Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
File:                     bb40d10524d57adf72ab2d55530078d68f27ac5a.cer (raw, json)
Hash identifier:          7pJ9+HF0WOqcQIpDdpJNNUVmu9uquVljkXDIAnrc4iI=
Subject key identifier:   B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01000F87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2020 23:40:31 +0000
Certificate not after:    Tue 03 Dec 2024 20:07:12 +0000
Subordinate resources:    AS: 269928
                          IP: 200.108.190.0/24
                          IP: 2803:32e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16781191 (0x1000f87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  4 23:40:31 2020 GMT
            Not After : Dec  3 20:07:12 2024 GMT
        Subject: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:84:46:42:28:19:05:c6:e7:e8:d5:66:94:
                    84:c3:5f:2a:5d:f3:92:ed:d0:38:a3:3a:66:14:69:
                    f8:fe:7a:7f:ad:61:61:1d:87:90:d5:ef:ed:e5:b2:
                    98:a7:77:76:c5:fb:bf:0d:f4:30:8b:47:2d:d7:d3:
                    78:b2:ae:fd:9e:a7:b6:a7:17:e4:59:3a:73:cf:26:
                    3e:ee:79:5a:08:92:2a:fd:a6:bb:2f:89:ac:99:ed:
                    44:14:fb:ba:e4:d5:0b:1d:16:fa:da:64:09:62:75:
                    bf:a3:1f:ce:a1:4e:d2:53:ec:67:ec:ef:7b:f3:15:
                    97:6a:8f:32:19:de:37:94:04:b6:ee:0e:a3:5a:73:
                    9a:01:9c:73:43:fc:a2:99:f6:1b:6b:29:e2:48:f1:
                    19:f3:de:16:30:ae:45:2b:eb:e4:70:93:6a:a3:d0:
                    7b:cc:33:ef:00:83:c3:20:27:31:47:11:39:af:30:
                    5e:9e:49:13:c8:ef:3c:7a:eb:cb:70:8f:76:23:31:
                    27:68:f4:fe:6d:5a:31:09:6c:a5:64:00:24:1b:13:
                    49:6b:b1:cc:81:eb:aa:6c:18:e4:df:8b:d6:47:e4:
                    99:96:5c:60:d1:1e:56:f4:c2:63:70:07:27:6f:35:
                    f5:5c:f4:7d:39:b6:bd:ed:60:a6:8c:25:47:e8:36:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24
                IPv6:
                  2803:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269928

    Signature Algorithm: sha256WithRSAEncryption
         45:42:70:e8:07:9e:e1:28:37:b1:b9:c6:17:ef:10:13:26:6e:
         e0:5d:f8:80:30:da:e3:d1:c5:5b:08:bd:0f:c9:63:7d:81:d3:
         f2:f6:d7:15:c5:7b:72:17:50:58:05:15:f2:27:37:71:c3:8b:
         29:b5:ee:24:b4:72:23:75:26:bd:a7:80:fc:e5:77:eb:3b:58:
         9b:df:6d:b5:aa:9a:2a:a3:1e:cc:bf:7d:85:dc:50:00:b0:65:
         f1:32:a1:e7:59:49:c0:b7:ae:5e:8b:5a:73:0f:8c:51:9b:63:
         b9:60:65:27:d1:63:b4:bb:59:e8:fe:07:50:15:e8:c8:db:e2:
         11:9b:e0:8a:c8:e9:5c:86:55:20:a4:2e:c5:0c:6c:6e:92:24:
         35:d7:2d:ec:58:9a:34:4c:cd:8a:67:c1:ea:72:9b:9f:32:2f:
         97:db:27:bc:14:42:c7:85:57:61:9d:34:fa:94:69:73:dd:1a:
         72:84:98:c0:c2:d3:af:1e:ae:8a:51:7a:23:fa:78:de:f2:22:
         24:2e:14:12:f6:ab:6b:09:7d:c4:38:80:bf:08:ee:aa:69:bd:
         7c:1b:03:43:98:4d:98:f9:1f:99:3e:e2:c5:2b:f8:5c:6e:4d:
         81:70:4a:12:4c:bc:72:02:fa:c4:b2:52:d5:0c:fb:29:2d:64:
         35:74:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----