Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202cb3488506efb49dfb0ab983c08668843b1d3a.cer
File:                     202cb3488506efb49dfb0ab983c08668843b1d3a.cer (raw, json)
Hash identifier:          gCi2naBvTS/EWJiyRHqN0Bctt6ry1cykX4jIRk+BSvQ=
Subject key identifier:   D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010302C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/202cb3488506efb49dfb0ab983c08668843b1d3a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2020 15:24:52 +0000
Certificate not after:    Mon 06 Jan 2025 15:30:03 +0000
Subordinate resources:    AS: 269975
                          IP: 190.89.28.0/24
                          IP: 2803:16e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16974529 (0x10302c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 25 15:24:52 2020 GMT
            Not After : Jan  6 15:30:03 2025 GMT
        Subject: CN=202cb3488506efb49dfb0ab983c08668843b1d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:fa:52:0d:e0:b8:15:df:ac:d3:b7:a4:d7:
                    63:ba:bc:e9:a2:e8:65:af:af:5c:31:8f:19:c9:05:
                    a1:0b:10:f3:92:5f:ca:f1:ff:16:96:60:ee:fe:e7:
                    e9:5f:bb:35:e4:a2:85:1a:77:5b:5b:87:74:44:76:
                    26:fd:37:fc:48:c0:ad:83:b1:b5:b9:45:3c:43:1c:
                    2f:71:a4:23:d9:89:bb:e5:d8:29:76:df:b6:01:d3:
                    60:75:2c:ce:90:00:68:70:80:86:46:0f:af:22:5c:
                    d5:76:2e:7d:00:87:54:21:f0:b8:cd:7b:a0:80:31:
                    e8:e1:e8:69:70:eb:b0:cf:42:00:74:b1:68:52:55:
                    46:6d:e3:ec:a5:19:06:39:db:f0:09:63:29:0a:c9:
                    55:31:20:c2:d2:6a:2b:a8:13:82:6a:b0:b3:4a:47:
                    1f:a1:8f:42:44:f5:72:53:23:6c:6a:4b:8e:45:a6:
                    5c:f0:5f:c1:4e:90:f1:a4:c0:65:e4:a3:81:9b:3a:
                    f5:8b:ed:ef:73:4e:74:9b:71:5d:e5:d0:51:4b:1d:
                    77:57:48:87:b0:98:76:2c:7a:79:24:fd:f8:a2:67:
                    6e:3f:26:41:11:d1:22:06:e4:8b:89:7e:71:6c:be:
                    ee:76:d2:78:7c:ab:c4:9d:50:b2:99:14:58:f8:03:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/202cb3488506efb49dfb0ab983c08668843b1d3a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24
                IPv6:
                  2803:16e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269975

    Signature Algorithm: sha256WithRSAEncryption
         60:d7:6c:c1:91:4e:7a:6d:df:21:3c:eb:db:a8:f8:f2:ab:aa:
         b4:b4:a7:0c:7b:72:94:27:05:a6:86:b5:fb:fb:e1:73:9a:e2:
         64:3f:66:c5:15:01:f4:76:83:36:c5:88:52:68:da:8e:dd:e9:
         8a:98:9f:e8:36:9c:0e:fc:38:a5:d1:2f:94:1b:38:53:4b:20:
         e1:0f:9a:dc:f5:e0:6f:9d:6d:5e:b5:6a:2f:6c:7d:d5:99:46:
         75:a8:2b:28:80:ba:ab:42:de:3f:ed:3e:cc:09:d4:52:8e:7a:
         24:ce:d6:14:2b:18:98:09:45:4f:bf:ff:3b:9b:30:c4:c8:7c:
         a8:e1:50:8b:6a:99:96:6c:80:69:b7:0a:17:f4:c7:90:9b:f8:
         a2:6b:b1:26:ed:89:99:34:5a:9d:ef:1b:e3:e7:1e:8c:3b:78:
         48:80:7e:33:66:d2:c3:64:0f:39:9f:00:d7:d7:a3:f8:4c:13:
         77:3a:bc:a4:24:e5:65:bf:a3:7c:90:21:be:c0:4b:94:27:25:
         f7:49:d0:d3:a0:5f:2e:10:68:d1:69:ef:41:3d:95:6e:96:ee:
         e5:81:c7:73:73:93:e2:c7:0b:d1:4b:e5:14:83:7c:6d:20:ab:
         67:c6:69:b6:39:3d:21:c6:ef:eb:a9:ae:9d:b2:38:1e:43:04:
         90:e7:f0:b5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQMCwTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMyNTE1MjQ1MloXDTI1MDEwNjE1MzAw
M1owMzExMC8GA1UEAxMoMjAyY2IzNDg4NTA2ZWZiNDlkZmIwYWI5ODNjMDg2Njg4
NDNiMWQzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKou+lIN4LgV
36zTt6TXY7q86aLoZa+vXDGPGckFoQsQ85JfyvH/FpZg7v7n6V+7NeSihRp3W1uH
dER2Jv03/EjArYOxtblFPEMcL3GkI9mJu+XYKXbftgHTYHUszpAAaHCAhkYPryJc
1XYufQCHVCHwuM17oIAx6OHoaXDrsM9CAHSxaFJVRm3j7KUZBjnb8AljKQrJVTEg
wtJqK6gTgmqws0pHH6GPQkT1clMjbGpLjkWmXPBfwU6Q8aTAZeSjgZs69Yvt73NO
dJtxXeXQUUsdd1dIh7CYdix6eST9+KJnbj8mQRHRIgbki4l+cWy+7nbSeHyrxJ1Q
spkUWPgD6WkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTRRRUmgU0GsHGIeBFvSDZ8
1xqNOTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYTQ5NTkxMi03ZTAw
LTQ5ZjgtOGUzZS03ZTNmOTkyMzU0NzkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWE0OTU5MTItN2UwMC00
OWY4LThlM2UtN2UzZjk5MjM1NDc5LzIwMmNiMzQ4ODUwNmVmYjQ5ZGZiMGFiOTgz
YzA4NjY4ODQzYjFkM2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAL5ZHDANBAIAAjAHAwUAKAMW4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHpcwDQYJKoZIhvcNAQELBQADggEBAGDX
bMGRTnpt3yE869uo+PKrqrS0pwx7cpQnBaaGtfv74XOa4mQ/ZsUVAfR2gzbFiFJo
2o7d6YqYn+g2nA78OKXRL5QbOFNLIOEPmtz14G+dbV61ai9sfdWZRnWoKyiAuqtC
3j/tPswJ1FKOeiTO1hQrGJgJRU+//zubMMTIfKjhUItqmZZsgGm3Chf0x5Cb+KJr
sSbtiZk0Wp3vG+PnHow7eEiAfjNm0sNkDzmfANfXo/hME3c6vKQk5WW/o3yQIb7A
S5QnJfdJ0NOgXy4QaNFp70E9lW6W7uWBx3Nzk+LHC9FL5RSDfG0gq2fGabY5PSHG
7+uprp2yOB5DBJDn8LU=
-----END CERTIFICATE-----