Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer
File:                     cec1e6d8a1f33037dace1b9778780270c02863f0.cer (raw, json)
Hash identifier:          apstpjuZ3QgRVIEXd93LCjDAz+/fJTaVTOzCAl4D+xQ=
Subject key identifier:   A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E28EF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Sep 2020 14:30:36 +0000
Certificate not after:    Thu 25 Apr 2024 21:33:06 +0000
Subordinate resources:    AS: 263790
                          IP: 138.121.104.0/22
                          IP: 2803:4c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14847732 (0xe28ef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 14:30:36 2020 GMT
            Not After : Apr 25 21:33:06 2024 GMT
        Subject: CN=cec1e6d8a1f33037dace1b9778780270c02863f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:54:04:9d:34:a9:06:68:c1:d7:17:66:f6:
                    31:51:04:3c:ee:ac:c4:c4:28:0b:e9:75:16:52:21:
                    6f:d4:23:9c:b7:55:aa:be:65:32:39:7a:43:56:94:
                    8a:e9:da:6c:d8:37:d5:86:c9:d3:d6:56:45:57:2b:
                    69:2b:c7:82:06:42:77:ee:b0:d6:bf:bd:d5:15:96:
                    b6:a0:1f:6c:c2:ea:11:5e:ab:87:d2:e2:50:28:dc:
                    d5:ed:00:15:9f:5e:24:6f:39:cd:b2:b3:8b:bd:7e:
                    7a:ce:f1:8f:a6:7e:8a:af:ad:c2:a2:ef:1b:12:af:
                    71:01:4d:71:36:1c:42:48:07:33:e4:75:93:c3:35:
                    6f:a9:98:12:94:8a:bf:b6:14:c4:38:cb:6e:c5:bb:
                    59:3a:47:8d:a2:ca:99:bf:de:85:83:ed:43:72:ea:
                    64:61:b9:4c:3d:09:b7:ee:60:b2:bf:4b:99:3a:83:
                    35:37:a5:72:c8:87:f7:34:dc:f7:05:09:7f:eb:2a:
                    dd:ce:4c:33:b3:67:a1:95:b9:f6:64:dd:c0:3f:ff:
                    60:b2:ac:ba:30:5a:c0:0b:90:9f:f4:1a:ed:b6:03:
                    57:d9:c2:dd:64:aa:20:f3:e0:d3:b5:04:02:a6:a3:
                    03:dd:20:f5:c2:0b:7e:8e:43:6a:21:49:62:36:c0:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.104.0/22
                IPv6:
                  2803:4c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263790

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:68:f6:0e:fa:06:53:59:68:2d:5e:a0:17:84:2c:d9:f4:
         d1:79:81:27:5c:a3:88:75:5b:6b:87:8f:89:24:e4:81:80:3c:
         1d:f5:7e:46:46:c0:de:f0:61:f2:12:d5:f6:57:89:b5:ba:38:
         35:90:d2:cc:15:2f:38:66:fa:16:a0:a8:ef:df:81:18:21:fa:
         d5:16:6a:56:40:b3:bb:f8:d4:0a:57:69:95:31:a2:64:b0:cf:
         da:26:ad:4d:a5:9f:97:d3:5b:0a:e9:18:95:24:27:d9:24:8a:
         91:fe:6e:1f:13:90:2b:6d:25:a9:3f:28:5d:96:97:18:4b:eb:
         63:c1:e1:7e:f0:bc:88:ae:7c:ff:0f:22:de:bf:f9:ec:95:bd:
         5e:d0:50:00:a8:c0:ec:a9:0e:09:62:00:ad:90:11:78:f8:2a:
         35:e9:3d:2b:53:7b:5e:44:8b:7e:8f:72:51:28:99:d0:37:b0:
         f3:f6:0c:3b:8a:2a:0e:7b:6c:be:cf:f1:d1:50:9d:dc:70:13:
         eb:c6:7d:54:76:b6:11:6a:63:5d:9e:78:54:15:29:6e:92:cb:
         3e:70:84:0b:3f:ef:1a:fa:9d:1a:8d:b1:bb:46:44:5c:86:7e:
         83:5f:2f:55:63:8a:cc:48:74:b9:78:90:0e:fd:22:97:da:05:
         9b:85:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----