Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
File:                     20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer (raw, json)
Hash identifier:          KxeXBuF+y/UIGoGlAnbmnRO4dDv06xIYLMfyqDED66U=
Subject key identifier:   5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7CC62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Aug 2020 00:54:30 +0000
Certificate not after:    Fri 31 May 2024 01:33:04 +0000
Subordinate resources:    AS: 64127
                          IP: 167.249.28.0/22
                          IP: 2803:d3e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15191138 (0xe7cc62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 13 00:54:30 2020 GMT
            Not After : May 31 01:33:04 2024 GMT
        Subject: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:9a:78:74:6c:c1:6c:25:6a:6d:1c:d0:27:
                    38:7d:ff:4d:64:0b:28:48:5f:18:d0:05:b8:16:58:
                    f7:48:fd:3b:9e:ab:66:a6:a1:66:d6:3e:1a:44:fb:
                    8d:9d:df:7b:61:9d:d4:60:5a:1c:22:cc:ba:b2:25:
                    67:49:a1:cd:7a:d8:d0:ab:2c:39:64:70:d1:3c:d4:
                    5f:72:54:1c:5e:a9:4f:4f:43:99:6a:17:f1:f2:89:
                    f9:2d:48:f3:16:2a:e4:43:5f:39:8f:5c:93:3c:19:
                    94:0e:32:76:18:7f:c2:54:f5:5f:5c:b9:93:b7:9d:
                    e4:eb:ae:fc:44:d6:56:12:ce:4d:ed:99:6e:f2:ae:
                    89:58:a4:ff:e5:ad:8c:40:74:b1:74:6a:bf:6f:e9:
                    3f:17:72:f7:08:94:aa:3e:f1:c5:1c:2d:f7:cb:2f:
                    19:7e:08:50:43:15:46:ea:0a:ad:49:46:ab:ac:b7:
                    be:90:f2:5a:94:07:7f:85:62:4f:56:b8:58:51:90:
                    c3:4b:35:0f:02:3e:29:da:6c:8f:d9:8e:bc:1d:46:
                    74:c4:a8:9a:ba:23:c1:36:91:0b:7f:d7:9d:02:e3:
                    24:6a:de:e0:cc:1a:37:4f:2c:8b:9f:dd:e4:f3:2f:
                    26:2f:7c:76:5e:cb:5f:9b:4f:90:59:0e:f5:41:7a:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0/22
                IPv6:
                  2803:d3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64127

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:27:ed:7f:21:f0:b0:f0:29:53:59:b5:11:4d:07:9d:74:
         16:6f:65:14:b3:3c:89:e1:bb:23:40:67:c5:51:54:86:ab:18:
         49:f0:00:b7:93:08:9b:91:23:7a:e9:48:e4:93:00:fc:52:d0:
         4f:75:71:f3:07:01:c8:df:27:8a:f1:04:63:da:ce:2d:d4:84:
         72:54:e1:64:3b:00:0c:cc:af:0c:9a:a0:b0:d0:46:22:c6:0c:
         83:c6:f4:de:67:b2:0c:22:49:0f:ab:d5:a3:c1:b3:64:f3:5d:
         fe:c6:0a:c2:27:11:09:03:01:f2:9e:6b:17:23:f6:39:b7:12:
         c4:4c:a4:8a:31:1f:bf:20:65:45:23:98:62:6a:c1:bd:a5:29:
         31:a8:36:4e:a6:f2:e7:c3:36:58:f9:d3:45:73:e6:bb:bf:e1:
         41:1c:7b:1d:07:46:db:08:cc:a4:25:97:61:6c:c6:de:8c:f3:
         e8:e3:b9:89:f9:bb:78:0d:a3:d3:89:19:34:5a:44:29:c5:8a:
         cf:73:95:5c:dd:18:de:01:4c:39:86:3a:11:63:3e:bd:0c:a8:
         d7:49:24:c0:8e:0f:44:bb:42:59:02:50:05:9f:ed:8c:e0:d0:
         68:39:9c:91:05:7b:18:23:a8:96:8c:c5:1d:8d:9c:f9:7e:97:
         95:29:fd:78
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOfMYjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgxMzAwNTQzMFoXDTI0MDUzMTAxMzMw
NFowMzExMC8GA1UEAxMoMjBjYjdlMWRiYjNmNDE4ZWMzYmE3YTk4MzIwYWVlNTgx
NWJkYjgxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKUrmnh0bMFs
JWptHNAnOH3/TWQLKEhfGNAFuBZY90j9O56rZqahZtY+GkT7jZ3fe2Gd1GBaHCLM
urIlZ0mhzXrY0KssOWRw0TzUX3JUHF6pT09DmWoX8fKJ+S1I8xYq5ENfOY9ckzwZ
lA4ydhh/wlT1X1y5k7ed5Ouu/ETWVhLOTe2ZbvKuiVik/+WtjEB0sXRqv2/pPxdy
9wiUqj7xxRwt98svGX4IUEMVRuoKrUlGq6y3vpDyWpQHf4ViT1a4WFGQw0s1DwI+
Kdpsj9mOvB1GdMSomrojwTaRC3/XnQLjJGre4MwaN08si5/d5PMvJi98dl7LX5tP
kFkO9UF6C8UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRbdKByLdMOln6D7iN0tyf3
DOkpXDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kMDFjNmVkYS0yM2Q5
LTQ5MGMtOWE4ZS1kMmUwZDY4MzIxMDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDAxYzZlZGEtMjNkOS00
OTBjLTlhOGUtZDJlMGQ2ODMyMTA5LzIwY2I3ZTFkYmIzZjQxOGVjM2JhN2E5ODMy
MGFlZTU4MTViZGI4MTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf5HDANBAIAAjAHAwUAKAPT4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+n8wDQYJKoZIhvcNAQELBQADggEBAGtX
J+1/IfCw8ClTWbURTQeddBZvZRSzPInhuyNAZ8VRVIarGEnwALeTCJuRI3rpSOST
APxS0E91cfMHAcjfJ4rxBGPazi3UhHJU4WQ7AAzMrwyaoLDQRiLGDIPG9N5nsgwi
SQ+r1aPBs2TzXf7GCsInEQkDAfKeaxcj9jm3EsRMpIoxH78gZUUjmGJqwb2lKTGo
Nk6m8ufDNlj500Vz5ru/4UEcex0HRtsIzKQll2Fsxt6M8+jjuYn5u3gNo9OJGTRa
RCnFis9zlVzdGN4BTDmGOhFjPr0MqNdJJMCOD0S7QlkCUAWf7Yzg0Gg5nJEFexgj
qJaMxR2NnPl+l5Up/Xg=
-----END CERTIFICATE-----