Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d5ea8e0edfe63bbd0327a47f5c07919d66bf4a0.cer
File:                     4d5ea8e0edfe63bbd0327a47f5c07919d66bf4a0.cer (raw, json)
Hash identifier:          IZD91UNRJpI4OCaSIEqeEfyQ/vMHXZ9cSwxwPdqk5Ak=
Subject key identifier:   BB:92:8A:60:23:56:62:D1:02:0E:BA:D7:0C:30:00:96:3D:29:C0:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102B9D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d06bf319-05d7-4322-9eb8-9ae14d2fa317/4d5ea8e0edfe63bbd0327a47f5c07919d66bf4a0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d06bf319-05d7-4322-9eb8-9ae14d2fa317/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Thu 02 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 52227
                          IP: 200.12.146.0/24
                          IP: 2801:17:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16955860 (0x102b9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Jan  2 05:00:00 2025 GMT
        Subject: CN=4d5ea8e0edfe63bbd0327a47f5c07919d66bf4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:f4:d6:37:7d:78:9d:63:5e:28:31:54:6a:
                    4e:5b:6c:bb:7b:7e:e8:b8:78:a1:5c:c2:fa:d1:1c:
                    f0:43:9e:0f:0c:1e:18:e9:d0:e4:85:28:d7:bf:fc:
                    04:b4:61:c4:bf:2d:31:5d:68:26:9b:8b:ae:89:23:
                    39:17:b2:5d:b4:8c:0a:14:2b:b1:ca:64:b9:fe:48:
                    28:8e:2e:f0:7a:17:ef:50:f4:fb:45:01:b1:d8:4f:
                    e9:59:8f:76:d3:31:5c:d3:b8:3e:a7:2c:80:2b:e4:
                    ea:47:eb:e4:3c:b4:30:94:bf:82:2d:ca:b6:f0:e3:
                    66:84:85:97:b4:98:a6:ad:49:9c:2b:59:d0:ac:85:
                    f3:f7:46:eb:eb:2a:f2:57:f5:f7:31:7b:09:b4:c2:
                    d7:9b:bd:05:2e:80:f5:2c:0f:6f:00:ac:7a:f9:79:
                    27:84:fe:3b:a2:66:a2:92:c8:46:52:3f:37:44:f5:
                    af:5e:77:0d:21:2d:75:5c:17:c7:84:82:c0:f9:ba:
                    c5:fe:c1:0c:f0:6d:2d:ee:54:0b:f3:4d:49:05:7b:
                    f8:f5:c0:86:a9:51:a5:59:e4:57:9a:52:3f:0e:34:
                    5e:8b:ca:01:2f:c5:d2:6e:c2:62:65:31:a6:7f:6e:
                    b7:28:51:cb:b7:c3:01:a6:1b:43:3c:cc:07:61:c9:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:8A:60:23:56:62:D1:02:0E:BA:D7:0C:30:00:96:3D:29:C0:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d06bf319-05d7-4322-9eb8-9ae14d2fa317/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d06bf319-05d7-4322-9eb8-9ae14d2fa317/4d5ea8e0edfe63bbd0327a47f5c07919d66bf4a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.146.0/24
                IPv6:
                  2801:17:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52227

    Signature Algorithm: sha256WithRSAEncryption
         15:60:16:19:3a:dc:a3:42:67:d3:12:43:27:02:01:28:52:cf:
         70:eb:7d:e8:87:a1:6f:92:f4:c7:16:0e:bd:ad:24:13:0b:f4:
         f6:4f:34:16:99:9b:13:2a:bb:58:50:eb:63:d2:b8:25:a5:5b:
         03:81:12:94:e0:fb:d7:eb:10:7d:b5:9b:9b:81:7a:03:69:10:
         a8:77:c6:c1:49:3d:0d:e8:e2:36:92:67:59:da:87:bc:07:0b:
         a0:d3:c3:7b:ae:71:c0:fb:72:ac:ec:60:37:61:8d:cc:18:ec:
         eb:5b:04:a7:35:e3:bd:b2:25:91:3c:92:14:d7:e9:c8:60:2a:
         a7:55:01:23:bf:06:2c:0c:97:94:ee:ce:ce:d4:fe:14:37:d3:
         c6:10:34:95:7f:1c:d4:42:2b:a4:e4:d9:55:e6:9b:80:da:79:
         38:4f:2a:1f:09:e5:b1:3a:e4:cf:ee:7b:30:32:70:80:56:2e:
         24:c9:7e:68:c6:f5:12:87:8c:3e:6d:5a:43:14:33:91:7d:52:
         17:26:40:a1:af:64:3d:bd:6e:df:6b:79:34:91:b4:38:a2:31:
         9b:82:46:a8:55:4f:0d:f2:f7:88:3c:c5:86:cf:5d:44:0c:99:
         61:85:76:b3:45:84:0a:2e:c4:04:03:c7:40:14:72:63:82:bf:
         27:c7:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----