Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85e85fffe1bb0f5142940fd2d5236a44837f75e.cer
File:                     f85e85fffe1bb0f5142940fd2d5236a44837f75e.cer (raw, json)
Hash identifier:          Zwd5jQy+GjcdFBO/5hEqUCCfj49Yh9yyY6nQR09qJVE=
Subject key identifier:   41:D9:83:D2:5D:0E:F5:5D:33:BA:D7:D6:87:1A:97:CE:57:3F:7C:CE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       90F29D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/f85e85fffe1bb0f5142940fd2d5236a44837f75e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jun 2020 15:36:20 +0000
Certificate not after:    Mon 19 Dec 2022 19:04:02 +0000
Subordinate resources:    AS: 269948
                          IP: 190.3.164.0/22
                          IP: 2803:7ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9499293 (0x90f29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 15:36:20 2020 GMT
            Not After : Dec 19 19:04:02 2022 GMT
        Subject: CN=f85e85fffe1bb0f5142940fd2d5236a44837f75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:3a:be:dd:6d:7e:a9:ac:d0:fd:eb:96:9c:
                    a1:76:95:2b:66:7e:aa:45:06:66:60:aa:74:80:a1:
                    6a:a6:7a:62:36:b8:9e:33:c9:07:90:40:da:8e:c5:
                    c1:e6:9d:0b:d4:80:80:6c:da:95:ce:8b:03:6d:04:
                    a2:ba:92:4b:2e:c2:67:80:fd:83:71:a6:81:e6:da:
                    1b:90:ed:ea:79:b9:46:c9:9b:f9:ef:5b:89:58:b2:
                    0d:e7:94:27:b5:b1:18:94:59:8d:7c:4f:84:ec:0e:
                    8d:a7:3f:80:82:f5:50:9b:e0:c0:75:49:3c:2c:5a:
                    66:bd:61:53:14:17:44:b5:28:28:0f:ba:5d:81:75:
                    5e:1c:fc:41:28:40:df:9f:9d:01:af:19:ac:49:2f:
                    cb:0a:31:10:cd:42:6f:0f:4e:40:1a:ad:3a:4d:fc:
                    ee:6b:b8:f1:47:ab:1f:0b:41:e1:36:08:fe:5e:c2:
                    82:05:af:e2:3f:60:23:55:df:d0:14:cc:11:b9:c4:
                    70:03:d9:4a:a6:8d:3b:20:ad:4a:10:f6:03:f4:7c:
                    aa:53:00:b3:78:00:c8:02:85:15:10:7d:85:16:17:
                    0f:03:37:b2:ba:a0:3d:2a:ce:39:6f:73:4a:ee:e1:
                    9d:1b:ae:72:ed:d8:e4:34:12:9c:02:da:4e:91:93:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:83:D2:5D:0E:F5:5D:33:BA:D7:D6:87:1A:97:CE:57:3F:7C:CE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/f85e85fffe1bb0f5142940fd2d5236a44837f75e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.164.0/22
                IPv6:
                  2803:7ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269948

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:3f:cb:7a:f1:2c:c0:93:75:b0:1e:9d:70:0d:8f:ac:6b:
         c9:ca:b1:0a:17:bb:a0:cd:7f:cf:d6:f2:4a:fa:4e:d0:65:94:
         3d:5b:0d:64:59:4d:58:71:e3:09:52:da:a4:37:f1:7c:28:82:
         3b:a6:ad:4e:5a:da:74:b5:c5:88:9f:b5:eb:b1:cf:30:fd:97:
         ab:2e:98:9c:db:e4:94:f1:33:c4:2e:cb:b8:55:c3:93:67:d2:
         07:12:0c:a0:c5:72:fa:8b:25:72:0f:c4:81:4a:bf:f5:69:af:
         b2:9d:08:0e:33:aa:4f:2c:fd:a2:26:19:a7:e4:a0:02:04:c0:
         07:32:b9:fa:c4:31:8e:a3:fb:0a:3b:c1:7b:3f:1a:c4:11:af:
         2d:41:43:55:e5:ca:89:a6:71:59:c4:9c:9c:a6:fe:fb:c7:34:
         18:64:c5:56:ba:d1:44:90:fc:99:70:3a:c8:d4:ba:49:e4:f1:
         4c:a2:0a:47:60:40:56:78:ff:7b:5e:98:a2:89:46:96:76:ee:
         80:95:c6:73:f6:79:0b:7c:2a:52:23:6b:7e:9e:01:9c:03:6c:
         10:c8:d2:0d:c3:8f:5b:c6:ca:fb:fa:59:dc:21:90:ca:18:d8:
         88:16:ed:3f:e7:b3:e2:c8:cc:99:e2:44:c4:47:5d:99:0e:32:
         47:6e:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----