Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
File:                     36904f0e1d851da537ad771f7dc44fa5a2018601.cer (raw, json)
Hash identifier:          Zkub59/HZW/sF+0X6t0lSgkwmBkTn1HRCPkzRY6zo+k=
Subject key identifier:   77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1BECA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/36904f0e1d851da537ad771f7dc44fa5a2018601.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Jul 2020 16:35:57 +0000
Certificate not after:    Tue 13 Aug 2024 19:34:10 +0000
Subordinate resources:    AS: 52283
                          IP: 200.108.112.0/21
                          IP: 2803:eaa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15843018 (0xf1beca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 24 16:35:57 2020 GMT
            Not After : Aug 13 19:34:10 2024 GMT
        Subject: CN=36904f0e1d851da537ad771f7dc44fa5a2018601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:45:bc:5e:31:ce:9a:eb:23:54:13:07:0c:
                    d6:72:0f:5c:ce:78:9f:c1:44:f4:5d:11:1e:ae:93:
                    ec:d3:f9:5e:89:76:4a:73:13:a8:5d:6a:74:d2:b6:
                    a1:c6:56:dc:8c:f6:b0:87:2d:b7:67:a8:fc:48:4f:
                    7b:90:e2:61:45:36:77:48:e1:6b:a8:ab:82:2c:f1:
                    65:99:05:64:90:f1:4d:96:d3:f3:d4:8f:92:0d:24:
                    28:35:25:6e:21:d9:b7:dd:33:dd:8c:54:56:2a:de:
                    97:f5:87:36:e4:68:dd:c6:31:65:72:5c:4e:58:d9:
                    4b:7a:25:5b:d4:a7:70:e0:84:a8:07:2b:10:d4:be:
                    55:3d:50:b4:64:9e:6c:40:ef:bb:b7:50:a4:33:ae:
                    b1:c8:21:e0:15:c5:2a:d7:52:8c:45:8e:94:e2:3c:
                    fd:1c:bb:16:bd:09:72:c8:a4:1a:1a:f7:47:7f:44:
                    29:59:fa:fc:d1:40:3a:7f:23:6a:94:2d:c1:36:a5:
                    37:77:c1:b5:0a:c4:fb:a4:15:66:4a:ad:b8:3f:fc:
                    be:76:a2:25:e0:1b:63:b9:3f:3d:5e:d5:8a:e1:8e:
                    c3:27:ee:44:9a:6d:15:3f:27:2e:2e:04:a0:e3:a5:
                    bb:5d:5a:8a:d2:5f:59:7a:d5:bb:4a:5a:39:e4:7b:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/36904f0e1d851da537ad771f7dc44fa5a2018601.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.112.0/21
                IPv6:
                  2803:eaa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52283

    Signature Algorithm: sha256WithRSAEncryption
         c3:27:df:66:66:86:b3:19:b3:18:aa:33:e1:eb:78:9a:0a:dc:
         4e:37:2a:f4:dc:8a:bb:78:dc:11:84:f2:5d:b2:8c:6b:e9:84:
         4f:b8:82:13:fe:64:2b:75:85:9f:ee:cc:2e:74:c4:02:a9:5f:
         38:0f:b4:05:fc:bd:cb:17:1f:a6:4c:fa:cf:60:32:dc:d7:31:
         bd:7e:8c:44:ee:df:1e:c2:9c:62:ce:c5:f7:4e:12:66:86:f8:
         38:94:3b:a4:62:46:8a:44:c0:a0:4c:0a:ae:6e:17:78:f2:44:
         b2:48:7b:d5:71:1a:a2:e5:ea:2b:cc:e8:ce:cb:08:05:eb:b7:
         44:8d:10:ac:5b:b9:c3:28:c2:a5:34:ed:1f:54:dd:58:8a:4a:
         45:11:c6:f3:e6:88:66:89:4c:02:cc:1c:cf:5f:37:a6:06:9d:
         d5:70:52:bb:65:f6:99:f2:e1:2b:92:83:1a:3c:c8:1d:fd:65:
         47:91:41:db:97:c6:b3:80:69:f7:87:f9:13:d3:b2:cd:5e:3d:
         25:d2:eb:ce:c3:72:fe:a9:93:2c:d6:a3:e3:aa:fb:b2:33:44:
         f2:dd:d0:e2:73:7f:a7:14:23:32:0d:d1:0c:91:3c:f5:e8:f4:
         20:e3:5b:ec:00:b8:1f:c9:30:82:33:0b:74:cb:58:fe:25:07:
         21:1e:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----