Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.cer
File:                     6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.cer (raw, json)
Hash identifier:          KB4+SujqcAKFdOxCJf2KV4+N677olNvGhq4mfoHq12I=
Subject key identifier:   F0:F8:A3:29:D1:70:0E:69:A0:11:CD:FA:91:15:76:DB:F2:5F:E6:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103B3C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:27 +0000
Certificate not after:    Sun 12 Jan 2025 21:44:34 +0000
Subordinate resources:    AS: 263177
                          IP: 191.102.48.0/21
                          IP: 2803:6a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17019845 (0x103b3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:27 2017 GMT
            Not After : Jan 12 21:44:34 2025 GMT
        Subject: CN=6f63bdebc6ab31c585ea9675b89e3bf14b7ca837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:f6:9f:85:4b:7b:ab:0b:d1:b8:e3:71:90:
                    fa:48:e9:38:2c:4e:8d:04:59:ec:bb:67:7f:9e:df:
                    b5:76:84:ab:57:1e:ed:bf:f7:60:1d:28:1c:5b:fa:
                    31:97:81:16:d4:44:9b:8d:2b:81:13:5e:92:f2:a1:
                    49:fd:3a:7f:f3:25:0e:3b:80:b8:36:47:fe:d6:b8:
                    8a:a1:a0:62:c4:6e:d5:fe:50:a8:f9:4d:89:e6:71:
                    09:55:4d:bf:64:8d:f0:fe:72:d8:e7:75:6d:df:61:
                    03:44:94:bc:4f:67:1c:00:85:70:08:e3:e3:ad:52:
                    3d:7e:1b:e4:45:62:78:31:c5:ae:63:e4:27:de:3c:
                    f7:d9:cd:3f:23:8c:68:08:76:ca:1c:cf:82:08:0e:
                    3b:ff:26:36:a7:90:ff:73:ab:6b:bc:f7:fe:d4:cc:
                    6c:3f:42:0e:c3:1d:7b:85:b7:cd:a2:ab:21:3b:7e:
                    74:5f:cc:60:a3:60:7d:0b:32:b9:3d:d8:bc:80:4d:
                    5e:ee:19:39:21:52:fd:3f:2e:15:69:55:a9:4f:95:
                    10:8b:25:f8:f9:c7:78:5b:f5:2a:e8:21:bc:68:da:
                    30:89:6e:f3:c7:8a:6a:e7:b8:78:42:bc:32:9e:98:
                    c4:f0:30:56:2c:42:8b:00:89:cd:80:65:e8:58:c8:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:A3:29:D1:70:0E:69:A0:11:CD:FA:91:15:76:DB:F2:5F:E6:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.48.0/21
                IPv6:
                  2803:6a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263177

    Signature Algorithm: sha256WithRSAEncryption
         52:18:a2:63:02:fa:51:bd:69:46:95:85:f4:42:78:db:7c:85:
         c1:14:c8:19:37:56:6e:9e:80:89:60:d4:22:80:b8:c3:f5:1e:
         00:a0:f8:15:d7:c0:65:2e:9b:f6:fb:ec:77:d4:a5:ea:4b:41:
         02:0b:8f:7e:e5:67:59:94:0c:0a:d8:2d:75:02:7e:30:cd:d0:
         a8:e1:e6:c7:e5:fc:da:fb:5f:ce:c3:bd:15:07:25:e6:57:7b:
         eb:63:2e:d0:73:2d:db:6c:89:04:0b:cd:5a:e2:f3:ea:c5:51:
         20:7a:f8:c2:ab:a4:81:a8:aa:d5:ce:64:17:3d:d1:bc:dc:fd:
         55:f2:15:9c:e9:26:b6:39:ab:9d:5c:8e:ce:1b:5d:e6:27:73:
         cf:92:f2:97:6e:51:63:ba:39:f1:26:2e:31:f9:a4:f9:2c:78:
         5f:c3:2f:5b:17:6e:b8:60:19:80:a4:c4:3e:43:05:0d:44:ab:
         16:59:62:d4:73:2e:b7:33:04:2e:c7:d1:48:e8:8d:02:32:25:
         99:0c:81:b6:a9:03:ff:a8:bf:32:1d:ae:21:b3:e2:16:4d:cd:
         68:93:17:4a:9c:54:99:0c:00:a8:f8:76:bc:3c:2b:fb:29:52:
         56:60:e4:f4:1f:33:b2:88:16:9e:f3:aa:28:77:63:a7:c0:bc:
         04:5c:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----