
Hash identifier:          vLr7Log1sjqR1AS0FoUnPtsmvnPq1prXZRYUm2ZThLs=
Subject key identifier:   89:65:DD:28:2C:F1:5A:E0:FF:EB:AF:9C:28:46:ED:E3:DA:27:35:8F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA95CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/892a2462df3541f86912f2af9707f9b6f589eb8a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Feb 2020 23:58:53 +0000
Certificate not after:    Fri 26 Jan 2024 22:08:47 +0000
Subordinate resources:    AS: 267810
                          IP: 45.172.178.0/23
                          IP: 45.172.218.0/24
                          IP: 2803:9060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14325196 (0xda95cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 29 23:58:53 2020 GMT
            Not After : Jan 26 22:08:47 2024 GMT
        Subject: CN=892a2462df3541f86912f2af9707f9b6f589eb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:e1:54:4c:eb:a6:44:f6:a0:e9:a2:64:f3:
                    ac:24:b9:a4:1c:6b:31:78:e0:23:f3:09:c9:08:d2:
                    e4:f2:14:c9:c4:0f:90:ae:fb:2d:50:1e:0a:d6:a4:
                    f2:a9:a3:9f:50:1d:9e:16:a1:c5:fc:da:29:9a:46:
                    d6:53:06:9d:21:f0:fb:77:58:2b:eb:dd:a2:77:62:
                    59:28:9d:9f:c6:af:3c:94:31:f3:71:d4:12:48:9b:
                    25:0a:74:5d:43:83:b3:ec:d5:77:da:97:27:73:a2:
                    d9:aa:a9:00:87:ea:b6:b8:ff:5b:d7:83:cf:ed:c3:
                    97:5c:4e:be:e9:33:62:02:ae:01:05:52:75:4d:35:
                    73:4d:07:17:fa:0b:2c:0a:21:fd:6b:72:b2:1a:bf:
                    8c:33:87:e6:ac:29:f6:ff:c8:d8:01:d4:ad:b8:22:
                    1c:e2:aa:1d:09:7f:78:e4:08:10:83:01:7a:83:fd:
                    9d:99:2b:30:f8:5a:cf:84:db:0b:f9:bb:ef:8a:d2:
                    21:02:cf:2d:6b:57:a0:c2:64:ec:e7:35:e1:a9:3e:
                    30:b5:59:b1:9c:38:f8:87:7a:fd:eb:8c:32:1b:76:
                    78:85:d9:1c:d3:77:59:a4:d9:7e:56:03:a5:18:74:
                    12:ef:8a:38:2b:c3:b1:60:ec:7a:78:67:b4:45:ea:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:DD:28:2C:F1:5A:E0:FF:EB:AF:9C:28:46:ED:E3:DA:27:35:8F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/892a2462df3541f86912f2af9707f9b6f589eb8a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.178.0/23
                  45.172.218.0/24
                IPv6:
                  2803:9060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267810

    Signature Algorithm: sha256WithRSAEncryption
         67:39:0c:50:31:e0:e1:20:bf:4f:7d:b0:5b:ce:1c:ae:1a:bd:
         76:92:81:5d:2a:ac:0f:20:9a:05:fd:e1:ae:91:93:dd:56:e3:
         3b:98:58:70:ec:de:77:b3:c8:95:91:24:0f:6b:bb:54:99:e5:
         c0:64:2c:f8:71:9b:d8:85:01:65:67:16:cb:37:43:6b:a7:0e:
         d4:a5:25:4e:f3:9e:9d:2d:68:55:e4:41:cf:53:1e:4a:4b:d9:
         bb:30:32:f8:5c:18:be:c3:72:24:fb:65:31:0d:3e:d2:fb:6c:
         08:bc:41:c2:49:f4:69:99:b3:90:d9:7c:c6:18:af:29:7c:bb:
         8c:4f:ee:f9:8b:fd:35:1e:68:56:2e:c3:17:3f:6d:c1:a6:39:
         87:e1:b9:4c:95:ac:41:54:88:85:0c:b7:f7:6b:ca:75:0a:bb:
         79:29:87:40:59:e0:cb:1f:bb:82:f2:d1:59:ab:82:6e:13:6d:
         ba:bf:55:5a:71:ce:37:ac:1b:f5:41:02:39:07:4d:87:66:d2:
         ec:15:1e:a2:2c:c0:4c:3e:bb:f2:5c:b2:2b:25:67:a2:14:99:
         c2:08:b8:5c:45:04:20:6e:82:30:9e:2f:da:f0:dd:b3:a4:35:
         bb:1b:6a:a6:20:e6:26:17:c1:d1:30:e2:a2:59:75:d6:48:ab:
         e8:5a:df:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----