Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer
File:                     90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer (raw, json)
Hash identifier:          fcly59ZtlxwwR9KTcjO7L5UvYHeAC6QzGE6hLWD5SN4=
Subject key identifier:   E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107EC13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/90ef0bf45eb95f428a97e23652586ee37cd91ffc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 17 Aug 2019 23:18:00 +0000
Certificate not after:    Fri 16 May 2025 17:43:11 +0000
Subordinate resources:    AS: 269726
                          IP: 45.179.254.0/23
                          IP: 2803:4160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17296403 (0x107ec13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 17 23:18:00 2019 GMT
            Not After : May 16 17:43:11 2025 GMT
        Subject: CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:4a:b9:4d:7f:8b:9a:7e:e5:6b:c0:36:01:
                    ba:99:35:9a:fc:0f:e6:2e:70:8d:42:0b:08:b0:63:
                    1a:d2:fd:e8:44:c0:80:27:60:a7:c9:75:58:2f:85:
                    7d:07:3d:f2:36:da:14:8e:cf:d4:42:59:70:f6:04:
                    80:26:94:6d:32:7e:39:af:75:a9:b9:30:9c:6a:2b:
                    94:4a:71:c9:ab:56:a1:f9:3e:60:f3:db:f8:0d:0d:
                    3e:99:18:62:56:e7:f9:24:d9:6f:1d:04:d6:cc:f6:
                    97:02:a1:ab:56:e6:7d:51:fd:70:07:c9:c4:7d:cc:
                    e9:68:33:5e:46:a7:cb:fc:d5:c4:77:5e:cc:b7:91:
                    c8:b0:1a:5a:ac:46:6c:47:d1:27:c9:97:64:20:1f:
                    7e:e6:c3:b9:dc:bc:dd:8e:0a:cf:d1:df:52:32:c7:
                    69:4d:5b:08:01:43:ab:78:3d:61:90:8a:8d:bb:4e:
                    97:78:d0:04:33:80:ea:53:03:fd:f9:1f:4b:16:2d:
                    78:ad:32:b6:fc:d6:18:7d:7b:4c:5a:07:58:c9:1e:
                    1e:0d:ed:44:7f:56:06:4a:3d:6d:3e:05:c9:be:60:
                    a5:6f:e4:cb:35:39:c5:43:87:65:50:ef:ed:94:c7:
                    c1:0f:85:d6:46:54:82:52:35:34:f2:7a:d8:b2:5a:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/90ef0bf45eb95f428a97e23652586ee37cd91ffc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.254.0/23
                IPv6:
                  2803:4160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269726

    Signature Algorithm: sha256WithRSAEncryption
         78:87:6d:e1:7b:53:96:3b:cd:ed:4b:c6:44:5d:0f:26:3a:5c:
         a1:97:9e:58:13:50:40:23:61:ff:ff:24:ff:a2:69:4f:0b:d1:
         3c:5e:83:0c:77:72:9f:16:dc:1d:3e:d9:ac:70:3c:34:d5:b9:
         a7:eb:0b:fa:47:2a:84:89:af:2f:06:20:4b:6d:a7:da:b2:df:
         8b:23:8c:22:c1:1d:2c:89:a7:bb:79:a1:ab:d2:67:78:a7:a0:
         a9:15:18:47:6b:20:23:90:0a:e2:4b:42:ba:b8:75:29:01:1e:
         40:b1:7e:31:be:35:c0:89:f9:ef:dd:ae:2a:b1:59:25:d1:65:
         f0:69:d2:13:f8:0d:22:cf:94:2b:f9:98:cb:89:08:75:c2:c4:
         67:76:b1:e8:b4:55:86:5e:bb:cc:0e:03:4a:45:78:a6:55:0f:
         dd:ed:21:9f:99:e5:7d:b7:12:82:9e:c0:ef:ca:cf:3d:f4:2c:
         dc:fb:f3:5f:6b:a3:60:1d:8e:cb:30:97:32:73:64:59:d6:18:
         e3:d7:2f:82:58:21:72:b1:86:e3:b7:94:b8:4b:e2:10:fe:78:
         fd:df:b2:d6:1e:35:47:4e:0c:82:ef:9c:56:d8:b5:d0:ac:dd:
         4c:ba:79:0a:55:33:c0:4f:2d:91:a2:64:85:85:15:0c:3e:b4:
         58:14:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----