Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f169baa864aba6bc96d4cf7ef2a12e0f69a3259a.cer
File:                     f169baa864aba6bc96d4cf7ef2a12e0f69a3259a.cer (raw, json)
Hash identifier:          VPUQIYzMNSUTDMecdlOVcoTY4AowOaEKZc8CdluqILk=
Subject key identifier:   EF:46:1C:52:7E:70:85:D1:94:10:B8:6D:60:42:0E:F4:DE:19:43:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8D573
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9ee7de7f-a80b-4e35-98cf-ba5b5d2f7f2e/f169baa864aba6bc96d4cf7ef2a12e0f69a3259a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9ee7de7f-a80b-4e35-98cf-ba5b5d2f7f2e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Dec 2019 23:28:20 +0000
Certificate not after:    Wed 09 Oct 2024 23:06:20 +0000
Subordinate resources:    AS: 269868
                          IP: 45.190.192.0/22
                          IP: 2803:88e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16307571 (0xf8d573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  9 23:28:20 2019 GMT
            Not After : Oct  9 23:06:20 2024 GMT
        Subject: CN=f169baa864aba6bc96d4cf7ef2a12e0f69a3259a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:9d:b1:8c:b4:4b:fe:43:b2:d0:0a:33:31:
                    64:da:5f:f3:c4:32:0f:e6:2e:c6:f6:e7:6a:38:66:
                    0b:50:f5:42:66:a1:4c:e7:c1:a8:18:47:c0:02:7a:
                    74:16:18:e6:3a:ac:88:70:53:7d:76:f9:5d:fa:0b:
                    59:7a:45:b4:53:44:30:da:c8:3e:1f:b2:ee:d9:bb:
                    1d:0c:3c:a0:c6:f9:e4:0c:dd:5a:66:3f:46:0f:3e:
                    2f:7b:b9:b6:cb:12:53:08:c4:26:0f:5c:8a:b9:40:
                    6b:59:62:79:a3:c4:d5:2c:c9:5c:fb:d2:e8:f8:57:
                    27:4e:f4:40:d0:81:00:eb:31:b4:29:0c:ab:ea:74:
                    7a:cf:8a:72:e7:6a:79:4e:ac:ae:39:05:96:bf:ca:
                    01:4b:9a:34:2d:0a:30:27:bf:5a:91:16:e5:6c:60:
                    da:08:a7:a6:b0:92:85:6f:1f:19:e9:a1:8d:3f:02:
                    62:4f:88:ba:7c:a0:be:b9:59:3c:c3:ac:cf:e0:48:
                    8e:70:10:8d:ab:b5:9a:af:32:24:38:f5:e9:1c:95:
                    48:6f:75:28:33:f1:9a:83:6a:73:ef:44:62:4e:38:
                    35:96:8c:41:7f:f4:09:81:ab:90:d9:41:49:43:69:
                    13:9d:15:51:35:42:8c:bf:fb:e7:99:8f:fe:fe:a5:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:1C:52:7E:70:85:D1:94:10:B8:6D:60:42:0E:F4:DE:19:43:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee7de7f-a80b-4e35-98cf-ba5b5d2f7f2e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee7de7f-a80b-4e35-98cf-ba5b5d2f7f2e/f169baa864aba6bc96d4cf7ef2a12e0f69a3259a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.192.0/22
                IPv6:
                  2803:88e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269868

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:d0:10:a7:e1:83:4f:2d:0c:55:4e:bd:c7:c4:ee:db:b3:
         c0:c1:35:85:37:91:03:da:f2:fc:d3:a2:58:c6:8c:a4:8b:75:
         ba:71:2d:60:e8:ce:28:53:d0:2e:03:11:26:07:9e:4b:d7:aa:
         92:dd:69:59:d9:68:b2:a1:70:1d:1e:3a:a3:c0:cf:92:ad:aa:
         82:6b:6b:b9:6b:97:cf:f0:81:f3:df:9f:2e:44:03:be:85:ff:
         a4:f2:4b:cf:c9:51:5b:bd:f4:3a:61:1f:49:d7:c8:4a:e9:5f:
         4f:2c:e1:62:9e:4b:3d:4e:2e:b5:60:0e:48:e4:22:82:b3:9d:
         db:ab:26:df:e6:11:d7:aa:9b:05:86:6f:24:4e:ed:a5:a7:fa:
         74:8b:f9:2c:43:1a:21:7c:28:74:97:9e:c5:28:0e:22:e9:8a:
         8f:e2:6a:a3:de:41:30:a5:e2:7f:4e:6c:c2:32:fc:2d:d6:57:
         36:09:0e:c8:c4:8d:30:67:cf:bc:80:fb:00:00:47:f9:7b:58:
         ad:ad:8c:b0:96:e5:4c:37:41:e7:bd:3a:d5:4e:15:48:ad:76:
         ae:a9:d8:9d:3e:30:6d:5b:1e:cf:c3:04:f0:38:b3:20:d0:6a:
         24:69:9c:47:e3:3c:18:0a:ab:d5:00:66:5f:38:60:e9:e1:1b:
         d9:48:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----