Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.cer
File:                     1a3c62d3e6a06dadd310232029765bcd3db5ca3e.cer (raw, json)
Hash identifier:          K+N1Wr9gbIPFFEtejV0qX+wHamIQfWFfBumzJVxmsXQ=
Subject key identifier:   B8:97:74:5D:47:AA:91:0D:9E:52:5B:E5:B4:69:72:50:DE:E6:A2:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D718B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 16 May 2020 16:15:40 +0000
Certificate not after:    Wed 13 Dec 2023 14:43:57 +0000
Subordinate resources:    AS: 269993
                          IP: 138.121.108.0/22
                          IP: 168.90.220.0/22
                          IP: 181.177.220.0/22
                          IP: 2803:4d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14096567 (0xd718b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 16:15:40 2020 GMT
            Not After : Dec 13 14:43:57 2023 GMT
        Subject: CN=1a3c62d3e6a06dadd310232029765bcd3db5ca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:af:82:12:08:8c:a6:37:e7:40:ff:c3:12:
                    80:d1:7e:88:4d:ed:44:88:ba:35:a5:0d:6d:a8:a2:
                    31:6e:d9:d8:c9:a4:7c:70:b9:1b:d9:23:7f:09:78:
                    be:c7:65:9a:17:9e:2b:cf:68:2f:eb:83:08:75:32:
                    0e:50:ba:20:56:31:fc:25:37:a0:79:10:a0:81:ff:
                    50:98:7e:69:f7:20:2b:1f:00:0b:93:6c:bf:ad:89:
                    66:6f:01:4d:28:2f:f8:ff:b0:f1:3b:3c:91:7b:da:
                    0b:d1:44:46:a6:4f:9c:39:d2:06:e7:d7:e0:ac:44:
                    5d:14:7f:52:89:49:5a:ed:69:1a:20:d1:89:2d:a3:
                    5f:3b:14:1a:9c:4f:f7:ab:24:71:85:73:f2:bb:b6:
                    e2:a6:67:8e:ee:4d:2e:85:60:31:a7:a0:c5:c7:de:
                    74:c3:3e:66:2f:c0:c5:ab:09:38:79:1c:f5:49:6f:
                    bf:c8:1a:f0:74:68:75:98:62:87:ca:d8:4e:91:36:
                    f4:85:df:6d:5d:30:4b:ce:1c:a0:9c:d8:7d:e4:59:
                    95:2a:85:5e:86:7d:6c:ba:66:cf:65:f0:9b:61:3c:
                    ad:6a:e4:ca:54:04:79:96:3d:0f:ff:90:d5:ec:d3:
                    cc:39:92:0d:ce:7b:7a:39:b9:28:35:08:fe:46:1f:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:74:5D:47:AA:91:0D:9E:52:5B:E5:B4:69:72:50:DE:E6:A2:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.108.0/22
                  168.90.220.0/22
                  181.177.220.0/22
                IPv6:
                  2803:4d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269993

    Signature Algorithm: sha256WithRSAEncryption
         ba:f8:4e:99:cb:47:96:f2:5d:45:39:2e:58:4c:f5:c5:86:56:
         dd:a2:c6:21:60:cb:f3:ed:f9:fa:bd:3c:d8:84:4c:90:3b:9a:
         87:ff:c3:a5:76:77:04:a8:86:60:6b:75:17:be:0d:85:b7:34:
         a0:54:fe:2e:10:d1:ff:5c:02:19:32:f8:34:16:5f:08:39:b5:
         76:06:2c:7d:69:54:ac:47:bd:56:7c:0d:67:da:4f:a5:0e:92:
         41:3c:c9:60:4e:3c:3e:c5:89:c8:1e:6e:ad:9c:9e:73:26:a6:
         c8:d4:a6:79:e9:1f:a9:02:6d:1b:7b:a7:d8:7a:9d:bc:cb:fa:
         2d:9e:40:85:d9:b5:df:36:43:66:68:36:28:04:36:d8:8e:9a:
         87:4d:f2:a2:f4:c8:a5:0b:82:73:dd:8c:4e:ef:8d:72:6a:63:
         70:9c:de:5a:cd:d8:ba:88:0a:eb:66:ee:92:8b:7f:c7:17:bf:
         cf:c4:6a:bf:2e:a3:76:b4:48:c0:2a:1d:79:27:ab:92:a1:a3:
         f5:ba:df:3f:8f:f6:8e:e0:87:03:7c:7a:0b:ff:50:c2:23:4b:
         72:32:c2:2b:24:cf:40:76:aa:de:10:46:02:aa:8c:e1:a8:5b:
         e2:b0:f6:32:f3:0e:bf:f6:ea:3c:2a:61:dc:c4:27:8b:35:3e:
         43:ae:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----