Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
File:                     0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer (raw, json)
Hash identifier:          LjYYw6PT3lhVrB2spvV3qktmM/6Mmtv3wbMDOGcaBQQ=
Subject key identifier:   0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E373CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Mar 2020 20:56:19 +0000
Certificate not after:    Sat 04 May 2024 21:05:34 +0000
Subordinate resources:    AS: 61463
                          IP: 200.34.171.0/24
                          IP: 2801:0:3c0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14906315 (0xe373cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  9 20:56:19 2020 GMT
            Not After : May  4 21:05:34 2024 GMT
        Subject: CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:78:59:37:ea:b7:a6:3f:b8:b7:da:c8:d4:
                    be:6f:f6:9f:ae:cc:42:50:23:ec:d7:ee:52:dc:98:
                    e5:25:d6:2b:d7:6c:6b:5d:2a:e9:9d:12:aa:fc:88:
                    a2:a4:d0:dd:08:6a:d7:10:12:22:2e:78:3f:39:8f:
                    4a:8c:0b:6d:98:67:63:b6:8c:4d:12:a2:90:e4:57:
                    c2:b9:55:dc:bf:fb:87:37:4c:40:c0:29:e3:da:29:
                    75:ec:69:6e:bb:13:7d:37:5a:51:37:ff:53:d1:0e:
                    75:e6:6e:6a:41:eb:67:94:a1:08:e7:bb:26:2a:8f:
                    92:eb:03:14:60:eb:ad:cd:26:74:22:f6:85:da:7b:
                    73:da:f9:30:60:e1:94:8c:05:44:c9:7c:28:42:70:
                    06:ba:92:cd:fd:8f:61:d0:73:d2:1f:7b:f9:eb:42:
                    45:fb:d1:f6:97:16:6c:aa:41:c1:58:9a:70:a3:8c:
                    e5:87:05:49:54:93:1a:f8:41:e5:56:6b:32:76:31:
                    9f:b9:de:4e:63:8b:98:20:7d:91:fe:62:37:44:6b:
                    7f:1b:ab:21:09:9b:3b:ba:c7:b1:77:b4:89:d0:97:
                    5e:18:47:7e:a0:1d:67:26:11:a7:d8:5e:48:c7:d7:
                    38:9b:4e:5f:80:fe:f2:f9:59:1e:95:12:b8:05:64:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.171.0/24
                IPv6:
                  2801:0:3c0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61463

    Signature Algorithm: sha256WithRSAEncryption
         ad:3d:be:7b:8a:93:e5:9d:bb:31:dd:8e:3e:0a:ff:8f:98:11:
         bf:7c:ce:33:eb:f7:33:dd:96:16:cb:c7:82:cf:1b:d5:5f:77:
         61:4f:fb:81:4e:ce:9e:c9:3c:85:ad:df:03:1f:6d:d6:39:a9:
         c9:96:aa:57:09:91:69:df:c2:35:db:08:24:9c:04:e5:51:5d:
         51:eb:a6:4b:72:cd:3d:f5:6a:0b:c8:a8:b6:df:a5:8e:9e:b2:
         0b:2c:7e:17:d4:ea:ba:3a:3e:3a:3a:41:d0:b7:72:90:9c:c6:
         fd:c2:84:1a:63:ee:57:3c:ae:5a:57:9a:76:af:15:38:06:64:
         5e:f5:50:95:83:b0:3c:e8:69:77:72:27:ab:d0:3c:de:f0:95:
         f4:75:4c:02:c3:a6:c2:34:6d:db:d4:a3:f3:d0:3e:e1:79:56:
         b7:bf:09:42:a3:33:13:79:fb:a3:a8:8f:ea:9b:f1:29:ff:e5:
         d1:a7:19:bf:98:68:28:8a:74:b6:75:19:50:7e:fc:1f:4b:59:
         70:19:67:e0:29:3f:06:60:62:ee:59:86:6f:38:1b:cf:dc:34:
         6f:b3:84:91:57:78:f8:5a:e5:e2:4d:64:1b:e1:39:01:0c:5b:
         35:9d:ba:bb:4e:70:7e:cc:fb:aa:44:c6:cf:20:54:62:71:73:
         27:c7:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----