Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
File:                     035480923cfb3fc749b393f95a7b72c277263815.cer (raw, json)
Hash identifier:          TBwMH2amWplRrLvgRycKjOQTQ+vKVUnmNSqcNEfctyQ=
Subject key identifier:   68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010259B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Aug 2020 17:58:38 +0000
Certificate not after:    Fri 27 Dec 2024 18:18:11 +0000
Subordinate resources:    AS: 269953
                          IP: 190.89.128.0/22
                          IP: 2803:46e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16931251 (0x10259b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 27 17:58:38 2020 GMT
            Not After : Dec 27 18:18:11 2024 GMT
        Subject: CN=035480923cfb3fc749b393f95a7b72c277263815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:a8:c9:fb:51:1f:ab:b5:2a:6a:99:52:fe:
                    0b:23:a5:4f:47:b2:f8:63:50:41:b6:6f:10:5e:48:
                    1d:e0:54:33:bf:b7:16:06:40:55:89:e6:f9:f7:88:
                    67:59:c0:ff:ea:31:9c:77:10:90:6c:07:c5:68:ff:
                    35:93:31:e6:b1:e9:81:f4:03:9a:74:39:25:de:20:
                    a0:2c:31:d6:42:82:57:c2:c0:56:21:13:be:52:d7:
                    be:9f:1d:dd:ea:3b:73:1c:35:cc:cb:c9:a0:b4:b1:
                    89:af:b5:a7:dd:37:48:c0:ad:5a:ed:dc:6b:ff:d6:
                    c7:c8:f1:13:ee:b8:82:21:eb:e8:63:20:cb:d4:6f:
                    40:0d:25:39:20:d2:ba:27:aa:5e:a8:64:8c:ce:05:
                    9c:75:12:16:8b:11:93:35:d2:52:02:9c:95:8f:32:
                    1b:11:03:e6:67:2d:b2:a7:9c:6b:56:94:db:0b:9d:
                    c7:90:0d:52:44:b9:f3:68:14:89:c8:a0:75:4e:7c:
                    e4:23:ca:e9:86:3a:bd:15:19:7b:34:b5:a9:12:dc:
                    b3:e0:1b:3e:cc:44:92:eb:f8:74:88:b7:0d:15:17:
                    cb:ac:af:31:86:3f:0a:2b:bf:70:0c:4a:5f:39:9d:
                    ac:5b:39:bc:04:5f:ee:ae:8a:a4:72:83:5a:b9:ff:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.128.0/22
                IPv6:
                  2803:46e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269953

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:ec:95:0b:5e:a0:dd:04:56:7a:cb:ea:20:05:5b:76:29:
         e4:90:5f:bf:d0:f9:0d:fa:05:17:9f:56:87:58:2e:48:96:d6:
         9f:f0:e1:83:e5:8b:c3:06:1a:5c:98:bf:b0:39:3f:c3:2e:86:
         5c:61:5e:85:d9:8e:59:a9:95:63:f0:fc:23:1d:e9:a8:ab:0f:
         02:a9:6f:c1:38:b3:7e:a8:31:db:c0:3c:29:a0:5e:b0:76:ad:
         34:b4:3a:fe:71:8e:7c:9d:3e:4f:6d:c1:02:ac:39:14:e5:4c:
         f3:1a:c7:79:2e:5b:62:18:65:81:ea:a9:6b:8d:84:19:0d:3a:
         fe:b7:03:f0:e2:88:cb:91:5a:26:26:49:fa:7e:52:ae:8f:ed:
         a6:1b:ff:8c:d0:35:c7:fb:c2:8a:51:48:44:61:cf:1b:b2:c2:
         b7:6e:fb:c1:60:c8:3d:a7:8a:ed:9e:15:60:d7:a3:3d:40:a2:
         04:a7:21:a9:ab:a6:f1:37:48:dd:9d:af:bb:33:3f:f8:9d:e6:
         43:c1:5a:2e:04:48:96:51:2d:6d:ae:1e:01:b5:3f:48:9e:b2:
         7c:87:2e:52:35:30:7f:9d:3b:4b:20:22:82:16:fd:32:42:2b:
         bb:31:d2:f2:ad:9c:06:cb:9e:bc:fe:da:41:a2:7e:aa:a5:28:
         b2:df:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----