Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.cer
File:                     86e766e07cf0cd3dfd57b2a4acd47666d35711b6.cer (raw, json)
Hash identifier:          Ib9HYjFQQCw9yT9vC0I08S8tIKJxIkuogdtXx2VUdcM=
Subject key identifier:   88:17:E3:63:3B:91:B1:21:50:2E:54:71:20:ED:AA:8C:67:83:20:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5E145
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Nov 2021 18:39:12 +0000
Certificate not after:    Thu 19 Sep 2024 16:51:39 +0000
Subordinate resources:    AS: 263192
                          IP: 131.108.192.0/22
                          IP: 181.174.160.0/22
                          IP: 2803:c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16113989 (0xf5e145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 18:39:12 2021 GMT
            Not After : Sep 19 16:51:39 2024 GMT
        Subject: CN=86e766e07cf0cd3dfd57b2a4acd47666d35711b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:67:7e:ca:d7:cf:89:c6:f7:37:74:c7:b8:
                    2f:ef:16:c3:a9:1a:21:8b:f3:4b:e0:bd:66:52:b6:
                    a5:63:56:b9:de:2b:90:75:45:c5:d6:6e:f7:76:5a:
                    e6:93:3c:51:73:c6:be:7c:2c:01:71:0a:d0:06:ec:
                    9e:12:54:46:77:96:45:9b:a9:2a:df:b4:45:a8:ba:
                    57:0c:9d:1a:44:eb:93:a5:87:f6:01:8e:b5:84:2f:
                    27:b0:4f:6b:bf:0e:b5:07:ae:0a:3c:a9:43:1f:90:
                    be:3a:3b:64:55:37:1b:5f:97:4c:3e:d9:98:ea:d4:
                    5d:4e:7a:e8:9e:34:c8:49:a8:64:02:f2:75:c0:c2:
                    d1:19:e5:72:14:68:2e:6e:b0:19:78:9f:51:0c:ef:
                    4a:8f:56:f9:6e:62:0a:cf:a9:cc:79:b5:56:45:d3:
                    b7:8a:b1:e8:b9:ae:c0:d4:55:b0:27:4f:a2:8f:be:
                    21:d6:2d:fe:5a:36:e9:3f:69:82:1b:0f:96:76:28:
                    53:fc:c3:d8:cc:e7:29:8e:60:71:37:36:2f:72:26:
                    28:a7:93:ba:f3:a5:d4:46:74:1e:d5:d8:0e:8f:ef:
                    98:ee:78:bd:3f:69:79:ce:9d:66:a5:b9:ed:d6:85:
                    8d:34:e7:fe:f9:7b:cc:e1:c7:8b:a3:2a:12:a9:22:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:17:E3:63:3B:91:B1:21:50:2E:54:71:20:ED:AA:8C:67:83:20:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.192.0/22
                  181.174.160.0/22
                IPv6:
                  2803:c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263192

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:be:da:83:bd:44:8d:6e:30:88:de:5b:51:d9:e4:38:05:
         4f:9a:38:d3:24:5e:e8:38:6c:93:c3:50:bc:ae:9f:53:82:c4:
         26:01:03:37:ac:53:52:d6:e8:45:d8:64:4d:bd:90:c8:2b:65:
         66:68:02:0a:73:d6:16:b7:0b:ce:f5:62:7c:4e:a2:d3:4b:10:
         55:cc:2f:d6:98:53:82:7a:7a:6a:23:84:dc:02:4c:03:21:23:
         0a:87:91:dd:59:94:c6:94:99:58:1c:4c:73:06:31:10:2d:82:
         aa:d9:58:77:78:f1:c2:07:12:3a:d0:75:6d:c4:6e:a6:4a:7c:
         28:82:8b:37:2d:14:e8:47:bb:33:e8:a4:e7:58:73:84:da:5a:
         37:ad:de:3c:6b:fc:d4:de:76:5f:55:5c:07:23:b8:55:81:1c:
         a9:cb:29:6b:87:eb:7c:59:5a:ab:9f:8a:d1:7b:30:39:8a:1e:
         ef:b1:c1:35:49:3b:73:6b:39:ac:44:e7:59:17:f5:a3:01:9f:
         e2:2c:97:05:f7:5b:23:08:ab:2c:b9:fd:00:ec:57:2c:54:ba:
         ec:5d:ca:4e:b2:3f:48:e1:f5:e2:8a:07:2c:93:93:50:a6:87:
         b0:2a:eb:8b:39:0c:4a:eb:10:b2:b5:40:73:98:b4:a5:3e:12:
         dd:69:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----