Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202def571210e84427e47726d44e38d4bcd2215c.cer
File:                     202def571210e84427e47726d44e38d4bcd2215c.cer (raw, json)
Hash identifier:          /DiD79HLt1mx/nKGtjLi0QIVDMKZE4XxV2iZgtDwelI=
Subject key identifier:   B6:DC:0F:63:FB:DA:F1:20:3F:B2:54:E0:03:D5:41:90:4C:B5:5A:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108DC4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/202def571210e84427e47726d44e38d4bcd2215c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 23 May 2020 12:57:12 +0000
Certificate not after:    Thu 19 Dec 2024 07:48:29 +0000
Subordinate resources:    AS: 269946
                          IP: 45.189.234.0/24
                          IP: 2803:3850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17357899 (0x108dc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 23 12:57:12 2020 GMT
            Not After : Dec 19 07:48:29 2024 GMT
        Subject: CN=202def571210e84427e47726d44e38d4bcd2215c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:30:36:dc:30:e3:88:b4:68:0b:2b:e5:68:
                    bb:d9:a0:4d:e5:4a:98:4c:86:34:94:02:97:61:c2:
                    a9:c6:4e:c7:5b:40:e2:2d:7a:ae:8f:33:6f:5f:a9:
                    79:76:de:d8:99:a3:f5:58:32:d0:19:e3:4f:f8:c2:
                    8a:16:8f:5e:55:1e:2d:16:12:b9:12:59:5c:82:19:
                    a3:b8:c7:78:c3:92:da:40:9c:1c:cf:4d:7d:80:d3:
                    73:f8:7a:49:5f:d7:52:5f:74:2b:1f:b6:7c:6e:e7:
                    c2:e6:a0:5b:c3:0c:9f:28:cc:bd:f1:06:1b:28:0c:
                    25:a5:ce:ed:14:28:a8:91:e9:ff:03:4f:d1:22:be:
                    59:13:fa:24:fe:6b:4d:bc:53:aa:b0:de:44:37:d5:
                    81:7a:34:bf:e2:4a:17:54:01:92:a9:87:c3:b4:c8:
                    50:bc:ef:0e:2f:34:d7:9d:6e:1a:12:32:1b:1d:b0:
                    ab:fb:c0:1b:f0:30:80:23:4c:86:49:e8:e0:b6:56:
                    40:04:65:ab:8c:ad:3b:a1:b7:ce:54:c0:29:7e:a0:
                    33:cb:f8:92:03:a5:b7:7b:dd:3d:8b:9f:74:22:47:
                    12:3e:e0:9f:d8:1e:b1:31:1f:a2:7f:25:8f:47:3e:
                    7c:ac:af:cd:92:ef:18:75:d4:51:b8:3b:18:d9:bf:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DC:0F:63:FB:DA:F1:20:3F:B2:54:E0:03:D5:41:90:4C:B5:5A:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/202def571210e84427e47726d44e38d4bcd2215c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.234.0/24
                IPv6:
                  2803:3850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269946

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:14:ff:05:fe:33:6c:63:e0:9e:db:ef:41:1f:0a:06:fc:
         25:8f:2c:8d:98:fa:b2:f7:c5:af:e8:cf:ea:c5:b4:dd:be:8b:
         d0:7b:dc:9b:23:fe:bb:0e:e7:18:52:33:02:18:8a:6c:66:44:
         42:09:74:bb:3e:09:7d:81:0c:b9:d8:4e:44:a6:a5:d9:70:17:
         f2:03:42:f9:02:da:c2:e8:fd:bb:2a:22:58:be:8b:9e:67:ed:
         7d:94:93:21:0f:45:5e:02:b3:ff:7b:c4:37:8a:61:fa:fa:60:
         f8:97:00:94:4f:5c:bc:6d:f3:50:5a:10:dc:45:24:81:a9:a9:
         14:8c:62:67:cb:b8:95:76:d8:0d:0b:e0:e6:cb:0c:5a:c7:c9:
         61:bf:94:27:ac:4d:49:cb:3c:8e:cd:3b:3d:4d:08:88:c9:9e:
         ac:d4:a0:a1:1d:1a:d7:e0:69:d3:58:0e:0b:ef:9d:2d:d5:45:
         e5:22:20:4d:c3:fe:25:c7:2e:34:af:53:01:8c:af:02:7d:86:
         35:22:81:5f:bd:71:a3:7b:90:fa:a8:43:ea:bd:c8:a2:be:e5:
         35:97:be:1a:d8:73:75:be:26:e9:5e:c1:1e:04:c0:00:b2:a4:
         74:2b:2c:9e:89:15:5f:ab:97:16:0a:77:2f:56:c9:82:b1:31:
         97:60:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----