Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer
File:                     b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer (raw, json)
Hash identifier:          QgVmGx4Gz2MvYtWD7ktHA0nDgHwBIyNSYFHaGcj81IQ=
Subject key identifier:   D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D63599
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Jul 2020 22:49:39 +0000
Certificate not after:    Sat 02 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 263726
                          IP: 138.36.96.0/22
                          IP: 2803:f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14038425 (0xd63599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 22 22:49:39 2020 GMT
            Not After : Dec  2 04:00:00 2023 GMT
        Subject: CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d9:a3:6e:8d:47:12:f4:31:96:96:b0:6d:38:
                    28:7a:76:36:e1:5d:50:c0:07:eb:70:79:ac:9f:a3:
                    2a:5d:20:2c:12:4f:23:97:c8:f4:7e:80:2e:e9:80:
                    6b:da:cc:f3:56:06:31:35:e6:5b:59:dd:3c:e0:83:
                    fd:a7:e4:6d:bd:a3:54:5e:0b:c0:ff:24:2c:dc:99:
                    b4:c5:0f:7f:62:43:ec:72:d9:9d:21:ad:ba:de:7c:
                    6d:c4:13:e6:03:28:a8:49:b7:d4:6b:c7:28:6c:9f:
                    b9:ac:b1:ca:59:d1:70:0c:8b:50:d4:7e:79:ce:b8:
                    9e:38:54:c4:e3:42:fe:d9:a0:0a:cc:7c:8c:57:85:
                    25:6a:07:d6:85:79:74:ea:de:70:49:b1:39:27:06:
                    16:dd:5a:7f:fc:b1:1b:cd:90:1d:ae:86:0a:be:a6:
                    a1:a9:1f:00:78:fc:48:c7:40:7c:4f:8a:7b:eb:08:
                    17:da:7a:7c:a2:68:ce:46:8d:8c:e1:31:e3:9a:82:
                    70:16:fb:49:24:3d:b6:d3:29:fb:22:00:bc:79:5d:
                    38:19:26:30:61:a2:a4:1c:66:02:87:54:6b:b5:f5:
                    95:37:28:54:92:fe:1e:87:27:ef:14:6e:28:d2:c4:
                    aa:79:97:a6:64:7a:d7:3d:02:c0:17:34:fc:a4:b4:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.96.0/22
                IPv6:
                  2803:f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263726

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:99:66:e5:de:91:56:6f:0a:3a:28:38:8d:fb:09:0b:29:
         ef:42:1f:2d:2b:52:aa:85:33:49:4a:bb:ca:13:25:cb:ab:b1:
         89:2c:95:18:1c:dc:3e:2b:8e:60:6d:01:86:b3:ce:04:f9:ab:
         95:04:90:fd:42:a4:20:6a:90:b3:4f:dc:d1:bf:e7:96:ab:cd:
         c1:c9:d9:af:96:b5:58:d7:d4:86:ad:96:60:e2:11:ac:03:1d:
         22:15:47:85:59:5d:33:02:94:d5:da:f2:64:e6:e4:69:33:29:
         66:6d:ef:c7:ff:66:d5:f9:05:51:b1:e0:e6:aa:e1:7e:93:06:
         d8:44:73:b7:46:c8:1e:f1:e0:83:9f:7a:22:6f:01:af:ad:e2:
         c6:ac:d8:3c:94:82:44:e9:e4:98:27:0a:7e:bc:23:e5:7f:8a:
         59:be:ad:15:d6:5b:c1:a0:14:38:7b:b1:e2:b7:42:be:ef:dc:
         d8:78:2b:b3:52:b4:e2:63:26:83:49:9e:27:c1:6e:9c:6b:83:
         6e:c5:4c:de:1d:37:db:fc:1b:c4:d0:39:64:20:e6:52:34:1f:
         6d:6b:a3:23:fa:f4:c7:54:28:bd:b6:4b:81:9d:9a:e3:b2:5f:
         fa:50:3c:d2:32:e7:de:fb:8c:40:bf:b5:0a:65:55:ba:21:fa:
         ea:a4:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----