Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b1a2c06554c00ab825464899ef9dd4872af08b.cer
File:                     85b1a2c06554c00ab825464899ef9dd4872af08b.cer (raw, json)
Hash identifier:          zxw2+0WFF5zjPcNYHtZnFcCF8sdE4MYefyVygZFNc1k=
Subject key identifier:   6E:60:33:BC:7F:C8:28:80:64:6E:60:C6:9C:17:03:97:74:3F:EB:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E689F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d93e62f-f319-4da0-89f0-1030eb1ea4f0/85b1a2c06554c00ab825464899ef9dd4872af08b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d93e62f-f319-4da0-89f0-1030eb1ea4f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 May 2022 13:43:49 +0000
Certificate not after:    Tue 21 May 2024 14:47:47 +0000
Subordinate resources:    AS: 271943
                          IP: 200.215.232.0/22
                          IP: 2803:a610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15108599 (0xe689f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 13 13:43:49 2022 GMT
            Not After : May 21 14:47:47 2024 GMT
        Subject: CN=85b1a2c06554c00ab825464899ef9dd4872af08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:a5:c0:0e:62:98:c9:b1:bc:b2:ba:d6:69:
                    c6:1b:04:b4:8c:c5:68:3d:6f:22:59:a4:4a:6e:b4:
                    1e:b4:4c:b5:99:ac:6c:88:d0:26:9d:25:4d:97:ca:
                    12:3f:e0:38:1a:d2:ec:56:8b:1a:66:dd:42:5f:c6:
                    99:45:78:f1:b8:34:30:f2:51:de:d9:5e:d6:b8:15:
                    5a:d5:2b:3d:39:64:aa:73:7d:e5:22:76:85:a1:2f:
                    13:44:95:7e:59:5d:7f:b2:68:70:52:0b:e7:f0:60:
                    12:97:f6:1e:b7:59:47:3e:0c:52:b7:fc:39:59:fa:
                    c1:32:8f:3e:62:b2:8d:5f:2c:2c:2e:81:bd:0c:56:
                    19:c6:52:b0:e4:a7:c7:30:23:f1:8e:69:d0:21:2f:
                    4e:65:e8:0d:c9:9f:14:69:6e:0e:a1:d3:38:32:4b:
                    2d:a0:83:8f:d4:0d:ce:f4:17:1d:94:74:02:38:8e:
                    5b:1c:3c:d3:2d:16:67:6e:52:d8:d3:da:8e:0f:b4:
                    f8:ab:fe:82:5b:a3:a9:91:9c:f9:48:a0:eb:97:dd:
                    a9:d8:89:6c:c1:b5:3d:cf:cc:c8:5d:6d:c6:39:38:
                    78:f4:80:e3:80:31:af:12:97:a4:0c:2c:93:f2:86:
                    f8:a0:8e:09:47:53:b4:9c:bc:c9:c4:95:a7:6b:19:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:60:33:BC:7F:C8:28:80:64:6E:60:C6:9C:17:03:97:74:3F:EB:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d93e62f-f319-4da0-89f0-1030eb1ea4f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d93e62f-f319-4da0-89f0-1030eb1ea4f0/85b1a2c06554c00ab825464899ef9dd4872af08b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.232.0/22
                IPv6:
                  2803:a610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271943

    Signature Algorithm: sha256WithRSAEncryption
         92:b6:62:67:8b:d5:ad:ab:b0:c7:64:6a:8a:3c:38:51:fb:20:
         91:04:f4:b4:5b:b1:cd:88:93:71:ae:75:4e:e2:60:61:9c:4b:
         e9:33:69:e0:96:f4:2f:2d:d9:cf:d2:83:26:e5:70:4d:07:5b:
         6d:4f:09:41:79:2b:78:b0:31:8d:5c:ed:7d:10:80:0b:24:28:
         7b:d3:af:07:bd:0a:38:fc:22:14:4e:87:97:88:77:2b:f8:2d:
         41:09:4e:01:31:34:49:6d:39:c3:19:cb:12:42:25:b9:38:46:
         88:30:84:4e:27:33:62:02:1e:8a:9a:8a:91:7a:b8:2d:d2:e8:
         f1:26:23:25:f4:ca:77:d0:77:73:ff:e4:e9:47:80:be:bc:91:
         70:3e:a9:91:ea:d6:f3:55:5f:ad:09:71:ac:57:b1:9b:63:1b:
         3f:97:c7:55:34:bd:bb:ce:bf:4e:b0:5c:0b:8e:22:9d:b7:77:
         12:e3:cc:91:23:f5:68:7d:76:f7:89:b9:e8:a1:38:39:8b:5e:
         91:5c:5e:1a:2c:dc:39:37:e6:e6:a0:28:b1:b2:ff:23:18:35:
         61:78:82:38:ff:fb:84:d2:ea:74:85:9b:e6:62:17:a8:30:e1:
         a3:2c:be:71:6b:c8:4a:b0:57:f5:05:04:6f:38:00:76:4a:46:
         4a:0b:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----