Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b09868b14b6cbc7138aa221c912f82b36b5e7481.cer
File:                     b09868b14b6cbc7138aa221c912f82b36b5e7481.cer (raw, json)
Hash identifier:          mF1sGp6b1WyhYs8tq6FwIkyMfN6WJYZ+Z4cOqBQrMNs=
Subject key identifier:   60:40:2F:A3:29:4F:49:0A:B0:82:95:A3:0B:5E:7F:61:02:93:F0:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0F6CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/b09868b14b6cbc7138aa221c912f82b36b5e7481.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Jun 2020 02:09:08 +0000
Certificate not after:    Mon 08 Apr 2024 18:39:12 +0000
Subordinate resources:    AS: 270031
                          IP: 186.194.160.0/22
                          IP: 2803:85e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14743247 (0xe0f6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  9 02:09:08 2020 GMT
            Not After : Apr  8 18:39:12 2024 GMT
        Subject: CN=b09868b14b6cbc7138aa221c912f82b36b5e7481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:fd:ed:50:0f:fa:f4:e4:2a:71:ef:88:e2:
                    32:e1:41:4e:62:eb:e6:c3:02:3f:13:a2:58:b8:44:
                    c1:db:ed:fd:dd:90:12:c0:75:97:18:63:1d:8d:b3:
                    7d:a7:60:d0:16:65:9e:c8:77:2c:5a:15:89:91:06:
                    82:5c:53:9f:ef:41:09:39:a5:62:7a:e5:a0:14:2a:
                    ca:f3:e2:af:24:9d:16:c1:56:e9:d2:ff:ca:7c:4a:
                    f8:dc:63:54:bb:05:cf:63:94:d0:18:66:79:13:b4:
                    bb:a3:22:82:98:a4:fb:c4:e4:9f:f9:16:19:1d:44:
                    12:68:bf:86:77:14:0e:22:02:f2:81:c2:65:c8:ce:
                    3c:05:6d:da:65:aa:a3:a3:2b:38:ab:b9:e7:4c:25:
                    ab:9a:48:16:d2:46:af:ad:9c:98:93:a0:13:6b:cc:
                    2b:07:83:db:f5:be:5a:1f:fd:aa:bf:27:05:03:28:
                    0b:44:71:d5:99:8c:49:51:ef:9f:0a:f5:f1:b6:b8:
                    92:20:92:cb:db:00:f9:b5:ff:32:bb:fa:11:48:3f:
                    97:06:25:38:bf:40:68:a3:aa:9a:cc:7b:3a:99:6e:
                    7f:45:bc:9d:f4:e0:1f:39:1e:5e:3e:28:3e:06:60:
                    6f:ef:14:ba:54:ee:c6:b5:89:92:e5:0a:93:c8:47:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:40:2F:A3:29:4F:49:0A:B0:82:95:A3:0B:5E:7F:61:02:93:F0:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/b09868b14b6cbc7138aa221c912f82b36b5e7481.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.160.0/22
                IPv6:
                  2803:85e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270031

    Signature Algorithm: sha256WithRSAEncryption
         97:60:fa:fb:42:85:d6:8c:44:87:27:c5:ff:b9:fd:c4:30:53:
         83:d3:f6:3e:55:74:05:45:24:b4:80:12:0f:91:9d:97:2c:48:
         06:15:ac:5c:66:17:27:29:aa:f4:df:73:9f:92:11:04:99:da:
         a5:bf:59:f2:94:dc:64:6c:0a:96:db:4a:86:65:26:36:59:4c:
         db:93:14:e2:2b:3a:d1:f4:3b:76:c7:54:c6:44:2c:3f:69:9d:
         3b:84:4f:be:eb:57:46:d3:29:77:33:2a:03:c8:53:55:f2:b4:
         80:3c:cb:94:4a:1d:34:be:9d:24:a9:88:91:2c:b9:f1:cd:6f:
         87:13:c2:0c:e7:ee:27:68:76:c9:6c:6c:4a:e9:a6:9a:7b:8c:
         23:0e:2a:5e:e4:fb:70:94:f9:1d:3d:c2:5c:b5:48:cd:6d:82:
         a0:cc:f3:0a:ed:ac:7d:6c:59:6e:24:d9:d2:43:6e:f9:f6:21:
         75:45:7d:05:1e:e8:9a:cd:70:50:b8:ba:d5:60:b9:02:32:ee:
         55:aa:0e:33:95:d5:20:39:18:99:43:e2:79:5b:9d:cf:a9:90:
         1a:14:4e:0b:43:20:d6:cf:5d:f8:e0:67:2d:a4:26:84:08:d6:
         e4:fb:28:f6:cf:1e:f8:19:b1:a7:58:78:d6:bb:df:75:61:c2:
         18:81:01:7a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOD2zzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDYwOTAyMDkwOFoXDTI0MDQwODE4Mzkx
MlowMzExMC8GA1UEAxMoYjA5ODY4YjE0YjZjYmM3MTM4YWEyMjFjOTEyZjgyYjM2
YjVlNzQ4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKLG/e1QD/r0
5Cpx74jiMuFBTmLr5sMCPxOiWLhEwdvt/d2QEsB1lxhjHY2zfadg0BZlnsh3LFoV
iZEGglxTn+9BCTmlYnrloBQqyvPirySdFsFW6dL/ynxK+NxjVLsFz2OU0BhmeRO0
u6Migpik+8Tkn/kWGR1EEmi/hncUDiIC8oHCZcjOPAVt2mWqo6MrOKu550wlq5pI
FtJGr62cmJOgE2vMKweD2/W+Wh/9qr8nBQMoC0Rx1ZmMSVHvnwr18ba4kiCSy9sA
+bX/Mrv6EUg/lwYlOL9AaKOqmsx7Opluf0W8nfTgHzkeXj4oPgZgb+8UulTuxrWJ
kuUKk8hH3B0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRgQC+jKU9JCrCClaMLXn9h
ApPwVzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYWM0M2E0OC1hMjQ3
LTRjMGQtOTc3MS1hNDYxYmE0NWQ0MzYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2FjNDNhNDgtYTI0Ny00
YzBkLTk3NzEtYTQ2MWJhNDVkNDM2L2IwOTg2OGIxNGI2Y2JjNzEzOGFhMjIxYzkx
MmY4MmIzNmI1ZTc0ODEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArrCoDANBAIAAjAHAwUAKAOF4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHs8wDQYJKoZIhvcNAQELBQADggEBAJdg
+vtChdaMRIcnxf+5/cQwU4PT9j5VdAVFJLSAEg+RnZcsSAYVrFxmFycpqvTfc5+S
EQSZ2qW/WfKU3GRsCpbbSoZlJjZZTNuTFOIrOtH0O3bHVMZELD9pnTuET77rV0bT
KXczKgPIU1XytIA8y5RKHTS+nSSpiJEsufHNb4cTwgzn7idodslsbErpppp7jCMO
Kl7k+3CU+R09wly1SM1tgqDM8wrtrH1sWW4k2dJDbvn2IXVFfQUe6JrNcFC4utVg
uQIy7lWqDjOV1SA5GJlD4nlbnc+pkBoUTgtDINbPXfjgZy2kJoQI1uT7KPbPHvgZ
sadYeNa733VhwhiBAXo=
-----END CERTIFICATE-----