Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
File:                     0a22b2d0a072d0d716973baadd546791926ae121.cer (raw, json)
Hash identifier:          g81bpnzTLPDK+6Jhu2dZ1Zs1WglC2fxjo5YrodT577A=
Subject key identifier:   2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D92CC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 14 Mar 2020 21:06:46 +0000
Certificate not after:    Tue 09 Jan 2024 15:48:33 +0000
Subordinate resources:    AS: 269964
                          IP: 24.152.52.0/22
                          IP: 2803:96e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14232768 (0xd92cc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 21:06:46 2020 GMT
            Not After : Jan  9 15:48:33 2024 GMT
        Subject: CN=0a22b2d0a072d0d716973baadd546791926ae121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:ef:94:8e:f1:8b:b5:31:12:38:04:e7:27:
                    28:de:78:f7:f0:84:00:0a:48:b7:49:7d:41:87:7b:
                    df:7b:87:4c:a4:0a:59:81:b0:f5:29:08:e7:f4:2f:
                    d2:c3:27:fa:c9:79:b7:b9:e8:b9:08:43:67:45:61:
                    b6:de:20:55:7c:65:b0:db:96:38:fe:f3:5a:f7:ff:
                    de:e6:7c:6e:e3:f9:1f:01:f9:03:79:a6:b7:ec:77:
                    b9:d6:ed:39:7a:c9:49:b0:37:65:fe:d6:2d:9f:f5:
                    8c:d3:da:3b:9d:ef:c6:bc:fa:2a:5f:94:05:73:38:
                    b8:db:46:29:7d:97:36:73:90:22:5a:04:68:0d:b5:
                    5e:1f:5c:18:1e:65:33:1e:9f:9d:71:5e:04:c5:f9:
                    3c:df:9a:c6:e6:86:a2:63:03:50:29:86:df:06:35:
                    da:57:ff:f7:62:a5:9e:69:73:73:bb:d2:61:d6:02:
                    16:84:5c:d6:be:01:73:65:b6:10:30:cf:0b:c4:98:
                    28:53:c8:f0:71:2d:32:27:d2:95:78:f6:8c:4b:d3:
                    65:77:0c:01:6b:19:38:6f:93:4c:05:2e:98:64:b3:
                    4c:ba:34:4f:52:45:a1:17:fe:f2:ef:96:b6:be:e2:
                    73:8f:56:8d:3c:5f:04:4d:12:2f:b9:e7:5f:f0:45:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.52.0/22
                IPv6:
                  2803:96e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269964

    Signature Algorithm: sha256WithRSAEncryption
         53:30:4a:30:2e:5e:b7:4e:d3:7c:06:ec:f2:4d:09:21:ff:e4:
         f5:bc:8e:ee:ca:f9:cf:f4:4f:ab:ae:07:63:ed:e7:ff:58:48:
         ea:84:be:7f:2f:04:67:e4:d0:ad:1c:2a:e4:b0:8d:55:6f:4d:
         37:29:16:3c:bc:91:c9:40:71:16:1e:be:90:cb:5a:5e:27:99:
         e3:30:8a:7f:82:3b:b0:d8:ca:44:71:f4:5e:52:a5:3c:bf:8a:
         45:d0:27:5f:72:fd:76:49:5d:21:9f:68:8b:bb:43:a9:55:0e:
         d0:71:c6:10:cb:dd:c0:04:6c:68:50:1e:b9:f2:fb:10:4d:bd:
         53:ea:7e:10:7f:7d:46:3b:7e:38:8a:22:67:aa:b3:f4:02:66:
         be:43:10:3b:1a:6e:19:80:08:26:2a:0c:7e:78:f4:b0:bf:f6:
         d7:9e:7f:52:b9:53:48:b1:02:72:55:d1:ba:b4:4c:f5:b6:91:
         39:a6:1b:90:0e:61:90:d7:40:a0:80:79:57:34:fb:9b:5e:03:
         1f:c0:69:c2:eb:33:d3:d4:fe:2f:df:05:d5:af:08:5f:9f:b9:
         52:c1:a5:40:76:f5:e2:59:0e:81:09:80:93:19:3a:f3:26:1e:
         00:44:4d:bf:7f:22:f6:3d:d6:28:bb:3e:31:50:81:73:31:da:
         01:63:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----