Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6aec1e3a9102baedb85d261f29b6ba51c5736b5.cer
File:                     b6aec1e3a9102baedb85d261f29b6ba51c5736b5.cer (raw, json)
Hash identifier:          jaehsnmmWvCyN+4AZ5qv7qNoCYnQsgghLhjoi2nRwWk=
Subject key identifier:   8A:79:4E:6E:E5:AE:75:F3:22:ED:8B:9B:B0:7C:A4:10:5F:8E:0D:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED8BFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/b6aec1e3a9102baedb85d261f29b6ba51c5736b5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Oct 2020 23:41:47 +0000
Certificate not after:    Sat 13 Jul 2024 20:46:31 +0000
Subordinate resources:    AS: 264774
                          IP: 168.197.200.0/22
                          IP: 2803:8c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15567871 (0xed8bff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  2 23:41:47 2020 GMT
            Not After : Jul 13 20:46:31 2024 GMT
        Subject: CN=b6aec1e3a9102baedb85d261f29b6ba51c5736b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:70:16:89:6d:eb:0c:2c:4b:fe:2e:6b:43:
                    a7:70:a3:f3:6c:6b:87:90:04:bb:0a:a0:90:30:ae:
                    8b:5f:41:98:e1:b2:a6:ea:5e:77:ad:6e:57:34:d6:
                    8c:c1:be:e4:14:dc:83:78:ea:f0:9c:e9:eb:b2:68:
                    53:d6:dc:a8:f7:c5:5a:d7:56:69:0e:b5:c6:92:d0:
                    64:c8:be:03:28:7c:72:68:38:61:b6:3a:c9:f8:38:
                    f5:b9:ed:1a:51:a9:5c:71:aa:8c:e7:5e:dc:6d:ba:
                    fb:13:17:2a:79:da:08:fe:58:1f:28:35:d6:7f:d0:
                    4b:89:f0:63:3b:d9:71:81:67:0e:0b:dd:a5:89:0b:
                    6a:e6:94:57:19:d6:74:14:ea:b7:6c:43:76:d0:61:
                    87:67:bb:3f:fb:62:43:7d:45:86:65:f0:a2:35:49:
                    89:d1:3a:a9:b0:00:9b:6f:48:e4:64:8c:f1:a3:c7:
                    8a:f2:d7:8e:53:43:48:e5:4a:9f:ec:4f:47:f3:e8:
                    83:f0:2b:27:0c:70:c3:92:6b:c5:72:29:bf:c1:4d:
                    f3:7a:3d:7b:8e:5f:ba:5d:75:f7:e3:11:33:23:e3:
                    bb:51:a4:0d:07:ae:ed:bd:24:b5:f4:56:7b:46:a2:
                    ed:cc:ad:90:b4:cc:d1:69:3f:d2:46:7f:f9:2e:1d:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:79:4E:6E:E5:AE:75:F3:22:ED:8B:9B:B0:7C:A4:10:5F:8E:0D:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/b6aec1e3a9102baedb85d261f29b6ba51c5736b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.200.0/22
                IPv6:
                  2803:8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264774

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:26:6e:22:1f:8c:64:20:19:ac:81:05:bc:3a:8a:51:98:
         89:1e:a6:6d:3d:22:0c:b2:a4:3f:50:65:99:d7:c0:24:c0:89:
         f4:11:b1:5c:22:6b:c1:bc:91:8f:8c:57:70:d8:da:00:0f:77:
         98:ed:3d:bd:23:e6:9d:9f:c0:05:bf:4b:2e:6e:b6:7f:9b:23:
         57:04:6d:f8:a0:4b:5e:9d:27:f0:26:56:09:a3:53:a0:08:ed:
         80:fc:a1:cd:a9:a6:6f:2f:47:33:4c:15:b0:8b:8f:57:52:fb:
         db:b6:b3:32:3d:e8:13:ba:03:2a:31:1c:85:27:fa:d9:4b:4e:
         c6:2b:86:60:ea:c9:6e:38:dc:22:8b:c8:a3:ce:85:bc:d0:e7:
         f8:fd:74:13:c4:db:8c:4c:1e:6e:1a:bd:46:a1:f9:f7:d7:65:
         f2:00:01:9c:b9:fb:01:df:72:30:01:14:2c:88:c0:4f:fd:99:
         dc:c5:27:85:0b:28:d4:3c:0c:f0:82:a4:f7:55:fc:3d:50:07:
         78:16:3f:1a:6a:c9:e8:de:b3:bc:53:a8:3d:3e:fd:77:21:3c:
         8f:36:70:c3:8f:7d:50:02:0b:27:19:7a:1b:70:2e:22:b2:57:
         e7:11:d3:10:12:57:7b:c6:2e:79:67:ea:e8:85:53:77:4e:f7:
         b4:a5:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----