Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer
File:                     8a612a5048f3992505dee3fd707ff02cc9aa4192.cer (raw, json)
Hash identifier:          bri4wktfIuf9ZLi5kCBM8Ds1bUUqYMlO3pEPJf8sziE=
Subject key identifier:   28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6BAF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/8a612a5048f3992505dee3fd707ff02cc9aa4192.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2019 16:32:29 +0000
Certificate not after:    Thu 26 Sep 2024 21:30:41 +0000
Subordinate resources:    AS: 269852
                          IP: 45.188.228.0/22
                          IP: 2803:e0e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16169721 (0xf6baf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 10 16:32:29 2019 GMT
            Not After : Sep 26 21:30:41 2024 GMT
        Subject: CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:c4:a5:06:2e:db:8e:cb:20:2d:0a:10:cd:
                    a4:bc:8c:8b:bf:09:cf:92:47:80:12:e4:c5:e0:af:
                    22:9b:08:ec:f1:99:99:9f:08:6d:64:8a:b4:3f:17:
                    4b:b6:79:b7:b0:d5:9a:55:2d:06:e6:ed:36:be:0a:
                    01:fc:8b:c5:9b:8c:04:33:6d:3a:d5:f9:9e:ac:49:
                    47:b0:94:bd:12:38:43:d8:f2:fe:8f:46:c6:df:74:
                    5c:be:4c:c4:42:d6:03:53:99:47:ad:39:79:fe:8d:
                    f8:dc:b0:19:14:b9:88:71:ce:0e:f9:e4:cf:ee:dd:
                    8b:60:e2:4e:ae:a1:a5:5a:4b:44:86:11:7d:7c:04:
                    76:18:c1:2f:14:2e:4e:ff:23:d8:23:b3:a3:75:1e:
                    09:96:a1:af:ab:9f:09:43:1a:d1:4e:8a:c5:25:bb:
                    45:01:8c:ad:90:6c:f7:03:91:59:d4:c4:30:b4:26:
                    0f:57:a0:e1:71:4f:a9:f5:f5:13:f3:bf:95:01:5b:
                    5a:d0:51:f8:e5:b6:f6:76:a1:30:c0:ff:a6:25:82:
                    74:ee:aa:f8:8e:f9:1e:22:1d:c8:d3:b7:13:0b:15:
                    a4:4a:19:4e:61:16:e3:4d:aa:c8:61:db:53:3f:13:
                    32:85:a5:7b:5c:69:25:36:31:f5:06:76:cc:c4:06:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/8a612a5048f3992505dee3fd707ff02cc9aa4192.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.228.0/22
                IPv6:
                  2803:e0e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269852

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:44:aa:0b:4f:20:8e:89:6e:dd:67:d2:1b:26:f1:6c:9b:
         f2:96:94:f7:fd:d4:ac:3d:1c:23:81:7c:5f:9b:46:91:f8:87:
         dd:35:18:dc:53:80:da:0b:cd:6d:58:4a:cc:5e:e3:c9:ce:82:
         87:a4:2a:5f:e2:b6:9d:8b:2a:de:b6:02:70:bf:45:6f:9a:53:
         da:bf:46:d7:e4:3d:29:c8:74:f9:c6:a3:8a:2b:a9:1d:15:a5:
         ba:67:21:d7:19:4a:eb:48:7a:cf:32:8b:c8:07:c4:57:2f:ad:
         8f:77:31:7f:a3:37:f7:ce:c4:a8:e8:b4:36:15:c1:0a:d7:44:
         2b:5a:1f:29:c3:fa:be:93:a0:97:b0:74:7c:20:8a:7f:50:f2:
         89:da:32:c2:38:a0:1e:70:d8:b4:20:6e:3e:77:b7:66:58:5b:
         a7:5a:90:3c:3d:37:30:15:f8:27:8c:d8:e0:71:01:41:7d:ff:
         96:d8:15:c6:39:04:a4:a4:4f:51:a8:aa:10:b7:04:5f:e6:f9:
         13:15:63:91:14:26:c5:4b:2e:7e:65:63:92:53:ea:ff:fc:e4:
         aa:f2:07:45:69:6e:c3:37:ea:e7:e6:0f:98:48:f4:04:a4:e2:
         fa:95:7c:ce:01:81:14:55:b8:a4:04:69:76:93:0d:f3:de:a7:
         69:e8:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----