Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66e69c168fa853b7832b2beecb03a521b68d2b9.cer
File:                     e66e69c168fa853b7832b2beecb03a521b68d2b9.cer (raw, json)
Hash identifier:          1VWA7Olf8BeQVp5Kg+LM67QpLsyHfj6uhf6bBV7ZySE=
Subject key identifier:   A9:08:95:62:44:68:9C:C6:DB:C3:EA:7C:8E:C9:95:FA:CF:2D:1C:CE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4296D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/e66e69c168fa853b7832b2beecb03a521b68d2b9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Jul 2020 18:10:37 +0000
Certificate not after:    Wed 08 May 2024 15:43:23 +0000
Subordinate resources:    AS: 64126
                          IP: 131.108.236.0/22
                          IP: 2803:6de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14952813 (0xe4296d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  9 18:10:37 2020 GMT
            Not After : May  8 15:43:23 2024 GMT
        Subject: CN=e66e69c168fa853b7832b2beecb03a521b68d2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:99:8f:48:9a:58:06:58:32:b2:1c:82:1b:
                    7b:29:0b:5b:c4:f4:c9:14:dc:06:99:27:24:79:e6:
                    49:cc:dc:c2:96:f3:89:e3:4d:a3:56:64:a4:89:4c:
                    fe:52:6f:80:24:d6:0e:00:54:f1:21:22:a7:7a:e8:
                    4a:43:d4:dd:72:bb:20:f5:2c:0a:39:8f:29:49:70:
                    e0:c9:04:92:9f:c4:4c:3f:20:b5:19:bb:0d:ef:1a:
                    83:c7:0f:3d:ab:05:28:ba:dc:e6:5a:67:07:11:1c:
                    6e:f1:69:02:2f:ba:64:73:6e:50:9d:5e:ca:48:e6:
                    29:a1:69:fa:de:04:6b:a2:01:6f:f4:06:46:97:f4:
                    2d:d1:14:a0:c9:9e:2c:42:ef:30:01:4c:07:d7:8d:
                    75:37:8c:dd:3c:89:ef:e7:00:f9:3e:58:bc:1b:d9:
                    7a:73:f5:c7:1a:aa:a1:c2:63:e0:c6:4b:91:1c:ff:
                    d7:59:eb:88:27:23:c7:bd:5b:db:74:40:cb:05:37:
                    22:d0:d9:73:88:b9:f5:40:ef:c9:7f:6a:d2:32:8d:
                    dd:45:f4:40:2f:67:c8:89:7a:eb:cf:6b:b0:9b:c9:
                    15:44:b5:2e:a9:1e:48:ce:30:0d:77:47:c2:c6:fe:
                    6f:ec:97:a7:68:23:43:1b:8a:3e:a3:c6:ee:f1:28:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:95:62:44:68:9C:C6:DB:C3:EA:7C:8E:C9:95:FA:CF:2D:1C:CE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/e66e69c168fa853b7832b2beecb03a521b68d2b9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.236.0/22
                IPv6:
                  2803:6de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64126

    Signature Algorithm: sha256WithRSAEncryption
         b9:ed:0f:3e:65:ff:af:c5:d9:7d:1d:66:1b:c8:23:f7:4d:44:
         97:dc:83:52:38:7b:19:e9:e2:79:e0:1d:79:66:a8:24:86:c7:
         ad:d8:33:48:1f:cf:8c:6b:93:75:6b:f4:19:44:a9:2d:40:a2:
         8c:41:6e:36:52:8e:41:4a:45:0b:e8:9f:f1:fc:42:04:18:b5:
         07:31:ee:09:d9:ca:a4:26:61:f2:78:e0:36:77:ab:48:db:dd:
         8c:b4:da:44:7a:10:95:07:68:21:1b:20:86:e9:22:eb:f0:d0:
         3b:a5:35:69:7a:bf:03:ae:f9:f7:d1:fd:d6:fd:e6:41:c2:28:
         33:10:58:55:6d:59:f1:aa:a7:1f:ae:c3:23:64:3f:26:88:4a:
         d4:cd:dd:3a:f7:3e:5c:9a:61:55:b5:cd:31:7e:58:f2:36:39:
         44:f0:1d:35:b5:2d:32:04:69:36:8f:8a:ec:82:79:73:42:96:
         9d:28:02:0e:85:8e:df:d1:4e:cc:03:fe:a7:8d:8e:b8:2d:2e:
         62:75:fd:68:83:a8:b6:59:f4:74:b9:e0:3a:cd:26:58:e6:8d:
         42:49:9a:ab:03:0c:2a:b7:48:7f:bf:a9:02:0b:23:00:07:17:
         be:fc:22:6b:5f:b0:37:a4:71:73:ff:ff:9a:cd:76:14:f8:0d:
         b1:ec:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----