Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer
File:                     1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer (raw, json)
Hash identifier:          NCo9tcLdVB4+qV2g8wNGbCrsZUfTpyH4H6vbiZPnMz0=
Subject key identifier:   25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E768BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Aug 2020 02:41:06 +0000
Certificate not after:    Mon 27 May 2024 20:35:49 +0000
Subordinate resources:    AS: 270073
                          IP: 138.118.200.0/22
                          IP: 2803:23e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15165628 (0xe768bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  4 02:41:06 2020 GMT
            Not After : May 27 20:35:49 2024 GMT
        Subject: CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:9a:32:ab:ab:92:c8:a9:87:de:ac:1b:84:
                    53:50:58:56:66:8b:39:94:8c:98:57:91:1c:34:1c:
                    af:17:45:86:fc:2f:35:5d:fe:24:8a:84:14:e7:11:
                    6d:fc:d3:b4:b5:96:6c:ab:eb:a3:33:95:66:0a:5d:
                    5a:18:72:0c:18:81:00:d5:55:03:4e:ee:af:80:4d:
                    91:29:ca:94:40:b1:96:ff:6e:a7:a4:be:64:dc:b7:
                    2f:fd:23:37:1c:1b:dc:db:35:08:8c:84:19:9d:b9:
                    d1:75:3d:88:43:94:83:16:4f:32:a2:2a:2d:13:f4:
                    13:07:4f:f1:c4:cc:2f:cd:48:9c:20:11:22:6c:5d:
                    f2:d2:13:fa:5f:85:98:7b:8a:0f:05:76:73:8a:c7:
                    b8:68:21:02:d4:0f:97:75:e1:04:ba:32:f6:ed:44:
                    ee:f2:d6:22:82:69:c8:e2:51:64:b4:04:87:bc:87:
                    2f:77:59:83:4d:17:eb:ec:9e:a0:1c:2a:2a:ba:25:
                    2e:f9:b6:3e:27:b2:4d:ba:90:9a:97:ea:6e:13:06:
                    ff:af:e5:89:54:59:bc:dc:bd:59:c6:1d:c9:66:a0:
                    9d:87:7e:09:66:c2:22:28:ba:4e:08:f1:54:d1:c2:
                    57:2c:e7:4c:35:34:c2:b1:82:bb:d0:0f:e6:29:89:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.200.0/22
                IPv6:
                  2803:23e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270073

    Signature Algorithm: sha256WithRSAEncryption
         52:86:20:83:27:70:ce:e3:68:e3:3d:49:a9:28:ef:33:c8:02:
         2c:72:84:13:39:40:63:37:f4:de:58:8c:4f:77:d5:c9:0b:aa:
         14:ec:22:14:2c:9b:83:52:3e:7c:77:0c:eb:56:00:be:81:af:
         2b:ba:64:40:b2:fc:fe:e3:ec:a2:ba:53:a1:8e:87:96:98:5b:
         2e:95:52:7f:71:a7:77:59:a1:96:8f:b1:e7:fc:a7:71:ee:bf:
         bf:95:7d:a2:14:4b:83:7b:73:03:ba:f5:66:25:67:21:31:6f:
         eb:69:48:2e:f3:a5:f5:92:52:91:27:89:03:55:e3:35:2b:f4:
         61:6e:7c:e6:7b:d7:84:bf:35:95:f7:6a:e3:c1:12:f7:ed:bd:
         58:17:38:37:c9:b2:fa:98:4b:d4:38:b7:35:fb:2d:c2:89:17:
         60:1b:06:72:af:0d:20:19:eb:04:ab:68:2e:8f:7d:7b:7d:cd:
         95:12:7e:e5:dd:93:1c:6c:9c:a3:05:26:39:78:62:63:fc:7a:
         8d:e2:6d:14:2c:bc:44:d2:94:5a:d4:b9:c7:a8:a5:b2:28:4d:
         49:a5:96:6c:f2:55:9c:86:f7:e5:2d:ca:e9:23:28:0c:8e:46:
         c6:cf:48:c3:5b:04:f5:bc:4c:27:d7:3e:66:4f:b1:85:34:bd:
         a1:11:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----