Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
File:                     3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer (raw, json)
Hash identifier:          L2PGyhzvAg1AVbXbK1UuzhOgY8hnhUC8fLon394bh0k=
Subject key identifier:   FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104A715
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Wed 22 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 10617
                          IP: 200.69.32.0/19
                          IP: 200.81.160.0/19
                          IP: 2803:6380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17082133 (0x104a715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Jan 22 05:00:00 2025 GMT
        Subject: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:6e:e7:24:7c:0d:2d:56:b5:c4:42:89:2a:
                    bc:ef:66:28:8c:9f:1d:58:66:52:a6:f0:b7:9f:3a:
                    c7:7d:33:bd:b5:b5:8d:d3:f9:42:8d:3b:a5:27:7e:
                    ef:6b:c6:85:2b:89:a1:7d:23:40:fa:af:e7:d6:fd:
                    6b:13:21:04:d0:85:2e:14:f4:f8:43:da:25:a1:f2:
                    15:4a:b5:b2:fe:67:b6:0a:e7:c0:85:50:ae:f4:13:
                    1b:b8:66:ac:62:38:be:b4:72:f2:70:70:cd:bc:56:
                    cc:7c:ed:2d:53:fd:bc:36:c1:a5:45:ea:27:db:15:
                    fc:1f:25:19:86:6b:2b:b8:c8:46:80:8a:9a:6b:db:
                    2b:bd:49:a2:49:71:f8:f0:b4:e4:9a:b2:d2:5b:53:
                    7b:3a:9c:0e:b0:6a:fd:db:fc:c4:b4:54:e9:85:8b:
                    2f:2c:41:37:78:a8:57:e7:ce:30:43:cc:6e:f6:83:
                    10:2a:01:68:aa:81:d5:38:06:fc:83:ad:6d:a6:ff:
                    22:d8:7f:db:f9:6b:22:c8:50:54:aa:62:03:ff:57:
                    56:d7:38:79:ce:9a:a5:a4:03:0c:ec:70:ea:56:08:
                    b8:8f:a3:86:00:cc:dc:50:09:8f:5e:ac:0b:6d:78:
                    9f:f2:8f:f1:82:33:31:07:2a:9c:e1:f4:77:2f:98:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.32.0/19
                  200.81.160.0/19
                IPv6:
                  2803:6380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10617

    Signature Algorithm: sha256WithRSAEncryption
         88:26:3b:26:6f:4d:7f:6d:79:d1:cb:9e:14:80:a7:80:f4:85:
         1a:26:53:c3:93:9c:5d:7d:e5:fc:aa:7e:c1:47:76:34:f6:c2:
         40:43:20:06:c3:4c:9e:1b:a3:dc:54:5e:8b:59:e8:85:10:9f:
         03:b2:99:69:b6:af:c1:cf:eb:0d:7f:f2:09:c8:65:61:95:97:
         8a:df:10:af:8d:66:79:86:af:2f:0a:ce:17:f3:11:8f:8d:71:
         46:0e:ab:17:19:2d:c6:ee:80:49:d0:b0:55:29:41:fc:6e:52:
         9b:d1:94:3c:ea:89:55:e2:f4:54:9f:07:d8:a8:07:e0:3a:9d:
         fc:10:31:60:57:6b:9e:e3:48:5a:8e:8c:d3:2e:88:57:2c:75:
         25:f5:4e:57:a5:c4:80:c9:68:7f:71:ee:6b:1f:d3:e5:26:b2:
         c8:0c:b1:8d:3a:9b:b7:fa:20:e8:f8:45:93:9e:8a:e8:d7:f8:
         58:8f:78:39:ab:61:a7:a6:47:15:83:b2:43:04:03:e5:2e:fa:
         e1:48:30:2f:6c:39:10:66:c2:17:f0:e0:e7:c5:03:1b:e2:11:
         37:cf:ca:41:49:03:6b:57:a2:ea:5e:e6:8e:59:60:11:fd:60:
         84:7f:ec:a0:c0:7c:de:51:7f:8c:64:40:08:0b:ee:b5:8c:d3:
         ec:d9:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----