Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0d7684bdadabbd15b4a8134f2213cb30cc656b.cer
File:                     0a0d7684bdadabbd15b4a8134f2213cb30cc656b.cer (raw, json)
Hash identifier:          FUMCfcGNNMVwDDN00nsOIIAZ6Y8XS74YUKG2Me9EW9Q=
Subject key identifier:   D9:C4:B5:3C:0A:54:EC:41:D3:A7:E7:19:5E:2E:51:BE:B0:47:34:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01033D09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/0a0d7684bdadabbd15b4a8134f2213cb30cc656b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Mar 2020 17:40:52 +0000
Certificate not after:    Wed 08 Jan 2025 18:49:22 +0000
Subordinate resources:    AS: 267792
                          IP: 45.172.188.0/22
                          IP: 2803:efa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16989449 (0x1033d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 20 17:40:52 2020 GMT
            Not After : Jan  8 18:49:22 2025 GMT
        Subject: CN=0a0d7684bdadabbd15b4a8134f2213cb30cc656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:9a:ef:2b:8e:27:7a:47:c4:db:00:66:7f:
                    da:5d:0b:ec:f0:a8:36:2c:83:f3:3b:fe:c6:9e:39:
                    fd:22:ec:9c:c7:7e:65:95:ba:37:7e:62:7f:06:95:
                    64:8a:a8:0c:42:56:72:51:2e:95:ae:d4:07:49:c6:
                    4f:54:1a:58:e7:75:25:fc:f1:8b:c9:79:5a:4a:55:
                    b8:10:e4:57:e6:35:18:c0:92:b9:58:ab:93:61:d4:
                    00:c6:6d:8e:e2:1f:cb:d4:a6:b2:76:d6:93:54:d1:
                    6a:4c:6e:8c:b4:6b:ad:8c:f5:a0:6d:b5:ba:e5:cf:
                    71:56:19:69:b2:a4:34:10:b9:bc:62:d1:d5:ea:4f:
                    2e:27:3c:1e:c8:a0:1b:aa:0b:a5:61:53:81:8a:fe:
                    90:28:07:26:04:d7:9e:6e:10:53:65:6e:f7:bd:a3:
                    4e:73:86:e1:ce:90:40:de:4e:f3:86:3b:61:fa:90:
                    0f:f0:6a:89:f6:38:93:27:22:38:3e:7c:07:e7:2e:
                    44:df:1e:8b:78:28:1e:fc:b6:9c:4c:cb:fa:72:51:
                    6b:f1:a7:b9:5b:1d:36:01:39:b1:dc:89:e8:1f:79:
                    ef:7c:94:47:d0:cc:f5:be:80:77:74:2a:bd:ca:50:
                    d2:07:d5:ea:3f:ce:0b:d1:05:d8:59:6c:ef:93:26:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:B5:3C:0A:54:EC:41:D3:A7:E7:19:5E:2E:51:BE:B0:47:34:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/0a0d7684bdadabbd15b4a8134f2213cb30cc656b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.188.0/22
                IPv6:
                  2803:efa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267792

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:9b:08:9f:a3:b2:f7:15:5d:da:7b:b9:8f:91:e1:2b:06:
         d1:47:be:1b:e0:b0:1e:f3:0a:4d:09:9e:66:04:e4:43:72:12:
         03:06:50:7f:b8:7a:f6:c5:20:78:d9:92:59:c2:ee:69:e3:a1:
         30:36:7f:2e:fc:f9:41:bc:f0:5f:cf:1e:57:9a:66:21:07:70:
         d4:1d:79:6c:ba:ca:da:75:cf:9d:23:5c:92:38:3d:fd:39:a5:
         87:a2:65:50:e9:4d:8c:e2:52:05:a8:44:a8:90:99:ea:09:8e:
         be:95:99:83:b4:cf:fa:9b:b0:88:dd:f2:ae:65:9d:f7:62:b0:
         82:13:57:ad:67:fe:8e:7a:64:73:1f:75:74:9e:75:a1:71:a2:
         fd:7c:28:97:59:6d:83:76:55:15:3d:23:32:f7:e5:ad:1a:f2:
         7c:5b:9e:02:d8:f4:7c:c6:7d:d3:b2:ee:98:6e:d0:21:be:a9:
         38:61:ec:2c:b4:2d:2e:f3:75:9b:c7:c7:d7:d8:75:71:c2:57:
         43:d3:90:a8:4f:bd:1d:97:48:f3:5a:17:80:c5:86:99:4b:cc:
         e5:02:09:8a:f4:c9:78:47:fd:d6:3e:c9:99:30:e6:e5:3d:d9:
         0c:59:f1:77:aa:70:47:13:0a:2c:2b:8e:f9:06:70:c9:34:77:
         4a:56:2c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----