Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b91e74406d13ac527977ca1f278bb19b34c53d84.cer
File:                     b91e74406d13ac527977ca1f278bb19b34c53d84.cer (raw, json)
Hash identifier:          a1lEgCDD7JF65U3WFitq2/4dh2x8/Np6RY3nXZ7TSlw=
Subject key identifier:   30:62:C6:2C:63:A4:21:14:B5:7E:B4:1C:1C:3B:E8:EC:FE:E4:81:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100A762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/b91e74406d13ac527977ca1f278bb19b34c53d84.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Mon 09 Dec 2024 03:44:14 +0000
Subordinate resources:    AS: 265651
                          IP: 170.83.58.0/24
                          IP: 2801:16:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16820066 (0x100a762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec  9 03:44:14 2024 GMT
        Subject: CN=b91e74406d13ac527977ca1f278bb19b34c53d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:f2:e7:0f:00:3e:9f:61:d8:e7:f4:27:16:
                    ce:d2:4c:b7:25:e0:ee:a1:ac:a3:23:84:8c:df:7d:
                    7d:ec:a0:c8:e6:21:c9:8b:7c:e7:a4:71:d0:38:e8:
                    79:d4:90:32:d7:06:e4:7b:b6:32:c1:97:b0:70:7c:
                    fe:03:e6:6e:89:da:63:92:7d:49:d6:b1:c7:a0:03:
                    76:6b:c1:59:4b:cb:d8:3f:d1:e6:78:8e:da:aa:b8:
                    ae:10:b8:e0:fc:1a:29:9a:ec:5f:6e:b5:01:18:4a:
                    ed:5a:14:12:d3:10:57:4d:03:42:83:ec:bd:d9:c6:
                    60:41:0d:3d:bf:9e:a1:5c:ff:8d:4f:e0:02:df:9b:
                    53:c7:fb:97:44:59:dc:f5:e2:cd:58:5c:6a:e8:f9:
                    82:8e:44:06:a7:38:2d:79:67:0e:5c:88:1d:16:74:
                    a6:fd:81:42:54:e4:c6:0c:ef:5d:52:ba:f2:7c:36:
                    d7:e1:22:28:cd:ca:1f:bf:d5:d8:4f:11:3e:3d:2c:
                    5e:a4:c6:e2:69:f2:0f:6b:8e:a9:df:2f:6f:82:f3:
                    f1:61:aa:04:68:6f:13:ee:bd:fd:6a:a6:fa:30:49:
                    bf:6e:8e:cb:f9:97:e1:ae:1b:6a:e3:d0:ba:70:3d:
                    90:43:7f:67:a2:2e:d3:d1:d6:5c:a8:16:36:00:f0:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:C6:2C:63:A4:21:14:B5:7E:B4:1C:1C:3B:E8:EC:FE:E4:81:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/b91e74406d13ac527977ca1f278bb19b34c53d84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.58.0/24
                IPv6:
                  2801:16:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265651

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:b5:fc:2d:d1:de:bf:da:fa:ee:52:d1:be:c6:1e:bc:0c:
         45:1e:75:23:3d:5e:c5:ba:d0:39:d4:02:6f:ea:70:e8:a5:ee:
         61:93:df:3b:b8:50:86:47:03:df:e9:81:a6:68:a8:ec:e3:d3:
         e0:d2:c2:a7:84:31:04:5b:3e:82:ec:5f:77:73:ae:85:40:be:
         7f:83:03:04:ec:32:14:c2:cd:e8:a9:77:54:8d:c7:ff:e5:c4:
         f8:90:b0:e1:80:0f:40:4a:9f:af:9d:39:97:f3:3c:7f:d0:01:
         83:91:48:97:58:ba:31:16:cd:c2:4c:47:47:c4:d4:46:03:80:
         3a:ad:78:09:90:5e:2c:44:b1:f1:ce:50:78:b1:4d:53:b3:af:
         44:38:48:a3:bb:e7:91:7e:28:e1:fd:ed:f0:86:9c:24:ba:7a:
         aa:5c:48:3d:c3:26:b8:17:4a:22:84:dd:bb:9c:24:b3:d0:e9:
         bc:09:61:f2:8c:57:22:9b:4f:8d:df:c4:20:7f:86:98:6e:24:
         5d:8b:fc:a9:80:68:6c:de:3b:3d:cf:7c:fc:31:83:f2:35:18:
         4f:9e:f5:64:79:cc:12:bf:fd:86:9d:82:16:0c:c8:3d:bd:1c:
         c0:33:5c:d4:47:81:5b:60:fd:76:96:ae:ae:1f:ba:a1:36:00:
         12:2c:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----