Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer
File:                     be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer (raw, json)
Hash identifier:          WkJLjnJ5XOhbf7LzrZlqC63VkxdKVIGZz4mmqbVsCSQ=
Subject key identifier:   D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7632E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/be13c6d545795fa349d0c42f37ac051a6f4f88b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Aug 2020 02:30:29 +0000
Certificate not after:    Sun 17 Dec 2023 15:25:14 +0000
Subordinate resources:    AS: 269940
                          IP: 190.83.116.0/22
                          IP: 2803:9ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14115630 (0xd7632e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 18 02:30:29 2020 GMT
            Not After : Dec 17 15:25:14 2023 GMT
        Subject: CN=be13c6d545795fa349d0c42f37ac051a6f4f88b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:b1:92:2a:32:59:f3:64:85:da:74:e7:ed:
                    99:32:43:4a:60:5a:b2:8e:e5:b3:ed:0d:d0:4e:72:
                    46:9f:d6:f6:d6:74:d0:34:85:40:89:11:54:c1:bb:
                    6c:c9:7b:af:db:4c:0a:17:e3:5a:f3:38:e1:d2:2c:
                    ff:2a:de:a3:53:a9:aa:7b:16:e2:db:ef:6e:7b:d0:
                    45:df:f4:a1:75:8f:f8:31:b9:36:5d:e2:ed:68:bc:
                    ac:df:a6:ce:37:e3:ca:92:b2:3e:17:5c:be:2b:b4:
                    47:e4:05:a0:6c:72:9c:19:8b:1f:df:b0:c8:c4:8c:
                    5f:2c:63:3e:10:e6:43:01:04:d9:ad:34:bf:56:2c:
                    ff:8e:50:d5:fb:20:29:56:66:e7:fd:72:03:78:5d:
                    c2:e3:f9:0b:2a:82:28:b0:3f:e7:11:c7:19:e2:50:
                    b6:15:e0:0d:03:77:6d:59:ad:e1:fe:d2:09:36:58:
                    44:a6:8b:7c:be:19:71:94:40:9b:ab:b8:63:16:ad:
                    32:6a:31:2c:19:f4:68:43:8d:02:4a:04:2f:e4:17:
                    74:d6:31:87:46:fc:2a:95:32:10:7b:42:38:f0:66:
                    2d:f2:94:26:73:cf:f0:3f:c7:fc:cc:5e:5c:9f:62:
                    2f:2d:79:bf:11:3f:92:08:d7:75:55:32:30:8e:54:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/be13c6d545795fa349d0c42f37ac051a6f4f88b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.116.0/22
                IPv6:
                  2803:9ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269940

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:07:70:19:d4:fd:49:53:f8:34:f8:02:4b:fa:b7:a9:85:
         b8:ba:a6:a9:93:49:da:11:da:4a:3a:6a:f8:6e:60:e3:89:fe:
         f6:dd:0c:4b:c1:b5:9d:40:bf:63:48:ab:21:f3:fd:80:7e:f5:
         1e:55:64:e4:c4:61:f8:bd:b2:87:35:8d:7f:6c:6c:93:59:46:
         8e:ff:9f:90:ec:91:3b:5d:07:69:e4:83:1c:d2:26:4d:96:5d:
         47:c7:41:01:2d:e2:ef:c5:ab:f0:a7:b2:87:f0:50:4c:9f:4b:
         cc:a4:e7:79:c5:bf:2e:da:99:c5:95:9c:8b:d1:b7:cd:4c:1f:
         27:19:bd:e9:e1:2b:4b:6e:36:b4:b2:1a:63:7e:c9:ba:e3:e4:
         2c:68:a4:34:83:af:a4:33:3d:c0:b0:6f:72:ca:b8:79:b6:34:
         99:86:91:02:9a:33:ff:d5:a5:79:9e:a5:b4:ae:94:2e:81:b5:
         7c:c5:52:44:d7:96:4a:a4:19:74:3e:78:70:14:b7:eb:c0:6a:
         eb:33:c2:80:fd:f3:ca:42:34:ea:ab:df:a3:89:14:28:4d:e3:
         7d:26:19:3f:3c:8c:e8:6a:bb:db:29:5c:80:49:e9:96:85:5e:
         eb:3d:4a:6f:24:65:62:72:44:65:ec:fc:e9:c8:a6:dd:05:01:
         7a:e0:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----