Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b902843ecff864fd5a08fee4deed318c9c146f72.cer
File:                     b902843ecff864fd5a08fee4deed318c9c146f72.cer (raw, json)
Hash identifier:          tQVyHezZliVVj06KSLDZSNN4tc7pCOZ7gZ9W1WTkaMY=
Subject key identifier:   4D:BB:0C:09:73:C0:27:30:6D:CA:73:1A:8A:34:21:B7:89:22:76:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD8FA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/b902843ecff864fd5a08fee4deed318c9c146f72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 May 2019 21:21:18 +0000
Certificate not after:    Sat 02 Mar 2024 21:40:35 +0000
Subordinate resources:    AS: 267910
                          IP: 45.176.20.0/22
                          IP: 2803:7460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14520231 (0xdd8fa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 21:21:18 2019 GMT
            Not After : Mar  2 21:40:35 2024 GMT
        Subject: CN=b902843ecff864fd5a08fee4deed318c9c146f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:68:0b:51:9d:d1:dc:8b:b8:a4:ee:c2:20:
                    26:fe:2c:c7:f2:ef:03:da:a6:66:73:f3:8b:f9:4b:
                    c5:38:23:2a:bb:fb:b4:67:75:8f:eb:19:b8:24:a2:
                    02:c8:b8:1f:68:29:bb:0e:c3:fd:c1:10:63:66:08:
                    24:b4:31:b7:8c:34:38:b6:b8:e6:ed:b9:d6:82:46:
                    9c:10:e2:55:93:fa:77:62:74:d7:55:e3:0d:85:f4:
                    32:30:8b:ba:9c:8a:8e:e1:6a:3e:8e:d2:21:78:93:
                    d8:f4:76:99:33:7c:60:d0:1e:5d:e3:72:56:89:b8:
                    0d:aa:3f:a9:7f:d1:fc:79:97:6e:8b:72:f0:ff:b7:
                    3f:0e:dd:bb:59:d9:80:49:95:cb:e8:99:da:8a:ea:
                    fc:57:f5:95:32:96:fc:2f:44:c6:14:32:32:a1:1e:
                    6e:5b:4d:f3:03:a0:a3:7d:ca:43:9e:ae:dd:d8:35:
                    f2:b6:72:5b:98:cb:69:fc:3d:b2:92:c3:18:71:8b:
                    f7:d7:e4:57:23:be:a0:b2:15:de:4e:6b:2e:a5:4c:
                    33:6a:d7:7e:9c:ee:75:14:f0:59:f7:8f:e0:08:75:
                    c0:f0:8b:f9:2c:01:89:ef:e5:4a:32:b4:06:b8:9c:
                    19:ac:e2:20:dd:c1:74:a4:32:2f:4d:10:e4:66:00:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BB:0C:09:73:C0:27:30:6D:CA:73:1A:8A:34:21:B7:89:22:76:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/b902843ecff864fd5a08fee4deed318c9c146f72.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.20.0/22
                IPv6:
                  2803:7460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267910

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:83:c5:fe:f4:51:2d:b9:21:d9:c8:5d:ac:22:52:df:53:
         7c:81:42:67:b6:97:1f:dd:a6:54:17:84:b0:9f:35:69:89:a5:
         2b:db:5d:bc:79:6d:bd:d3:ac:fc:03:41:36:3f:33:7f:ea:d6:
         23:dc:fc:77:79:d7:b7:e2:75:1b:17:99:71:63:c3:24:08:5d:
         35:13:de:37:39:b4:2e:a6:85:46:06:fd:66:af:29:76:de:5a:
         94:44:36:84:bd:2d:3d:ea:26:7e:17:b5:e6:5e:e1:56:67:9d:
         77:21:27:8b:ab:3e:3a:00:d9:f6:3c:b6:65:f8:ce:5a:4b:65:
         d6:4e:49:7d:82:02:05:95:76:14:34:ff:9a:82:9a:d7:c5:10:
         11:04:6d:79:04:3b:8a:70:30:bd:8d:d9:ce:5f:8c:8e:85:9c:
         27:32:77:10:0d:01:d9:3f:24:60:ff:f1:79:8b:d7:8a:a4:61:
         63:c2:b3:01:a8:30:1a:00:c3:f1:fe:64:a5:a9:44:a9:07:8d:
         bc:43:1a:68:6a:26:49:ae:50:aa:88:f8:bd:f6:66:29:b6:8f:
         43:34:a3:af:aa:eb:05:ef:b1:29:6f:e6:7a:31:b4:e1:be:3a:
         e5:51:2e:eb:61:9f:7f:35:fe:8e:9e:90:e6:2b:7a:0d:87:62:
         a1:89:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----