Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4595a58b3a4feac2e2f273ac67d4559442b976dc.cer
File:                     4595a58b3a4feac2e2f273ac67d4559442b976dc.cer (raw, json)
Hash identifier:          DyMn9IjR+H3a0lZvrsrGOWUZ2En8hLtzxBhEKAwBh0M=
Subject key identifier:   84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFAAF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Sat 30 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 27876
                          IP: 186.5.160.0/20
                          IP: 190.7.192.0/19
                          IP: 2800:f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16755444 (0xffaaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Nov 30 14:00:00 2024 GMT
        Subject: CN=4595a58b3a4feac2e2f273ac67d4559442b976dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:19:fe:31:9a:b7:17:c9:f3:68:fd:3e:a3:
                    55:19:10:be:85:c3:1d:61:8c:7e:7b:9a:c1:5c:6f:
                    fb:d8:15:ec:5b:53:e4:a6:e9:c5:b6:d4:85:2b:97:
                    1d:ce:5a:e1:39:c6:c6:48:1c:26:2b:a6:9b:7e:6d:
                    6a:a3:64:08:b4:9f:8c:61:5a:18:2b:70:02:10:57:
                    e2:8e:21:d1:ab:35:95:ce:e6:97:c1:09:8b:74:8b:
                    bb:28:fa:a2:d9:b0:61:fd:73:71:32:68:c5:e5:5b:
                    80:b3:8a:8d:ae:8e:0f:aa:eb:bf:84:b5:96:57:4f:
                    5d:c0:42:4c:aa:94:70:b0:10:4c:db:82:c1:51:00:
                    db:f3:8f:a2:6d:26:88:69:67:28:2e:10:05:3a:f6:
                    14:5e:41:0e:63:07:4d:91:9d:d6:cc:fd:98:ab:62:
                    d9:84:8b:21:78:33:a1:2f:d3:b3:da:a8:62:14:6a:
                    8e:0c:c2:db:85:49:40:ef:29:0b:50:2c:77:55:47:
                    b8:60:e7:85:0e:a4:6d:8a:4b:61:7b:5d:a0:7a:bf:
                    83:62:fa:8f:06:78:8d:89:81:d4:62:db:84:49:e8:
                    77:c9:a8:0e:a2:fa:76:6f:99:3b:c1:de:bf:d8:11:
                    db:06:61:1e:40:fd:bf:bb:10:96:3b:c8:fd:84:d7:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.160.0/20
                  190.7.192.0/19
                IPv6:
                  2800:f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27876

    Signature Algorithm: sha256WithRSAEncryption
         ae:d2:6e:59:0c:8b:b3:87:21:ee:66:46:4a:19:bb:ad:5f:85:
         9b:a4:64:a6:4f:7e:4b:17:f9:f0:57:ec:8e:f4:22:08:76:a2:
         89:12:6f:a6:9b:ef:9c:15:d1:f7:3b:19:0f:96:69:61:83:5f:
         f2:52:0b:0e:ac:a7:18:e3:95:1d:bb:c7:b4:61:b2:f2:e1:c0:
         cf:1b:b4:74:05:e7:a5:df:4f:d7:8f:e4:6a:25:a9:8b:3a:a5:
         4b:04:35:2a:84:d3:3b:9b:ce:c5:c0:69:a7:70:99:d4:b0:51:
         7a:90:a7:3f:8c:5a:67:85:7d:a8:19:ab:64:f0:8b:82:e3:85:
         29:eb:06:43:46:65:98:aa:f8:aa:3a:41:21:8b:61:a7:fe:03:
         b6:fe:7d:f8:85:28:5f:e4:f9:42:3b:ab:b0:e7:b0:0b:20:2e:
         77:a9:c0:78:48:98:8d:89:66:4d:2a:0c:68:50:85:38:ad:8d:
         ef:87:2e:b2:52:c5:4c:31:f1:9d:94:4c:6c:02:ba:9e:a9:d5:
         0c:05:db:46:fd:4a:c4:6a:b5:0e:33:82:0f:a2:fe:e1:c2:fd:
         f0:90:2b:25:2c:6f:43:3c:34:ca:59:b7:ca:23:de:b0:e5:db:
         c8:c6:be:59:7c:49:8a:d6:3a:16:9d:fe:fb:ee:3b:03:01:1a:
         8e:44:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----