Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce035223add7affbc39c50745e4f0a03ba5ff31c.cer
File:                     ce035223add7affbc39c50745e4f0a03ba5ff31c.cer (raw, json)
Hash identifier:          uWcUaOWboaIW+M1WblQoUIMSjW4ovbCsdTyhRiLrXJQ=
Subject key identifier:   9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8F0A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ce035223add7affbc39c50745e4f0a03ba5ff31c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Mar 2020 12:35:42 +0000
Certificate not after:    Sat 06 Jan 2024 15:22:46 +0000
Subordinate resources:    AS: 269963
                          AS: 271893 -- 271895
                          IP: 200.14.60.0/22
                          IP: 2801:18:2800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14217383 (0xd8f0a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 20 12:35:42 2020 GMT
            Not After : Jan  6 15:22:46 2024 GMT
        Subject: CN=ce035223add7affbc39c50745e4f0a03ba5ff31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:b9:a9:3d:d5:67:76:7d:80:66:97:18:b5:
                    42:02:32:39:6f:9f:38:09:13:0c:d2:31:43:67:2f:
                    cb:01:90:16:43:c4:0a:32:3a:45:77:fa:78:39:a6:
                    e0:b0:f2:8f:0c:3f:04:d1:ac:f5:56:fb:bd:28:6c:
                    15:11:73:3a:fd:f8:d3:be:7e:21:08:84:0c:7a:d6:
                    1a:bd:73:70:2a:f6:cc:cd:73:05:94:53:e7:e1:04:
                    64:bf:ba:f3:5c:cf:03:37:5f:6b:7b:1a:ba:b8:bc:
                    11:26:20:3f:aa:38:e1:74:d4:7c:b2:36:b7:e7:75:
                    b3:eb:8d:3f:e7:71:82:df:9f:a2:ef:54:e1:f6:3c:
                    a9:1f:bc:e3:9b:20:af:f4:dd:c6:c1:53:08:4b:5e:
                    39:ac:8b:b8:83:ac:8c:0e:25:ac:9c:31:28:46:98:
                    dc:70:cd:4e:1e:43:6a:15:cd:c5:83:a9:df:7f:e1:
                    dc:91:6f:01:77:4f:9f:bc:98:42:f7:45:4c:fb:77:
                    09:c3:44:39:7f:43:6e:76:e4:71:b3:36:51:9e:bf:
                    f5:28:37:d9:3b:3c:93:08:ff:e2:38:6e:48:85:9d:
                    28:14:6b:d4:d7:a0:ab:7a:4c:3b:2b:d6:68:e5:24:
                    da:d8:ab:24:05:4b:38:31:23:21:8a:3b:d8:fb:1b:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ce035223add7affbc39c50745e4f0a03ba5ff31c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.60.0/22
                IPv6:
                  2801:18:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269963
                  271893-271895

    Signature Algorithm: sha256WithRSAEncryption
         83:42:b7:d2:7c:b3:98:5e:7c:c5:f7:32:29:90:17:8f:b5:56:
         cc:bc:0e:f8:35:7a:6f:93:7a:c4:eb:36:2e:2f:ed:aa:98:3c:
         3a:13:02:fd:91:84:e2:2e:d6:79:ac:a3:17:df:ef:a0:73:22:
         fd:d1:9f:25:1a:13:f6:ba:ec:bd:0b:ef:3d:ba:a6:9f:eb:28:
         cc:bc:50:87:66:06:ba:5d:5c:4e:82:09:94:88:1e:59:13:cd:
         08:e2:98:f8:89:ba:f7:cd:e9:d1:f2:2b:3e:70:a7:8b:af:ca:
         dd:5c:67:09:f8:a6:19:aa:ce:6a:5d:1a:7f:02:cb:cc:7d:df:
         d1:93:bb:b3:1e:8e:f7:f5:0e:83:18:8a:57:52:f3:7a:d6:ca:
         de:82:6d:42:d8:b2:2d:ba:77:b6:55:b9:99:83:e9:f4:c3:40:
         23:de:88:f8:02:57:d6:67:51:33:c6:43:16:6b:24:5c:25:7b:
         10:07:99:89:50:79:04:25:11:98:22:5d:94:c7:73:35:c6:d4:
         c1:cd:e3:6c:cf:07:f7:43:cc:20:76:7a:e5:95:d1:43:10:fb:
         2c:17:cc:b9:e8:9d:76:1e:6d:5b:bc:80:0a:96:0b:a8:d5:04:
         11:cf:1f:0b:6a:d0:fb:cd:61:67:2b:41:20:88:19:30:63:31:
         0b:d1:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----