Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
File:                     5494bd71484d106b75c5bedf4263f48281a4e409.cer (raw, json)
Hash identifier:          fImBZ9Y4k2CMa11jwgBjJDh/P0lDxr8plXyIbT5vumM=
Subject key identifier:   4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01040B9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/5494bd71484d106b75c5bedf4263f48281a4e409.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:32 +0000
Certificate not after:    Wed 15 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 6147
                          AS: 264684
                          IP: 170.79.36.0/22
                          IP: 181.64.0.0/14
                          IP: 190.40.0.0/14
                          IP: 190.232.0.0/13
                          IP: 200.4.192.0/18
                          IP: 200.10.64.0/19
                          IP: 200.37.0.0/16
                          IP: 200.48.0.0/16
                          IP: 200.60.0.0/16
                          IP: 200.106.0.0/17
                          IP: 200.107.128.0/18
                          IP: 200.121.0.0/16
                          IP: 201.131.220.0/22
                          IP: 201.230.0.0/16
                          IP: 201.240.0.0/16
                          IP: 2001:1388::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17042330 (0x1040b9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:32 2017 GMT
            Not After : Jan 15 14:00:00 2025 GMT
        Subject: CN=5494bd71484d106b75c5bedf4263f48281a4e409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:fb:20:75:8e:53:dd:e9:3d:c1:fe:6c:0f:
                    72:13:8a:bd:ba:da:a3:3d:fe:42:2d:44:1c:62:70:
                    70:57:45:33:08:29:12:28:de:dd:b0:81:2f:a0:d4:
                    0f:51:f9:36:ea:fe:52:8e:37:76:71:6c:85:78:68:
                    ff:8f:cd:65:bf:8d:73:a7:40:5f:08:79:25:b6:0d:
                    d9:fe:0e:0e:53:3a:8a:67:40:74:d8:ab:ff:84:77:
                    d3:0f:57:de:54:54:60:c3:f2:76:d1:27:d4:a9:2a:
                    30:1e:1c:a6:45:da:45:34:74:9e:5e:2c:c2:31:d6:
                    59:66:a7:00:d6:d9:5f:60:15:44:85:72:3b:97:0e:
                    d3:cf:2e:ee:11:03:b8:ca:07:10:f0:86:10:7f:7d:
                    26:2b:a1:41:96:6e:77:4d:03:55:67:a9:f1:f8:81:
                    51:0b:c9:44:8a:20:d6:62:49:24:0f:5d:64:55:2a:
                    fd:2c:c7:aa:09:76:5b:16:b3:51:ea:8a:91:3a:f7:
                    8b:ff:26:59:c6:64:3a:ec:51:2e:cc:2f:a5:2f:bf:
                    be:81:19:88:02:1e:ef:a4:8e:b3:16:97:bf:3f:8a:
                    63:bb:8d:7f:ee:bb:9b:44:5d:ee:2a:fe:e0:00:c7:
                    08:cd:66:8f:67:1a:8a:4e:d7:58:67:76:29:ba:e4:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/5494bd71484d106b75c5bedf4263f48281a4e409.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.36.0/22
                  181.64.0.0/14
                  190.40.0.0/14
                  190.232.0.0/13
                  200.4.192.0/18
                  200.10.64.0/19
                  200.37.0.0/16
                  200.48.0.0/16
                  200.60.0.0/16
                  200.106.0.0/17
                  200.107.128.0/18
                  200.121.0.0/16
                  201.131.220.0/22
                  201.230.0.0/16
                  201.240.0.0/16
                IPv6:
                  2001:1388::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6147
                  264684

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:5c:8e:27:cd:48:ec:dc:b8:7b:24:b9:d6:63:71:ad:08:
         54:ea:21:e0:a5:03:a2:38:ed:17:f3:e2:8f:96:b2:e6:b1:b1:
         c7:50:1c:1f:9f:fb:84:3c:bc:84:d2:75:d7:12:e0:e3:25:29:
         60:5f:fc:43:21:78:7a:3e:d5:50:26:3a:30:34:d9:93:02:bd:
         0c:e8:6f:9e:e7:49:61:04:e2:64:17:1a:79:70:b5:58:e4:fc:
         7b:0c:57:37:fa:c6:6e:66:3a:1f:e4:8e:3e:9b:4a:16:70:56:
         fe:ce:7f:84:f6:5e:23:94:98:33:61:34:a4:12:c9:13:9b:12:
         54:bf:5e:9f:c3:38:0f:01:c9:26:a5:58:50:3f:b5:84:19:0b:
         29:29:db:6f:a4:ba:70:95:fa:eb:df:2d:f9:51:d1:ee:71:93:
         d7:59:15:a4:fe:8f:d9:ae:43:da:ca:b7:a2:2e:56:0e:10:d2:
         f3:b6:76:0b:06:de:34:92:8c:8b:15:79:2f:47:ac:24:b7:3b:
         b0:a3:b7:3f:f3:7f:dc:d7:5e:96:5d:51:5e:fd:b7:36:95:9e:
         00:90:6e:11:41:b8:94:c4:4b:10:bb:01:03:a3:56:96:b5:23:
         26:3e:d5:69:da:ec:1b:e7:0f:81:d4:39:1f:39:99:89:5b:74:
         ae:79:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----