Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
File:                     bff7b3f674f44a97ef26d385f1f6cb77da502739.cer (raw, json)
Hash identifier:          +GA7Twj6yKIxOJnDsJW1q99/UaOvYOE25sBO/PPFdtY=
Subject key identifier:   4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB6CE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/bff7b3f674f44a97ef26d385f1f6cb77da502739.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Sep 2020 14:37:20 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.3.192.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16477412 (0xfb6ce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 24 14:37:20 2020 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:56:ea:4b:fe:5a:38:1f:c9:0b:e7:14:f5:
                    0f:ee:60:e5:d6:8f:25:cc:ad:12:fc:83:48:34:57:
                    02:b9:bb:4b:1d:84:72:df:57:b9:64:f0:2b:48:36:
                    a3:0e:8f:91:18:9d:27:51:2d:a8:a0:7a:d0:15:39:
                    74:2e:d4:a7:a1:c1:b2:87:51:da:5b:33:a0:75:0f:
                    f2:b8:9d:c5:70:d2:7e:aa:ea:15:7e:a9:de:7a:13:
                    1c:52:40:fe:2b:58:d7:56:d0:27:c6:22:1b:b8:af:
                    14:8a:11:68:83:c8:d5:20:ff:9f:43:48:21:8a:14:
                    af:3f:77:8c:4a:a9:e9:10:e7:fd:d6:e0:ba:e8:54:
                    51:dc:03:62:c5:14:b3:22:30:9a:aa:15:e1:79:b6:
                    bc:80:00:2a:f4:9f:97:2a:17:25:11:20:9e:4f:10:
                    df:50:b0:02:81:46:85:b9:34:74:63:d0:be:1c:a7:
                    c4:e3:78:e2:20:15:59:5d:99:c9:f8:ae:20:20:66:
                    54:c5:ef:65:94:d8:2b:65:f2:d9:f0:ec:19:cf:98:
                    f9:8d:51:b7:88:4b:b6:b9:58:5b:66:89:3b:7a:cc:
                    4d:81:00:61:ae:99:57:9c:8a:8a:3c:14:79:e1:d9:
                    b4:52:e0:70:5d:6c:de:af:c6:90:be:d6:46:82:2d:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/bff7b3f674f44a97ef26d385f1f6cb77da502739.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:e9:a6:a6:77:93:67:0a:1c:42:4c:44:93:6f:b0:ae:e5:
         39:e3:54:d3:a7:e9:6f:0e:ce:ca:59:0e:78:d5:2f:05:fb:69:
         a6:08:d4:cc:c0:b1:f3:0f:d4:94:04:af:02:51:10:c9:06:d7:
         e7:d3:1a:2b:f2:36:40:c0:ae:ea:52:78:ef:a4:66:07:1c:8f:
         ec:2a:09:b9:45:db:ac:97:96:1d:55:c8:5e:59:0f:ad:36:d5:
         2d:3a:00:9e:1d:f4:7e:41:b9:64:e1:2f:7e:47:1e:82:d5:8c:
         31:9d:84:f7:c4:05:71:f4:13:e3:23:3f:13:c4:b4:d5:d9:88:
         c6:97:6d:98:2e:d1:ab:c1:66:18:65:bf:18:03:e2:cc:c5:a4:
         59:45:f8:93:1f:8b:29:e1:c0:68:cc:cc:c9:9b:39:af:12:6b:
         cc:38:17:61:6a:e3:d6:47:84:aa:5d:97:a2:7c:c6:2a:ad:50:
         c5:83:b9:7a:41:c9:99:6e:6e:b8:8c:75:73:76:cf:f5:55:38:
         09:e8:04:f2:23:77:48:0f:c9:b2:0f:f4:02:05:63:69:f4:a4:
         ef:06:82:c9:23:5e:68:ba:07:7c:1c:21:97:01:ce:5b:7f:e8:
         97:4e:36:c6:ed:8b:ea:27:28:9d:94:95:0a:0f:53:21:2b:bf:
         5d:23:ff:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----