Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aadd09736a685e9266afc7e6c7c9afb259909dd1.cer
File:                     aadd09736a685e9266afc7e6c7c9afb259909dd1.cer (raw, json)
Hash identifier:          4Y13ScSyFlrmxSrrHDBqKxZBZF2qRDyAL7190VTKVjU=
Subject key identifier:   A9:A8:C8:A3:F6:73:45:F4:CD:08:F1:5D:07:66:77:F8:7B:CB:89:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F82132
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eacf29ab-3629-4490-bbe0-e2e706bc5f8c/aadd09736a685e9266afc7e6c7c9afb259909dd1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eacf29ab-3629-4490-bbe0-e2e706bc5f8c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2019 10:52:06 +0000
Certificate not after:    Sat 05 Oct 2024 16:22:17 +0000
Subordinate resources:    AS: 269865
                          IP: 45.187.90.0/23
                          IP: 2803:8e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16261426 (0xf82132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 10 10:52:06 2019 GMT
            Not After : Oct  5 16:22:17 2024 GMT
        Subject: CN=aadd09736a685e9266afc7e6c7c9afb259909dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:86:c0:94:39:bc:e8:b2:09:0f:10:cf:6f:
                    d6:ae:45:e7:7b:19:fc:85:54:6a:c0:c1:ec:8d:77:
                    2b:b9:ac:b2:06:87:57:04:ba:08:8e:56:c0:00:ca:
                    d1:87:29:4e:68:4f:22:59:58:13:bd:3c:6c:e2:6c:
                    40:59:eb:37:fc:7e:f9:61:72:d7:06:63:ab:a8:64:
                    4c:62:ec:b3:25:2a:d8:40:2d:77:d9:d7:2f:7d:70:
                    4d:b6:53:cb:99:12:2d:cb:1c:6d:90:87:e3:81:71:
                    94:57:a1:b8:fb:c5:43:40:63:77:06:af:02:77:24:
                    23:47:90:3a:e3:ed:66:23:88:0b:db:77:2d:eb:3c:
                    b3:1d:c0:4b:13:ae:b4:9b:e6:6f:ec:6b:c2:21:13:
                    e0:2c:51:34:b2:a8:42:51:f7:8b:c6:19:84:ff:a1:
                    57:0a:45:01:d1:fd:08:39:c8:3d:20:48:4c:15:a4:
                    ae:00:48:c2:0e:b9:27:ff:44:d8:88:c4:bb:60:e4:
                    7c:57:f9:13:48:86:20:78:a8:53:28:af:4b:45:24:
                    8c:22:7f:e2:60:c3:75:6f:3f:22:0c:21:c6:12:85:
                    e4:ab:55:f9:96:11:9e:ef:2f:eb:e9:8e:8a:85:04:
                    64:69:36:b6:a6:d9:66:5c:fc:c9:ea:2e:c7:b3:cf:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A8:C8:A3:F6:73:45:F4:CD:08:F1:5D:07:66:77:F8:7B:CB:89:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eacf29ab-3629-4490-bbe0-e2e706bc5f8c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eacf29ab-3629-4490-bbe0-e2e706bc5f8c/aadd09736a685e9266afc7e6c7c9afb259909dd1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.90.0/23
                IPv6:
                  2803:8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269865

    Signature Algorithm: sha256WithRSAEncryption
         45:df:31:ba:4f:75:8f:a8:ac:ec:82:71:2b:a5:db:70:0b:6a:
         27:27:84:62:f3:b5:24:ac:88:f6:90:fd:79:eb:73:8d:d1:49:
         56:be:c1:d1:d4:51:fc:67:6d:3d:02:ae:23:59:5d:79:35:c8:
         69:f0:91:09:fa:1e:d6:c0:a9:e4:34:ce:cd:9d:fe:1d:50:dc:
         df:6d:fc:68:93:c1:53:47:15:8b:ae:7b:80:33:f3:ba:b5:c2:
         65:a2:9f:74:2d:2c:c8:4d:fc:90:60:60:fe:af:16:f4:6b:2a:
         77:4a:7b:41:03:a3:27:49:02:4b:49:de:6c:0b:10:ee:b6:6c:
         fe:9a:58:6e:a6:8a:93:10:d8:66:f9:dc:90:2c:95:d0:a3:84:
         c9:ee:c2:04:6e:b8:0c:53:5a:14:61:3d:47:82:a7:9d:92:38:
         93:d5:6f:58:bb:c6:11:74:72:dc:cd:9f:da:46:95:00:fe:00:
         0d:bf:fd:79:63:81:0f:0d:31:07:96:21:d4:4f:3c:ea:3d:d2:
         fc:19:6d:a4:f4:c9:8a:42:c8:c1:53:1d:56:8c:0f:f0:e3:a7:
         13:72:32:43:3b:50:07:ea:e4:35:d1:61:6b:27:0e:27:a3:b5:
         ee:a2:bb:e2:36:31:c0:3c:82:4a:7d:44:e9:73:b9:4f:76:aa:
         57:ea:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----