Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a686f9e4e50232a93f6e6f0abcc713c5f7493c2c.cer
File:                     a686f9e4e50232a93f6e6f0abcc713c5f7493c2c.cer (raw, json)
Hash identifier:          BYH6Wxi9MPs3aFKQR06KeGD3gUmWbn4C4/Ds9z/FXmI=
Subject key identifier:   B6:E3:C9:0F:6D:9D:35:20:B8:B8:BB:01:A5:66:FD:1C:41:92:57:5C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F377E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/71f87ec4-b24a-4732-98fd-2c447aa49ce6/a686f9e4e50232a93f6e6f0abcc713c5f7493c2c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/71f87ec4-b24a-4732-98fd-2c447aa49ce6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 23 Jul 2022 16:27:48 +0000
Certificate not after:    Sat 31 Aug 2024 15:32:35 +0000
Subordinate resources:    AS: 269826
                          IP: 45.186.252.0/22
                          IP: 2803:5760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15955939 (0xf377e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 23 16:27:48 2022 GMT
            Not After : Aug 31 15:32:35 2024 GMT
        Subject: CN=a686f9e4e50232a93f6e6f0abcc713c5f7493c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:42:33:ab:5d:f4:4b:a7:c9:86:bb:80:a4:
                    0a:98:85:9e:54:c2:71:ea:c8:ec:b3:91:c1:0d:49:
                    99:24:2c:37:27:32:1f:eb:f3:bd:24:20:50:6c:44:
                    d3:a5:c6:b5:d9:04:cc:36:bf:9e:99:b0:57:9d:ed:
                    05:c6:8a:bb:d7:f9:d7:fb:34:32:0b:cc:b2:5e:c0:
                    79:68:c2:5d:53:2f:ad:13:bf:16:cb:02:72:e0:11:
                    cc:de:5d:50:d0:f2:17:b1:a7:76:8b:1b:9c:4d:65:
                    d8:34:0f:25:ee:d4:76:cd:4b:23:d7:40:d9:1f:ca:
                    fc:ea:95:d3:2f:03:22:e2:b8:88:c7:c6:67:9f:c2:
                    ea:26:8f:3e:0f:56:8a:0c:02:1c:d3:10:a7:9c:18:
                    9b:8c:27:3c:e5:e8:c7:cb:93:7c:3c:25:cb:e2:ec:
                    f5:91:f5:30:31:af:e6:6a:f7:79:4a:70:7e:a2:d1:
                    22:27:ee:0a:06:bb:ab:a9:99:2a:99:23:cb:ac:7e:
                    98:89:b3:2f:cd:1e:ed:86:d9:8f:c9:11:ff:c4:58:
                    2c:b7:a9:0e:a2:3f:07:d9:8d:45:16:7f:11:b0:10:
                    bd:a3:5e:e1:4d:4c:f2:6a:80:30:47:7e:fa:63:78:
                    03:ae:b4:eb:9d:6f:56:16:1c:e8:47:55:9c:55:60:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:C9:0F:6D:9D:35:20:B8:B8:BB:01:A5:66:FD:1C:41:92:57:5C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/71f87ec4-b24a-4732-98fd-2c447aa49ce6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/71f87ec4-b24a-4732-98fd-2c447aa49ce6/a686f9e4e50232a93f6e6f0abcc713c5f7493c2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.252.0/22
                IPv6:
                  2803:5760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269826

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:28:e9:38:b1:ba:4d:9f:4a:4a:a6:08:a0:2d:47:51:04:
         e6:8d:37:eb:53:2c:70:d1:e9:f5:dc:f8:b1:85:da:94:3f:74:
         55:9b:21:52:9d:73:ab:a7:1f:54:98:5c:60:98:6c:a8:3e:b3:
         2f:f7:81:1d:1d:74:10:ec:0a:4e:fa:94:7e:68:4b:fa:0a:b4:
         f4:45:db:af:23:b0:bd:26:13:09:14:93:79:8f:1c:49:a9:cf:
         9a:2c:65:62:94:e0:1c:69:b4:a3:8e:f7:3d:a7:f5:b1:75:0e:
         92:9b:af:59:eb:a4:2f:2f:43:33:e1:2d:dc:f0:00:ba:82:48:
         71:0b:31:7f:4c:18:28:8b:0a:ec:06:4f:99:67:0c:17:fa:06:
         3a:d9:3c:ef:0b:35:17:5d:10:3e:94:be:5d:09:32:fd:c5:94:
         0d:de:2a:af:db:82:cd:c4:00:5e:f3:b9:6e:03:ba:c5:12:eb:
         f1:04:bd:1d:ac:45:25:d1:c9:58:de:a2:de:31:87:7f:c9:3b:
         e6:8d:d5:01:00:34:a5:a3:e4:ea:14:19:56:ac:6a:20:a9:db:
         52:e7:2b:1a:1d:68:d3:6b:e5:2f:b0:7a:e5:c4:e7:cc:de:ae:
         3b:2d:ca:d7:7f:3c:99:ff:b0:c7:bf:2d:8f:cb:a6:e1:e5:26:
         de:90:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----