Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/352d81fa9c316172ab509381cae6f178b33dd2cc.cer
File:                     352d81fa9c316172ab509381cae6f178b33dd2cc.cer (raw, json)
Hash identifier:          VaJrhCwipAma+CTcW6e9DPVbx1fW1z3JdotBjW7gjoQ=
Subject key identifier:   55:92:9C:88:99:11:A6:44:7C:15:78:37:C7:EF:1C:49:9F:E5:74:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F02275
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fc524ae6-c071-4e6d-ac1f-543f832b44ba/352d81fa9c316172ab509381cae6f178b33dd2cc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fc524ae6-c071-4e6d-ac1f-543f832b44ba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Sep 2020 14:11:55 +0000
Certificate not after:    Tue 30 Jul 2024 20:00:23 +0000
Subordinate resources:    AS: 264630
                          IP: 200.106.248.0/21
                          IP: 2801:0:190::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15737461 (0xf02275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 14:11:55 2020 GMT
            Not After : Jul 30 20:00:23 2024 GMT
        Subject: CN=352d81fa9c316172ab509381cae6f178b33dd2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:a4:88:61:5b:26:96:7d:30:d0:c0:c4:f8:
                    85:78:56:df:25:8d:24:b3:5b:81:30:db:a3:1e:7d:
                    d5:05:64:53:8c:3a:7f:a0:2c:bd:06:6c:9b:81:ad:
                    68:22:1d:81:b7:27:d5:c9:b9:b9:ef:3f:08:e7:09:
                    44:ab:af:bf:af:1c:ce:c3:71:5c:72:ff:30:6a:24:
                    7d:ce:1d:f4:d5:99:b1:d6:91:b4:3e:49:ab:52:ae:
                    b4:bd:89:cd:2a:c6:3a:17:55:c1:f1:e5:d5:c6:aa:
                    95:c6:e2:c4:aa:5e:90:11:15:49:8a:78:07:b0:5b:
                    11:63:b8:43:6d:18:19:f9:9b:8a:2c:97:b7:c8:f5:
                    92:13:15:f2:19:7b:60:a6:e7:96:3e:b3:74:c8:b0:
                    98:f1:3d:14:7e:ad:d5:af:34:de:88:be:32:03:18:
                    08:b8:42:35:0d:3c:03:83:05:aa:6e:c0:06:6f:59:
                    f9:55:e5:f0:01:c1:bc:de:78:04:d6:be:c7:6b:5f:
                    78:7f:36:30:ea:d9:0b:42:c5:46:a0:e9:b4:f9:51:
                    22:88:31:f1:09:1c:3e:ff:37:de:76:64:e6:34:85:
                    e2:91:80:40:89:3e:37:77:0e:fe:c6:e9:54:5e:a0:
                    53:32:5a:b2:84:9b:70:84:35:ac:92:ec:8b:74:b9:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:92:9C:88:99:11:A6:44:7C:15:78:37:C7:EF:1C:49:9F:E5:74:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fc524ae6-c071-4e6d-ac1f-543f832b44ba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fc524ae6-c071-4e6d-ac1f-543f832b44ba/352d81fa9c316172ab509381cae6f178b33dd2cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.248.0/21
                IPv6:
                  2801:0:190::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264630

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:9d:05:03:0a:1f:36:41:4a:d5:4d:d8:17:58:b9:07:72:
         3f:46:f1:35:2a:cb:da:9b:ff:33:af:16:3a:e1:2b:17:10:db:
         58:a2:b0:e9:cd:35:5a:54:fd:db:94:b0:08:bb:5f:f1:be:4e:
         0e:d3:a8:45:56:26:6e:7d:bc:fc:7a:a1:7a:41:10:a5:06:0b:
         3e:cd:2f:0d:5f:3b:15:34:94:a0:a9:18:75:ae:86:72:8f:55:
         6b:ec:89:a3:66:6e:40:86:12:28:bf:80:8a:01:76:79:b3:52:
         12:12:bf:c1:d9:ff:48:ce:00:e6:03:3b:2e:d1:a9:c7:45:6f:
         7b:62:cc:1a:78:79:45:02:58:04:2d:2f:0e:f3:ba:df:3c:1e:
         d2:29:59:1f:ee:dd:a9:a8:2f:9d:2d:1d:f2:a1:e9:85:42:5f:
         f5:b1:b5:5f:27:be:2c:6b:b4:fc:de:ee:10:36:4f:2a:46:a0:
         69:74:33:02:d3:27:d2:3d:4c:58:85:bf:fc:59:de:db:2a:d7:
         0b:4d:a0:cc:6f:4a:6e:03:f8:d6:81:7b:c6:ca:b3:41:a2:79:
         a3:05:18:95:49:2f:92:dc:12:5d:86:7b:b0:d9:f4:91:ca:55:
         77:ae:29:0f:6e:66:ba:51:db:e4:68:31:ac:71:20:16:fd:6c:
         8e:b7:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----