Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer
File:                     89a6b799164b5797d1071c2a1f3f47ce007167fc.cer (raw, json)
Hash identifier:          egwXWe8zARbBboj0ZrGQchjab4RGUVgMUgySCgCAMMI=
Subject key identifier:   38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F943F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 03 Jan 2020 02:05:03 +0000
Certificate not after:    Sun 13 Oct 2024 16:39:43 +0000
Subordinate resources:    AS: 269875
                          IP: 45.190.16.0/22
                          IP: 2803:e8e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16335864 (0xf943f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  3 02:05:03 2020 GMT
            Not After : Oct 13 16:39:43 2024 GMT
        Subject: CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:e2:03:bd:bf:29:c2:04:6b:8e:c5:9e:04:
                    be:dd:0f:cd:74:66:a9:c9:e5:60:9a:31:33:93:84:
                    f1:64:75:3a:b3:7b:6c:bf:33:63:0a:ff:69:fc:51:
                    ef:64:b9:a6:4b:cf:54:b1:68:fc:2c:cd:0c:36:f4:
                    02:f4:e2:7c:c1:5c:60:7d:7f:25:b2:ba:ed:8f:67:
                    96:50:1f:69:cc:59:ac:68:d6:68:0d:3f:7a:88:9f:
                    53:60:83:f7:ac:ad:ce:7f:75:27:a7:53:a5:37:18:
                    86:ce:ea:9f:90:f4:a0:d7:33:82:d6:c0:05:e0:8c:
                    c3:f0:a4:ed:40:84:4f:d4:16:03:1f:0d:b0:4a:e5:
                    6d:fb:5b:7f:e0:bd:35:e6:de:d1:b8:b7:4a:9a:c2:
                    e3:d0:02:cc:bd:f4:b3:88:5d:45:d9:17:30:1f:33:
                    0b:da:09:d8:49:db:41:43:f3:65:d5:b4:76:00:d7:
                    e6:8a:55:be:fe:69:20:76:59:c6:00:40:72:e4:9a:
                    45:b2:54:3a:f1:7f:71:69:21:bd:cd:09:a3:c6:e4:
                    80:e7:15:c9:11:bc:60:41:bf:33:36:3a:bc:10:0a:
                    d2:ec:43:23:13:ad:36:e3:9e:07:d7:62:a3:80:5c:
                    4c:a6:7f:f6:d8:25:31:e5:28:c0:86:fe:d9:3d:d7:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/22
                IPv6:
                  2803:e8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269875

    Signature Algorithm: sha256WithRSAEncryption
         16:53:07:f1:bf:ab:9f:c4:cc:8d:ad:64:69:b2:bb:e1:31:de:
         ed:c8:02:74:3a:a6:ba:95:bd:cb:3a:3c:99:d6:b5:aa:13:30:
         e4:72:c5:d9:19:9e:7c:a1:ec:9a:f8:1c:87:8c:bc:e3:78:27:
         18:34:f8:b9:d9:8c:35:d8:3d:16:95:38:a2:9a:8c:10:2d:19:
         a4:8a:ee:a1:bf:10:cd:84:c9:9a:c2:5e:e0:85:4a:37:9c:3a:
         01:b3:6f:1f:f4:22:cd:67:45:46:c1:bb:2a:93:d3:aa:ed:02:
         77:66:b0:1d:e1:64:2d:e9:53:14:03:16:11:26:d3:67:19:f3:
         50:0e:e6:09:55:6b:02:22:f9:11:6f:74:12:17:a5:55:1f:5f:
         5d:41:37:c9:2b:82:ba:07:05:95:d1:db:49:f2:57:8a:2b:fb:
         9d:ef:05:7d:c6:e8:32:8f:72:80:a3:dd:38:6d:7d:99:bb:7c:
         bc:dd:78:23:2d:9b:4d:be:a7:28:fb:a8:13:1d:e3:3a:5c:7c:
         03:cd:d7:e3:b2:e8:ac:5c:16:8d:2c:b7:84:f8:d8:43:46:c8:
         41:4e:75:6f:c7:cf:4f:58:c7:46:ea:17:9e:38:52:32:89:6a:
         95:d7:7e:d3:b1:71:2c:ad:ec:3a:df:15:36:4c:12:cc:d1:b2:
         ce:d6:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----