Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2683ef2da91fbc72839936eeb61d41ca90b91733.cer
File:                     2683ef2da91fbc72839936eeb61d41ca90b91733.cer (raw, json)
Hash identifier:          Cu8u30xdjSE107UjGUEqicpBdSeftYMf0iY9rIc2myo=
Subject key identifier:   FD:5A:B9:AC:D7:31:82:07:34:19:9A:C4:01:F8:FA:C9:B9:99:F9:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF8DEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/2683ef2da91fbc72839936eeb61d41ca90b91733.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Sep 2020 17:27:07 +0000
Certificate not after:    Mon 25 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 27770
                          IP: 200.7.128.0/20
                          IP: 2800:1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14650860 (0xdf8dec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 17:27:07 2020 GMT
            Not After : Mar 25 15:00:00 2024 GMT
        Subject: CN=2683ef2da91fbc72839936eeb61d41ca90b91733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:24:ed:5e:08:49:4d:54:1e:6d:ee:70:b2:
                    64:bf:2f:c8:d8:69:99:d2:5c:f6:5c:07:ff:46:b2:
                    47:af:a0:c7:d0:b8:35:b2:14:ab:7b:f8:1b:9b:ba:
                    6a:68:06:47:a7:81:6c:55:ff:26:5a:db:e0:41:f3:
                    f3:9e:23:be:f8:df:92:36:6c:b4:70:f2:be:55:48:
                    41:f4:07:c5:26:f5:1f:eb:8a:d1:8e:0e:d0:d5:92:
                    25:75:8e:07:1a:de:f2:07:4e:ab:1b:3f:b7:03:59:
                    9c:b5:15:61:20:86:f7:68:ec:42:62:96:5c:7f:7d:
                    b8:69:b5:e7:ea:7e:14:2b:8d:31:03:d7:52:99:52:
                    fb:21:b7:d8:f3:48:ec:22:91:e5:bc:b8:25:a4:60:
                    27:b8:60:f7:75:4b:32:bc:01:7b:f2:35:67:ae:7b:
                    34:9b:87:af:94:6b:65:ea:9e:43:40:f8:73:52:fe:
                    89:1b:1f:54:d8:3b:ec:9c:cc:c9:3e:9d:70:e9:b6:
                    8e:98:7d:07:0f:cd:0c:97:e4:de:97:d3:5c:f6:ae:
                    86:34:7d:d6:50:c4:df:e8:61:03:5d:99:a5:b4:60:
                    67:29:93:f6:d5:7e:d7:44:1e:08:bd:4c:36:f4:87:
                    dc:46:bb:96:65:f0:f2:24:bf:f8:9b:32:87:71:db:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:B9:AC:D7:31:82:07:34:19:9A:C4:01:F8:FA:C9:B9:99:F9:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/2683ef2da91fbc72839936eeb61d41ca90b91733.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.128.0/20
                IPv6:
                  2800:1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27770

    Signature Algorithm: sha256WithRSAEncryption
         27:29:98:8e:57:d7:75:f1:e6:50:94:a7:21:d6:9e:5f:9b:dd:
         07:38:31:78:e3:53:18:ad:27:0f:dd:db:3d:4a:dc:de:21:1c:
         99:a5:81:5c:20:6a:fd:f8:ec:31:8c:f7:d6:0c:a9:5b:26:57:
         af:40:f3:3d:17:98:b0:65:db:5a:a8:a7:7b:8d:93:69:a5:92:
         e0:c2:2d:35:c4:09:97:0f:8b:05:ed:79:59:64:81:30:57:2c:
         af:d3:ea:2d:51:ba:5e:75:48:d0:45:bb:ba:fc:02:74:aa:38:
         73:28:7b:07:e5:3a:15:a1:30:58:fe:46:10:38:e1:9c:42:56:
         c7:ca:0a:ba:b4:fb:4f:45:96:6f:11:67:7e:f3:57:79:1b:9e:
         a8:70:65:7b:29:e5:eb:a1:d5:38:14:60:77:2d:ad:19:b6:8e:
         3e:5e:15:58:2e:21:bf:3a:72:b3:bb:74:be:fe:50:47:4f:7d:
         1f:b7:7c:4f:bf:bc:c8:54:6e:a4:ff:31:81:bb:cc:db:91:a5:
         0d:da:17:75:44:5e:50:41:9f:5e:de:b9:5b:62:5d:d1:79:e8:
         4b:ed:90:23:02:73:dc:9a:eb:12:12:1f:49:ff:d9:47:72:c9:
         dd:3f:1e:c5:27:4a:40:fc:18:04:ff:4d:d6:55:cd:eb:dd:18:
         1b:b5:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----