Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
File:                     905680316617a29b241d379e0113b16e54308042.cer (raw, json)
Hash identifier:          QYoMbfgsDGW3Bpws6LA1T2v10oIL2bdaBGpLYAL4aa8=
Subject key identifier:   89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6854E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/905680316617a29b241d379e0113b16e54308042.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2019 20:28:57 +0000
Certificate not after:    Tue 21 May 2024 06:00:00 +0000
Subordinate resources:    AS: 264651
                          IP: 138.186.148.0/22
                          IP: 2803:fc40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15107406 (0xe6854e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 20:28:57 2019 GMT
            Not After : May 21 06:00:00 2024 GMT
        Subject: CN=905680316617a29b241d379e0113b16e54308042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:c4:49:81:f5:84:d3:d6:74:10:f9:92:a2:
                    78:55:dc:c4:b0:ae:9b:fa:f0:75:99:e4:d6:d5:26:
                    f3:72:ea:e1:6c:f2:0c:4d:f1:4a:d6:f6:24:e2:f0:
                    d6:af:37:a5:f8:9f:76:98:c0:e6:23:75:bf:41:3d:
                    8c:57:5e:53:6f:d2:6c:3b:c3:ad:8a:5e:8b:7c:a3:
                    08:b0:05:a6:f0:b8:b1:71:93:f1:58:57:30:c6:95:
                    22:0f:9c:db:59:9e:5d:d5:fd:d7:21:3c:50:db:87:
                    98:f7:b7:2d:95:86:03:2e:22:cf:28:c0:98:6e:1a:
                    9e:ff:d0:16:9e:92:05:6f:50:ff:7f:41:07:b0:37:
                    a8:91:da:fc:f6:77:69:8d:9f:06:45:e6:cb:37:21:
                    bd:ff:5e:61:1f:2d:40:d7:0d:bd:05:61:d3:68:3a:
                    dc:f3:fb:5d:57:17:9b:a7:c9:fc:4d:55:1f:84:3e:
                    fd:55:34:f3:2e:7f:85:d0:6c:9b:a4:58:d6:48:1c:
                    c0:40:81:1b:1a:d1:a1:c1:d3:21:c6:f6:2b:ac:e5:
                    75:d3:db:f8:9b:9a:f8:fa:79:b8:fa:b5:b6:4b:42:
                    96:b0:f2:3c:0a:aa:f6:2f:04:a4:b0:5d:d9:4c:83:
                    cf:e9:c5:e6:74:3c:52:62:f5:63:11:b7:18:05:0c:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/905680316617a29b241d379e0113b16e54308042.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.148.0/22
                IPv6:
                  2803:fc40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264651

    Signature Algorithm: sha256WithRSAEncryption
         18:af:e1:94:d5:6b:0d:5a:eb:de:6b:3a:a6:d8:70:f1:c6:92:
         9a:40:30:27:8b:b9:d7:30:6b:fc:9a:e4:55:36:75:2d:b5:e4:
         44:ec:71:8e:1e:69:7c:27:4f:36:a2:3a:fa:2a:88:a4:ed:9f:
         5f:2a:76:c7:57:12:f3:a5:cc:89:d4:86:78:72:09:87:c0:0e:
         08:e4:24:da:2e:65:87:78:87:a5:84:00:f8:cc:53:c1:01:37:
         15:dc:6d:c1:c5:a7:63:ff:a5:cc:56:44:29:dc:da:40:f7:36:
         13:cd:13:66:8a:bb:f8:fb:e5:37:8d:51:ef:f5:c6:d8:49:13:
         fd:d1:f1:05:f5:e7:fe:17:9d:ca:71:04:95:42:b0:bd:cd:45:
         12:c8:98:48:07:7b:2e:45:2f:78:14:c5:0e:fb:94:3b:bb:26:
         d0:19:8b:00:95:f5:af:a7:34:70:cd:6f:07:85:5e:d1:2c:22:
         53:a5:30:f4:a9:5d:7a:ad:3b:44:3b:83:85:c9:0e:73:78:40:
         51:27:e1:25:27:8c:04:26:93:7e:44:76:0c:59:e7:f5:be:e2:
         5e:04:2e:8b:05:de:1b:00:82:d8:18:ca:80:78:f3:b2:ae:1c:
         a5:b2:db:a0:3a:66:78:f4:ef:88:a6:5c:73:65:e6:25:a9:2d:
         bd:7e:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----