Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285f3218c423687d52e7c2c3ff69a7cfba7ae018.cer
File:                     285f3218c423687d52e7c2c3ff69a7cfba7ae018.cer (raw, json)
Hash identifier:          UC+1yfdfym5jaqT3bZmkhbD0HGruq55e+vtW0lImFL4=
Subject key identifier:   24:29:9B:34:31:D6:21:37:CB:0C:D3:EC:5F:A6:81:C7:AF:E0:CF:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F67F67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/285f3218c423687d52e7c2c3ff69a7cfba7ae018.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jun 2020 14:41:23 +0000
Certificate not after:    Tue 24 Sep 2024 21:48:32 +0000
Subordinate resources:    AS: 262201
                          IP: 200.124.126.0/24
                          IP: 2801:0:290::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16154471 (0xf67f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 29 14:41:23 2020 GMT
            Not After : Sep 24 21:48:32 2024 GMT
        Subject: CN=285f3218c423687d52e7c2c3ff69a7cfba7ae018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:61:e0:29:e4:d6:9c:85:4a:85:28:19:da:
                    4c:1b:91:a0:ef:11:c4:7e:03:51:d3:cf:35:7c:e9:
                    9e:41:f3:17:30:b1:e8:a4:0b:a2:df:d0:a8:3f:e4:
                    a9:7f:f6:3e:8c:7f:46:de:62:25:99:5b:c2:a1:34:
                    46:84:3f:38:26:90:26:d8:e6:4b:6e:6f:5e:cb:26:
                    ca:88:91:6b:28:99:10:fa:87:06:fd:24:7f:73:40:
                    a8:b7:e0:53:80:e3:85:c1:06:fc:f7:7a:19:52:ab:
                    0b:2d:f8:fb:0e:b2:6f:89:1a:c2:22:e0:c9:34:c9:
                    e1:87:6c:39:82:39:7d:9e:84:d7:fb:0c:3c:db:76:
                    ad:75:91:4c:53:fc:5d:ac:1b:36:83:90:3b:06:73:
                    ba:73:34:82:fd:25:1f:26:34:24:83:44:65:8b:22:
                    ea:fb:13:15:7a:c6:f9:a1:0c:94:c4:17:4e:50:3d:
                    ef:d3:27:f1:50:86:cf:65:b8:48:eb:69:5d:5a:28:
                    38:25:43:6d:35:fb:0f:85:a9:fb:d4:4a:c1:29:b8:
                    3b:63:f4:91:35:fc:98:6a:75:28:50:45:fa:ce:82:
                    f6:dd:0a:6d:36:85:a2:46:fa:7f:f6:99:06:90:aa:
                    2f:27:f2:d9:35:c7:89:cc:d3:c3:aa:a9:30:53:b9:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:9B:34:31:D6:21:37:CB:0C:D3:EC:5F:A6:81:C7:AF:E0:CF:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/285f3218c423687d52e7c2c3ff69a7cfba7ae018.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.126.0/24
                IPv6:
                  2801:0:290::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262201

    Signature Algorithm: sha256WithRSAEncryption
         53:74:fa:02:c4:45:74:74:e0:c2:7b:29:64:13:ad:97:94:23:
         66:3c:ab:84:22:6c:bb:24:34:20:a9:a1:86:9d:7f:93:32:e8:
         bd:53:e2:bf:1a:c9:15:04:95:38:eb:57:90:be:89:9b:ef:e8:
         2a:97:a0:48:ea:b8:1a:d5:e9:45:79:ad:a3:18:1f:56:f1:7b:
         24:d4:6b:b3:ee:59:6f:a1:8f:ab:79:f0:9d:45:b1:89:d3:40:
         7c:23:14:10:29:99:2f:0b:99:c9:61:9b:36:6f:ae:02:f3:51:
         55:78:fa:ac:a4:0b:4a:63:dd:be:f5:b9:41:00:0e:17:d6:df:
         78:02:fa:b0:42:9e:87:bf:79:58:ea:d3:14:7c:28:74:24:f4:
         85:7d:7b:c2:a2:57:da:e4:49:3a:4a:f7:22:17:8c:54:9f:a9:
         90:a7:04:22:fc:62:66:0b:7f:78:a3:af:04:9f:66:69:6c:71:
         ef:3d:8a:11:a6:fb:6f:e6:60:bf:5d:71:71:7d:47:ce:e7:5e:
         2a:7a:dd:d5:b7:0c:df:f6:42:ef:f3:f3:a5:b8:47:b1:e7:6a:
         40:56:53:7c:df:ed:9e:d4:71:7c:ca:d7:b6:42:4c:18:f2:28:
         66:3d:e7:ba:51:0a:ac:10:df:d2:8a:84:65:5f:be:83:e0:3e:
         65:89:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----