Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb7bc4b5530d7f1720524e32a2994dedf375c16.cer
File:                     9cb7bc4b5530d7f1720524e32a2994dedf375c16.cer (raw, json)
Hash identifier:          4i9Sb/9YiMNnrU5jwWOPnXfBEl0NeTydZIGo8Md+r/M=
Subject key identifier:   CA:19:50:A1:23:DC:0E:BD:F7:A1:93:93:18:24:E9:40:93:0C:23:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD01F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/9cb7bc4b5530d7f1720524e32a2994dedf375c16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2020 14:58:49 +0000
Certificate not after:    Sat 16 Nov 2024 21:52:52 +0000
Subordinate resources:    AS: 269907
                          IP: 200.26.232.0/22
                          IP: 2803:2ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16581113 (0xfd01f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  4 14:58:49 2020 GMT
            Not After : Nov 16 21:52:52 2024 GMT
        Subject: CN=9cb7bc4b5530d7f1720524e32a2994dedf375c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:84:da:11:db:96:a2:6c:fe:48:dc:bc:2a:
                    b8:ba:40:d0:cf:d2:66:ef:3f:c8:42:1b:73:cd:21:
                    f0:67:42:2d:d4:43:48:2e:1d:33:fb:52:3a:b7:02:
                    88:bf:d4:71:fd:41:b4:ed:42:ad:40:88:20:c9:a8:
                    25:9d:e7:70:cd:5f:66:d8:94:61:7c:12:87:16:69:
                    19:76:20:e7:bd:3e:39:26:f8:f1:eb:34:36:85:9f:
                    61:82:38:2f:5a:e7:a3:b9:c3:82:07:d0:96:45:60:
                    76:07:c4:7e:be:a9:d3:7e:63:b0:ff:d7:92:86:fb:
                    8f:fe:a4:a4:18:c4:f7:3e:67:3a:0e:fe:80:ba:ac:
                    ef:d1:98:80:95:28:11:4b:1b:59:c1:9b:35:92:f6:
                    51:63:6f:a3:8e:e7:1c:9e:3d:f0:5d:23:3b:8c:46:
                    03:17:3b:db:fe:52:ba:40:83:11:1c:e3:8f:e7:e6:
                    64:8f:0d:1d:75:b4:ff:c7:4c:e2:3a:12:8e:96:ec:
                    53:84:28:07:e2:57:9d:b9:be:bb:d5:31:71:b6:63:
                    f7:8b:a5:3d:05:52:9b:53:34:a1:bb:02:3f:60:1c:
                    2e:47:8f:c2:87:b4:13:15:21:27:be:c0:89:60:4f:
                    2f:24:73:7d:86:3e:18:ff:63:89:a6:ce:7e:e9:c3:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:50:A1:23:DC:0E:BD:F7:A1:93:93:18:24:E9:40:93:0C:23:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/9cb7bc4b5530d7f1720524e32a2994dedf375c16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.232.0/22
                IPv6:
                  2803:2ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269907

    Signature Algorithm: sha256WithRSAEncryption
         82:87:99:ca:db:db:f0:1f:94:04:74:7d:9a:01:37:d9:3a:ed:
         30:3c:a8:5f:0a:a4:76:ff:cf:63:e2:01:20:02:9f:23:d4:29:
         f7:2e:64:d8:80:94:4e:82:85:eb:56:79:da:2c:05:30:55:e4:
         7c:03:73:49:b8:29:f6:2e:1b:36:a8:75:ee:00:7f:72:a6:ee:
         99:1e:1b:22:cb:6e:b6:37:e0:e0:c2:b7:30:a6:39:0f:9b:5b:
         f0:dc:64:9a:17:9a:53:bf:03:4d:50:24:fb:29:09:0f:b9:20:
         93:d1:6d:f6:91:0c:8c:de:74:6b:ca:b0:7b:29:f0:d9:ee:d4:
         31:01:15:bc:47:64:70:6f:de:dd:12:aa:b8:81:9f:57:da:12:
         34:9f:57:bb:f7:50:b1:3c:d2:31:61:0c:2e:c3:35:ed:52:38:
         04:88:21:04:64:1e:54:ad:ec:2f:90:b0:dc:e2:56:8c:7c:ef:
         07:c7:08:0b:6d:15:7e:07:20:08:b2:33:73:ed:9c:0e:3d:fc:
         76:ac:0e:30:05:61:57:2d:77:ee:27:44:bf:18:86:f0:62:f5:
         70:3a:95:e8:29:73:00:8e:fe:80:87:b0:21:3a:af:05:62:b4:
         d2:87:7b:04:2e:ce:78:26:65:8b:7c:6c:db:6e:0a:05:b0:98:
         c3:78:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----