Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a982329a6e905e08d4e66018a00145cd2888f5ac.cer
File:                     a982329a6e905e08d4e66018a00145cd2888f5ac.cer (raw, json)
Hash identifier:          b+RUonDDLtYbx2W5hDylSjuYjYX0eFAD/zdIfGwWMd4=
Subject key identifier:   5E:F8:C2:28:E2:41:79:54:66:D5:84:C2:58:B5:9B:95:26:5D:E2:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D83680
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/404212eb-56f6-4ba5-952d-b7fc336c4181/a982329a6e905e08d4e66018a00145cd2888f5ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/404212eb-56f6-4ba5-952d-b7fc336c4181/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2020 03:50:11 +0000
Certificate not after:    Tue 26 Dec 2023 17:33:05 +0000
Subordinate resources:    AS: 269950
                          IP: 190.89.36.0/22
                          IP: 2803:6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14169728 (0xd83680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 03:50:11 2020 GMT
            Not After : Dec 26 17:33:05 2023 GMT
        Subject: CN=a982329a6e905e08d4e66018a00145cd2888f5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:1f:71:9c:c2:f7:a2:03:90:db:ff:47:bd:
                    5c:64:91:39:07:dd:1f:f5:4b:42:af:25:97:3c:56:
                    05:e3:9d:3c:be:d2:d1:77:a6:52:3d:a5:57:fe:a3:
                    b7:20:79:ba:ea:55:52:de:60:65:5f:3d:a6:d8:3d:
                    d2:f7:af:e7:a4:cf:89:fa:5c:80:1c:92:dc:4e:96:
                    8b:7c:fd:26:16:d2:90:16:90:b7:7d:f2:8f:ee:a4:
                    2b:56:50:0c:03:47:14:a8:45:36:e9:5a:14:2e:4e:
                    d3:44:a3:dc:e5:db:95:65:97:d8:17:b7:71:a7:f7:
                    a7:b1:1c:8b:66:ad:79:aa:e8:6f:b7:22:0a:f3:89:
                    5f:76:6f:47:3b:8e:49:05:29:8f:12:09:38:e1:38:
                    64:d0:9f:03:5d:ab:70:93:dc:8e:22:e2:31:52:2f:
                    73:67:93:17:0c:04:d9:d7:4b:5a:a2:53:62:fd:01:
                    3b:d5:6c:01:8e:70:f7:c7:57:e2:99:80:e0:ec:a0:
                    22:1c:95:56:87:ab:92:f3:53:bb:17:d3:56:9e:fc:
                    c1:a5:bc:bf:5a:d2:da:c7:bb:39:2f:5f:71:b4:03:
                    e5:c8:dd:35:b4:34:cc:57:41:0c:e0:d5:b7:32:00:
                    ec:98:40:af:3d:2f:54:38:56:32:ea:98:ce:9e:95:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:C2:28:E2:41:79:54:66:D5:84:C2:58:B5:9B:95:26:5D:E2:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/404212eb-56f6-4ba5-952d-b7fc336c4181/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/404212eb-56f6-4ba5-952d-b7fc336c4181/a982329a6e905e08d4e66018a00145cd2888f5ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.36.0/22
                IPv6:
                  2803:6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269950

    Signature Algorithm: sha256WithRSAEncryption
         28:ce:1e:02:dc:0e:3c:07:bb:42:8f:ae:0a:9a:5a:2e:f0:52:
         92:b4:80:40:bd:17:49:fc:83:90:1e:dd:a1:cb:bd:1d:43:70:
         7b:da:61:2e:5a:72:98:61:a4:e1:b7:23:30:3d:5f:6b:55:38:
         da:3c:e3:e9:67:fa:53:00:ca:b6:e5:71:9d:8e:11:dc:ac:4a:
         f5:bd:4c:2a:32:99:e3:d5:5d:fa:21:0c:65:62:e3:03:f0:04:
         55:25:2f:9d:df:c1:63:16:c9:ef:5c:b5:e2:30:1a:b2:91:8e:
         34:e8:f7:48:28:34:b7:da:cd:5d:41:4c:15:61:b5:ea:8c:68:
         fd:0f:c2:70:9e:d8:4f:97:7c:70:74:c3:dd:d3:63:c7:e5:42:
         f5:1f:2c:cf:32:e7:78:d3:a3:4e:6b:fc:77:23:78:1a:01:22:
         98:76:1b:e3:4f:64:1b:71:f3:77:c3:6e:a1:32:c1:5d:a3:6f:
         63:29:50:c6:ec:7f:86:16:90:a1:1b:65:63:8b:45:f1:51:84:
         c5:17:96:23:41:31:03:20:b2:6c:15:83:3f:00:51:cc:69:c5:
         f5:dc:91:c5:26:3d:f4:29:82:67:69:ed:97:2c:da:b5:3d:bf:
         b5:79:a0:16:fd:f3:c1:65:b7:10:b2:4f:24:fd:ea:6f:ba:e1:
         d2:d7:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----