Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.cer
File:                     bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.cer (raw, json)
Hash identifier:          7OruF23ZoKb906u83y6Hkwfw8oJ1k+zVfmcPiGx5HEo=
Subject key identifier:   A6:6D:25:3C:C4:3D:4A:E2:44:5F:E1:4F:83:80:57:18:4A:2F:58:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F89103
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Dec 2020 14:44:49 +0000
Certificate not after:    Mon 07 Oct 2024 23:14:15 +0000
Subordinate resources:    AS: 266666
                          IP: 45.228.152.0/22
                          IP: 2801:19:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16290051 (0xf89103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 10 14:44:49 2020 GMT
            Not After : Oct  7 23:14:15 2024 GMT
        Subject: CN=bbdd6c4e4e9a9fd0809152b7f9941fed54e17488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:4b:b2:be:1d:12:57:de:c4:55:49:e5:1a:
                    99:49:a1:94:bb:37:8a:cf:cd:2d:cb:2d:ed:53:87:
                    fe:5e:e9:1c:60:ee:0a:a5:67:20:42:89:93:91:8a:
                    17:3a:3f:cc:c5:d0:83:92:2d:5b:a3:0f:ae:b1:c3:
                    aa:ac:d4:87:89:c1:15:76:80:53:f8:65:27:d1:5f:
                    8d:81:f9:29:5d:5d:5c:2d:45:57:10:1c:40:5e:87:
                    06:d2:d0:ba:36:f9:50:0f:4b:24:7b:73:0f:36:13:
                    f4:a7:46:bd:8a:d0:2f:1a:21:59:cf:60:6a:f4:51:
                    60:f0:45:d6:f9:dd:e9:d1:74:22:6c:d2:1b:50:51:
                    27:34:5f:47:5e:e9:69:33:93:b5:b8:90:b2:44:ab:
                    ce:e7:a7:db:38:5f:c1:e4:e8:4d:f8:57:b3:3b:fd:
                    c2:da:db:9f:a8:22:44:f3:d5:ff:41:33:3f:4d:bf:
                    d8:50:66:fc:46:e9:00:33:71:75:ac:5d:8f:86:53:
                    6c:6e:0a:95:83:21:86:a1:87:2d:77:0b:e7:88:a4:
                    10:b6:49:ac:37:77:34:b3:03:a8:a3:9b:bf:5d:e3:
                    8f:4c:0e:29:6f:af:f5:0f:04:be:ec:d3:70:84:8c:
                    31:b7:80:36:7f:07:b0:af:46:0e:7f:80:38:7e:bf:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6D:25:3C:C4:3D:4A:E2:44:5F:E1:4F:83:80:57:18:4A:2F:58:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.152.0/22
                IPv6:
                  2801:19:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266666

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:c7:46:3e:88:b8:9b:39:27:49:8d:d8:86:87:cf:6d:82:
         95:c9:50:2b:14:e6:be:45:30:87:7f:4e:f1:1e:38:1e:81:07:
         86:08:1c:15:bd:da:b4:2f:e4:6a:b7:74:97:9e:0d:ec:21:56:
         0f:8b:5d:04:6b:db:e9:ff:4e:c6:d3:4b:8a:8e:c6:0a:23:26:
         e8:70:2b:92:6f:9e:d7:1d:3b:fc:ce:35:93:cc:da:47:8d:37:
         75:4d:cd:28:43:5b:7b:30:b3:f5:05:34:f0:f5:99:f7:70:61:
         84:a9:d3:56:2d:e9:57:5e:8a:67:d8:7d:07:5c:6b:22:ee:3e:
         d5:53:17:b4:fc:44:8f:84:25:0c:75:bd:01:65:ad:71:23:83:
         de:29:10:54:ce:f0:64:dc:4a:0f:cc:26:5d:4a:84:7c:56:98:
         fb:ad:0e:5c:c4:cd:8e:6f:23:1b:33:44:86:bc:dc:07:f5:07:
         55:e5:0f:6d:15:8a:b9:9e:43:c7:3e:af:bc:60:7a:bb:9f:20:
         e6:1f:2b:32:65:df:64:3f:cf:57:8a:16:bb:49:ed:6f:23:14:
         be:bf:7d:3c:84:89:63:c8:b3:09:86:c2:fd:8a:af:c0:c6:f1:
         3b:54:0e:92:46:84:65:1a:3c:36:72:ab:a4:01:a7:65:81:9d:
         33:7b:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----