Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer
File:                     4e26de49cdf671c8caceba8adf635148030505f5.cer (raw, json)
Hash identifier:          dfU5JLtX6l+PJbXL/fX9Wbzj8vWF+QdS4/7SISFsFGo=
Subject key identifier:   B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE9AFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4e26de49cdf671c8caceba8adf635148030505f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 12 Sep 2020 00:51:03 +0000
Certificate not after:    Fri 15 Mar 2024 06:00:00 +0000
Subordinate resources:    IP: 200.63.96.0/21
                          IP: 2803:d3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14588669 (0xde9afd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 00:51:03 2020 GMT
            Not After : Mar 15 06:00:00 2024 GMT
        Subject: CN=4e26de49cdf671c8caceba8adf635148030505f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:9a:43:02:f9:3f:59:e3:cc:d6:74:91:13:
                    23:5f:2c:f1:b0:78:e3:c0:05:2e:ea:99:e5:35:f6:
                    ce:bb:96:ea:d3:fc:0e:a0:ec:fa:34:fb:6a:4e:bb:
                    45:3a:1a:78:b5:74:2a:56:b1:6e:96:27:29:cb:c8:
                    79:b9:4a:2e:8d:0d:be:da:37:47:5d:4c:58:b7:86:
                    e8:27:65:b8:8d:52:44:e6:f6:43:2c:23:d9:a9:fc:
                    69:1e:51:07:a9:30:5f:24:e9:57:96:f6:7d:5d:6f:
                    01:c4:ed:f2:7f:a4:30:a4:d2:08:f2:d3:60:0c:44:
                    6f:35:81:a4:bf:07:3f:e8:d4:57:6c:e5:b3:e0:44:
                    f8:72:34:cf:f5:78:60:97:b2:fb:ba:01:a7:0b:35:
                    3d:f7:c4:26:df:ab:15:87:87:bd:d5:d1:0d:9b:7a:
                    af:86:68:37:2e:fe:cc:75:f2:e9:ca:04:9f:67:24:
                    6b:ca:e5:02:4b:33:17:50:91:53:d5:db:3e:eb:16:
                    fb:4d:31:8f:93:60:80:96:53:98:4c:df:21:9a:23:
                    9a:de:7c:7e:41:69:4a:64:63:f3:71:31:cf:25:b1:
                    13:e5:94:25:85:6d:6c:b2:61:7d:d6:30:a5:fc:b7:
                    ea:66:85:d1:43:fd:31:55:a6:16:2e:2d:00:08:ff:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4e26de49cdf671c8caceba8adf635148030505f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.96.0/21
                IPv6:
                  2803:d3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:11:ac:04:eb:9f:c2:c5:ac:c9:7f:58:bc:a5:11:60:1d:
         96:a4:5b:2a:07:a1:49:23:26:2a:71:c2:be:83:c7:32:80:f0:
         11:1a:2f:e8:73:97:e4:63:ef:21:06:92:07:6b:e5:fc:04:fb:
         2f:66:00:fd:47:91:0e:2f:ea:36:dd:7a:85:79:54:4a:9b:3e:
         0a:af:1f:f8:bd:ef:58:3d:51:6a:44:2b:ed:56:c0:cc:e5:77:
         b3:39:ad:4d:2f:a0:d9:60:1c:6c:e2:bb:aa:a1:36:0c:e8:99:
         b6:c5:b1:fb:fc:5f:37:ac:de:a8:5a:3b:a7:b1:69:f1:36:9d:
         a2:6a:48:15:ce:85:de:ac:0b:4c:0f:58:1d:02:82:77:bb:e9:
         e8:16:e7:5c:26:e2:83:1d:fc:d4:a6:ef:e0:ce:7e:06:2f:f9:
         36:87:b2:6b:a1:b8:bd:28:3b:68:6a:bd:39:b9:e7:1a:bc:c2:
         98:1e:08:4b:69:bf:db:40:f6:ac:3b:37:41:df:0a:98:cd:51:
         d7:99:8c:f3:c1:5a:a4:f5:16:01:d4:7c:f8:64:8c:d0:96:29:
         68:1b:6f:f2:ff:6d:62:16:e2:db:75:13:ce:02:52:3a:2b:30:
         45:c9:e8:2f:70:1b:a2:41:e0:6f:6d:e5:54:60:6a:e6:0c:e8:
         74:aa:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----