Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
File:                     96b6385dac5d112ac08ad68e528602afddcc7d04.cer (raw, json)
Hash identifier:          XPyuJ6EfyBnB03qhzK+xitEcKE3hw8IdQoK/lpuvUOA=
Subject key identifier:   05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5D42C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Nov 2019 22:17:26 +0000
Certificate not after:    Wed 18 Sep 2024 19:59:13 +0000
Subordinate resources:    AS: 269842
                          IP: 45.189.112.0/22
                          IP: 2803:ff60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16110636 (0xf5d42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 19 22:17:26 2019 GMT
            Not After : Sep 18 19:59:13 2024 GMT
        Subject: CN=96b6385dac5d112ac08ad68e528602afddcc7d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:10:39:7c:e0:9e:36:1c:d9:de:92:43:a4:
                    bb:5e:40:e1:dd:8e:e0:83:46:ab:45:d1:a9:b6:b4:
                    81:ca:f3:e1:af:8f:27:5b:57:b8:17:ad:23:96:99:
                    b5:0c:71:cb:cb:40:ec:3e:71:67:dc:e3:8d:27:93:
                    8f:91:9d:24:e6:83:86:80:37:1a:5d:08:5a:18:e1:
                    1b:2f:dc:72:4b:f2:bc:00:d9:95:12:2d:13:a0:c5:
                    a3:59:fd:04:fe:d8:2a:a1:a1:46:77:f7:60:8e:3f:
                    f1:f9:9c:ce:fd:74:5a:33:03:52:e5:2d:a7:5a:52:
                    3b:3b:c9:2a:bd:d5:19:e7:3c:ca:22:87:40:3a:78:
                    be:db:5d:34:ff:d9:df:6a:4a:5e:f2:2f:fa:38:3b:
                    65:61:2b:2d:45:5a:5e:b3:b9:ae:49:3a:1b:14:74:
                    c9:97:65:b0:9e:77:16:b0:51:fe:38:53:44:76:d3:
                    61:52:ed:84:82:01:d1:7f:c2:44:88:a8:d1:ff:6a:
                    39:22:48:fd:bc:37:13:c0:40:22:0a:9a:2b:1d:e4:
                    98:15:8c:b9:63:0d:d7:87:82:85:fd:46:1f:f0:f4:
                    63:2a:72:2c:b5:14:76:24:c0:53:5b:2f:15:f5:47:
                    65:99:63:ca:53:f9:29:01:ed:84:7c:68:5f:a4:4f:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.112.0/22
                IPv6:
                  2803:ff60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269842

    Signature Algorithm: sha256WithRSAEncryption
         90:be:84:59:72:21:e2:0c:9b:29:b6:be:2c:c2:5e:26:8a:98:
         8b:6c:e6:3a:cb:45:46:ca:4c:ec:3a:db:dd:be:06:7d:d0:80:
         69:c2:b6:a5:61:39:38:8c:88:26:64:49:e6:47:c6:c8:91:46:
         5d:27:f5:e1:45:ea:38:ba:60:66:3a:0a:f7:ba:6f:3d:44:19:
         bb:9f:8a:5c:f0:52:ff:d2:14:db:32:5d:51:9c:1e:0f:f8:ef:
         f8:bc:d4:b1:8d:0c:3c:ca:ca:8e:15:f1:93:3e:b3:a9:41:1f:
         d6:5d:1f:19:d5:28:4b:57:69:e8:71:4f:a3:7f:c6:3a:35:fb:
         39:08:d2:7a:df:f0:73:17:04:0c:45:63:1c:9c:09:32:c2:7c:
         e0:66:31:14:7c:0b:78:6f:ea:ac:d8:03:5e:4c:d4:a9:bf:87:
         72:1c:13:f6:56:b3:92:a1:22:b8:68:27:29:bf:f2:65:e1:6f:
         15:bd:be:1b:fd:da:3d:5f:c2:d0:02:dc:fa:59:59:11:8f:09:
         38:69:57:65:cc:48:4d:4b:2c:d4:3d:7f:03:0a:c9:33:e5:ac:
         8f:b8:d5:11:c1:ab:db:26:0a:6d:38:4b:3d:f5:09:22:b8:0d:
         61:72:85:94:b3:a6:48:29:ba:6f:e0:31:c1:d5:b5:9c:04:9e:
         67:4d:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----