Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9f9959a4af7ed016956f8404136fa80a861d193.cer
File:                     c9f9959a4af7ed016956f8404136fa80a861d193.cer (raw, json)
Hash identifier:          nMSyqFMWwQXF5F5EcTzZ1nZr2gV4Kke/1LnmiNaYie8=
Subject key identifier:   ED:B7:A8:9E:B4:8C:3B:84:03:6E:7C:A4:04:2F:3B:62:67:9F:AB:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDF312
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/c9f9959a4af7ed016956f8404136fa80a861d193.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 19:42:08 +0000
Certificate not after:    Fri 08 Mar 2024 06:00:00 +0000
Subordinate resources:    IP: 200.0.24.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14545682 (0xddf312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 19:42:08 2019 GMT
            Not After : Mar  8 06:00:00 2024 GMT
        Subject: CN=c9f9959a4af7ed016956f8404136fa80a861d193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:9a:ed:73:9b:aa:39:92:d6:bc:24:cc:86:
                    6c:c5:6d:03:d4:f7:6b:c6:fa:63:cf:bd:33:09:b7:
                    f9:e0:a4:72:97:7f:7e:2a:10:77:9a:5a:89:ef:57:
                    5f:30:ed:85:92:de:e5:47:6a:3c:5c:ea:61:01:bf:
                    d8:03:93:69:39:dd:06:30:f7:1c:7e:44:e6:0c:1d:
                    13:1c:49:f5:af:03:7f:52:97:e6:7f:c2:f8:88:06:
                    5e:4b:08:d5:54:32:ff:6a:03:57:64:71:17:c7:04:
                    47:b2:e0:b7:f9:2e:f3:ab:45:42:31:bc:e3:07:b3:
                    d3:ca:e7:e3:fc:c5:4f:6c:26:65:81:bb:3a:b0:24:
                    5e:ee:43:ba:ed:2b:de:72:50:72:91:02:92:95:57:
                    b9:c7:66:d5:02:ae:d4:6c:22:82:80:93:3f:4c:ab:
                    e5:4c:64:cf:88:ad:b6:82:ce:7f:4e:30:ee:f1:b6:
                    a8:1f:43:36:fc:d1:ae:07:95:04:cb:1a:bb:28:b6:
                    e2:46:be:a8:28:68:ca:76:5b:96:90:19:ec:ee:e2:
                    02:0b:cd:c4:57:51:a2:76:b3:8a:7c:53:63:9a:1e:
                    2f:df:b6:16:69:d0:d9:d9:69:f7:3c:3f:d6:29:aa:
                    22:d2:46:de:60:af:ca:72:96:78:e8:71:1b:be:8b:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B7:A8:9E:B4:8C:3B:84:03:6E:7C:A4:04:2F:3B:62:67:9F:AB:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/c9f9959a4af7ed016956f8404136fa80a861d193.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:32:7f:a4:40:34:5a:b4:16:35:6e:00:99:30:85:35:b5:
         e4:36:de:ad:4f:0d:82:9b:ad:76:74:ff:ea:56:b7:4a:c4:3a:
         ed:e0:63:51:6b:3f:c6:bf:76:ff:c2:b2:00:c3:47:e9:f1:1a:
         a8:07:17:ba:e7:09:fe:9a:2c:4d:ba:80:39:37:a1:b8:a8:e0:
         6d:e6:4f:11:b4:34:cf:cb:8c:fc:64:a4:33:7a:4a:a4:6f:71:
         f3:5e:bd:a0:4a:f7:fb:ab:36:e0:c4:04:a4:59:38:be:e4:60:
         17:09:0c:a2:20:4a:0c:f9:d0:19:be:23:3a:29:aa:80:4f:c7:
         2a:f8:ef:b6:ab:12:49:53:f8:05:31:1a:58:c0:55:08:60:0a:
         65:a5:d2:db:59:47:e1:78:e8:2f:58:2f:db:1b:b6:41:e8:17:
         00:28:9f:b6:f7:12:5a:80:8d:9f:79:3b:91:37:47:49:c7:2c:
         14:a6:f8:e2:58:a0:fb:6d:58:f8:a1:2e:df:f1:3a:91:85:d0:
         4f:0f:00:16:c2:07:a7:79:a1:f9:9d:76:a9:0d:57:2b:f5:b0:
         38:d7:60:05:0a:90:36:fb:21:4f:3f:6f:1f:ac:2e:1c:7e:69:
         d0:b9:67:2e:76:9f:3e:76:3a:9b:76:1f:d8:73:27:75:97:c0:
         b8:65:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----