Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d08412c92e8d5501e7998fc5a31502fa8932a9e.cer
File:                     8d08412c92e8d5501e7998fc5a31502fa8932a9e.cer (raw, json)
Hash identifier:          P7hQBEYgfFgATCAKGLWUfRZJ/K61Ua8o5zDS02BgmUQ=
Subject key identifier:   0E:AF:EA:93:3B:30:D4:7F:74:93:FD:41:6C:EE:45:60:0D:D1:DB:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7C86F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/8d08412c92e8d5501e7998fc5a31502fa8932a9e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Aug 2020 15:01:23 +0000
Certificate not after:    Thu 30 May 2024 19:18:14 +0000
Subordinate resources:    AS: 270074
                          IP: 200.1.112.0/24
                          IP: 2801:1b:2800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15190127 (0xe7c86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  3 15:01:23 2020 GMT
            Not After : May 30 19:18:14 2024 GMT
        Subject: CN=8d08412c92e8d5501e7998fc5a31502fa8932a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:96:81:dd:cf:2d:b9:37:2a:c2:ca:05:39:5d:
                    88:52:07:e5:2e:3b:ba:72:ce:c1:de:b2:09:1a:32:
                    f9:e2:35:75:11:ac:74:4a:7c:27:15:3c:75:81:3d:
                    7d:22:95:85:b8:08:f1:83:db:8a:f6:05:08:23:21:
                    cf:d4:be:ef:23:9c:3a:a0:e2:f1:0a:34:b0:b5:5c:
                    90:56:d2:f2:d5:72:97:38:9c:3f:ff:70:eb:6e:79:
                    61:0e:c9:9f:9d:7d:36:d6:aa:b8:c9:d2:0a:9d:73:
                    0a:f4:1e:df:a6:ae:a8:d7:cc:fb:c8:a6:ec:e1:d9:
                    45:3f:2f:12:9c:e6:df:d2:c0:a2:12:cb:1a:95:c9:
                    1f:ca:04:d0:83:72:bd:10:07:dd:54:0c:55:a5:8f:
                    c3:02:7e:0f:96:c9:3d:46:dd:c7:9d:7e:a9:5e:1f:
                    7d:a4:df:d7:57:94:4a:80:a9:b5:2f:75:cc:15:f6:
                    a5:1e:63:c4:29:58:6c:74:64:25:80:37:17:ba:a4:
                    38:21:77:37:df:52:7c:43:78:14:27:cd:42:f1:b9:
                    f6:ea:af:4f:5b:05:03:42:9d:ce:2e:87:93:00:62:
                    37:78:1c:f4:89:22:4d:42:32:18:2b:a5:ce:17:ea:
                    b4:d0:56:04:67:53:54:cf:21:09:df:76:72:54:c6:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AF:EA:93:3B:30:D4:7F:74:93:FD:41:6C:EE:45:60:0D:D1:DB:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/8d08412c92e8d5501e7998fc5a31502fa8932a9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.112.0/24
                IPv6:
                  2801:1b:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270074

    Signature Algorithm: sha256WithRSAEncryption
         06:62:8d:7e:57:31:42:c4:0b:69:c5:58:84:61:e5:d7:6a:bd:
         01:a2:fd:83:e8:d8:50:df:7d:50:43:65:3e:49:e4:be:0d:c3:
         a7:ab:77:02:d8:08:58:9a:55:8c:17:43:79:35:ad:46:34:61:
         ae:29:7d:8a:6b:5b:5a:13:0a:41:4d:4d:d0:5e:c2:f8:48:aa:
         0d:1a:18:87:25:97:c9:dc:03:77:c7:62:48:24:d1:70:a1:6a:
         77:e8:5a:79:38:f5:4b:f6:ef:e7:ab:8c:e4:79:77:50:31:50:
         bd:c4:07:73:06:f6:e3:cf:0c:7c:ce:ab:a4:8c:eb:87:de:45:
         98:cf:90:f0:c6:8a:a6:0e:52:b0:c7:d2:24:a9:ac:b0:21:8d:
         70:d1:ff:ec:25:a2:f0:a9:81:37:c3:da:a9:73:58:32:c3:e0:
         30:1c:b9:ec:1d:e4:06:ad:de:78:41:52:70:d6:a7:8b:23:14:
         48:e9:ef:ce:87:6e:4f:30:e6:91:0b:6e:68:48:25:81:24:cb:
         19:ae:09:67:5a:f2:f2:59:5d:11:63:66:3e:86:02:b1:f7:8c:
         df:10:21:a5:8b:95:42:65:a3:87:ca:96:ae:bd:35:b2:83:57:
         dd:96:5c:22:44:09:20:3a:7d:79:6f:8a:79:94:4a:f1:53:1b:
         6f:62:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----